last executing test programs: 3m14.682716162s ago: executing program 32 (id=34): setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x38) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x2, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) r3 = syz_io_uring_setup(0x315b, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)) syz_open_dev$loop(0x0, 0x75f, 0xa382) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x3cf56150fdacbfe7, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) clock_adjtime(0x0, &(0x7f00000006c0)={0x7ffd, 0x1000000007fff, 0x0, 0x4, 0x10000000000001, 0x7, 0x186a1, 0x6, 0x80000004a, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xa, 0x5, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c646973636172642c726f6469722c696f636861727365743d6d6163637972696c6e69632c636865636b3d7374726963742c756e695f786c6174653d312c756e695f786c6174653d302c696f636861727365743d6d6163726f6d616e00806e2c73686f72746e616d653d6d697865642c00d4"], 0x1, 0x253, &(0x7f0000000ec0)="$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") chdir(&(0x7f0000000300)='./file0\x00') 3m7.253061586s ago: executing program 33 (id=58): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x87, 0x80, 0xfc, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x3, 0x5}}}}}]}}]}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000004000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x6, 0xf3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r5}, 0xc) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect(0x3, 0x50, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000008c0)={r7, &(0x7f0000000680), &(0x7f0000000880)=""/37}, 0x20) syz_usb_connect$uac2(0x4, 0xd9, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0xb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x5, 0x20, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0xa, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x5, 0x15, 0x3}, [@output_terminal={0xc, 0x24, 0x3, 0x4, 0x307, 0x3, 0x3, 0x7, 0xff, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x6, 0x0, 0x3, 0x5, 0x2, 0xbf7, 0xe}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x4, 0x5, "30cb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf8, 0x1, 0x0, {0x8, 0x25, 0x1, 0x81, 0x3f, 0x3, 0x4ed8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xfd, 0x2, 0x6, 0x8, "ee", "30ec60"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x2}, @as_header={0x10, 0x24, 0x1, 0x0, 0x1, 0x2, 0x1, 0x7f, 0x1, 0x5}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x5b}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x6, 0x7, 0xb}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0xf8}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x6, 0x3, {0x8, 0x25, 0x1, 0x81, 0x3c, 0x3, 0x4}}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x1, 0x2, 0x8, 0x20, 0x1c}, 0x106, &(0x7f0000000740)={0x5, 0xf, 0x106, 0x2, [@generic={0xf6, 0x10, 0x3, "0f989f26bf9e78cf7f2235dfee0b6c41d6c0cf1c0ae3c9fa1bc96c95ed880841755c6c42e8b5ebd09324a5863c62b60acd71ac2d9d73b10a93212959922de1a1d8bfc6db86704abe660689cd6c40705d1993199c7a3560d7f8f5c0b6e77324cf5bd0ace8ca5d0d500b097075d11665ff8c6011043f1e52f1e7d14d7b36d5be9932d26c2df16fc024f29f6552d6913b8ebc4a012a34601f0452e7b4f457186efa56d0efca46dc6b4277d02267fed33900940a7d51eaed063412e8797d5b9277a1a1df0ff4b0969a626406368d30997a6dc5fd385e83886ad346624610638e80927ff945eaadf806a08e75ce25fcb00aed41ed6a"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x7, 0x6, 0x2ed, 0x1a}]}, 0x3, [{0x48, &(0x7f00000008c0)=@string={0x48, 0x3, "9756161d7701bac92a504710ae87866c9f3670b3f5266da06d2ebb5a299f1f6313ccbf792d6721d591972fcddf5ab0b609495a874c459c1d5f50f548eb87d115855ee89ffe17"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x41a}}, {0xc2, &(0x7f0000000980)=@string={0xc2, 0x3, "a687f9d7b2f7ffa949f4a05d4dfb01516e9581209646780605dbd90ad955061f5cdcb5234553e6b4f06b7a1d1e68483c9786f0216389ef2c0465f7f37893c74432742909dc0839a8c97dbaf01527973a6839a38e686f12168d0cd18f291fe58f7b13a946b4e90a18ac3aa0195001a0de57d4b524ed473779536874bf808232d9025dfa8c2c2de944c03c7da0cec76cd2d9a70ba6b3b6fc99d9e37c03ecb8e130144f40458f0e6451134dfe62b477fcc6aacf0fac244a1ed83ebdff1c1d0b74cc"}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = syz_io_uring_setup(0x37d3, &(0x7f0000000080)={0x0, 0x54f9, 0x1, 0x3, 0xffffffff}, &(0x7f0000000440), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r8, 0x6516, 0x6d93, 0x8, 0x0, 0x0) syz_usb_ep_write(r6, 0x83, 0x0, 0x0) syz_usb_ep_read(r6, 0x4, 0x0, 0x0) syz_usb_ep_write(r6, 0x83, 0x0, 0x0) 3m3.392118894s ago: executing program 34 (id=92): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 3m1.050498989s ago: executing program 35 (id=119): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}, 0x1, 0x8000000, 0x100000000000000}, 0x0) 2m18.428198306s ago: executing program 36 (id=383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="4eaa0000000000007110920000000000950000000000000035ccb6471f007a1a00"/46], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x32) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', r0, 0x4000, r0}, 0x18) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r2, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3a}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1385}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4011) syz_clone3(&(0x7f0000000200)={0x100, &(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x2e}, &(0x7f0000000300)=""/77, 0x4d, &(0x7f0000000280)=""/26, &(0x7f00000001c0), 0x0, {r1}}, 0x58) capset(&(0x7f0000000040)={0x20071026, r3}, &(0x7f00000007c0)={0x4, 0x8001, 0x0, 0x0, 0xb, 0xfffffffd}) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg$inet(r4, &(0x7f00000003c0), 0x0, 0x24040000) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1710"], 0x48) 2m15.058491249s ago: executing program 37 (id=402): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x19, 0x4, 0x4, 0x100, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x8, 0xff, 0x9cea8d1, 0x0, 0x2}) 1m37.834446032s ago: executing program 38 (id=610): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) write(r0, &(0x7f0000002080)="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", 0xffc) 1m18.046032382s ago: executing program 2 (id=747): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe, &(0x7f0000006680)) r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000c6000/0x3000)=nil, 0x3000}, 0xc, 0x2}) 1m17.922501828s ago: executing program 2 (id=748): r0 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x1, 0x152a, &(0x7f0000003f80)="$eJzs3AuYTlXbOPD7XmvtMTTpaZLDsNa6N09yWCRJDklySJLUK0lOCUmTvJKQGHJKGpKQHIbkMITkMDFpnM9nSUiSJklCckrW/5qYT33V/32/93vf13e9c/+u67mse/a+1773vp/9PHtvzLddh9VuUqdGIyKC/xW8+EcSAMQCwCAAuAYAAgCoEF8hPmt5bolJ/7uNsH+uh1KvdAXsSuL+52zc/5yN+5+zcf9zNu5/zsb9z9m4/zkb95+xnGzLjELX8ivnvvj5f07G3///GS6dfPDlujLXdwOI+XvzuP85G/f/P1bw96zE/c/ZuP85VeyVLoD9H8Dnf06Q60+XcP9zNu4/YznZlX7+fKVfEMnZx+BKv/8YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOUMZ/xlCgCyx3+8dty/uzzGGGOMMcYYY4z9E/hcV7oCxhhjjDHGGGOM/eshCJCgIIAYyAWxkBvygACAqyEvXAMRuBbi4TrIB9dDfigABaEQJEBhKAIaDMQAQQhFoRhE4QYoDjdCCSgJpaA0OCgDZeEmKAc3Q3m4BSrArVARboNKUBmqQFW4HarBHVAd7oQacBfUhFpQG+rA3VAX7oF6cC/Uh/ugAdwPDeEBeBD+Ao3gIWgMD0MTeASawqPQDJpDC2gJrf6h/BegJ7wIvaA3JEEf6AsvQT/oDwNgIAyCl2EwvAJD4FVIhqEwDF6D4fA6jIA3YCSMgtHwJoyBt2AsjIPxMAFSYCJMgrdhMrwDU2AqTIPpkAozYCa8C7NgNsyB92AuvA/zYD4sgIWQBh/AIgWQDh/CEvgIMmApLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg+2wAz6GnfAJ7IJPYTfsgb3wGeyDz//u/DgA2Amn/1t+NwQEFChQocIYjMFYjMU8mAfjMA7zYl6MYATjMR7zYT7Mj/mxIBbEBEzAIlgEDRokJCyKRTGKUSyOxbEElsBSWAodOiyLZbEc3ozlsTxWwApYEStiJayMlbEqVsVqWA2rY3WsgTWwJtbE2lgb78a7sQ/Ww3pYH+tjA2yQ/XgKG2EjbIyNsQk2wabYFJthM2yBLbAVtsLW2BrbYBtsh+2wPbbHDtgBEzERO2JH7ISdsDN2xi7YBbtiV+yG3bF75gu5AF/EF7E31hR9sC/2xX6YnGsADsSB+DIOxlfwFXwVk3EoDsPX8DV8HUfgKRyJo3A0jsZq4i0ci+OQxARMwRSchJNwMk7GKTgVp+J0TMUZOBNn4iycjbPxPZyL7+P7OB/n40JMwzRchIsxHdNxCZ7GDFyKy3A5rsCVuAJX4xpcjetwPa7DjbgRN+Nm3IpbcTtux4/xY/wEFQB+intwDybjPtyH+3E/HsADeBAPYiZm4iE8hIfxMB7BI3gUj+IxPI4n8DiexJN4Ck/jGTyD5/AcnsfnEr5u/EnJtckgsiihRIyIEbEiVuQReUSciBN5RV4RERERL+JFPpFP5Bf5RUFRUCSIBFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOFFWlBXlRDlRXpQXFcStoqK4TVQSlUVbV1VUFdVEO1dd3ClqiBqipqglaos6oo6oK+qKeqKeqC/qiwaigWgoHhAPij44AB8SWZ1pIoZiUzEMm4nmQl76BGstRmAb0Va0E0+IUTgSO4jWLlE8LTqKsdhJ/FWMw2dFFzEBu4rnRTfRXfQQL4ieoo3rJXqLKdhH9BXTsZ/oLwaIgWIW1hLv4dzctcWrIlkMFcPEa2Ihvi5GiDfESDFKjBZvijHiLTFWjBPjxQSRIiaKSeJtMVm8I6aIqWKamC5SxQwxU7wrZonZYo54T8wV74t5Yr5YIBaKNPGBWCQWi3TxoVgiPhIZYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLLWKr2Ca2ix3iY7FTfCJ2iU/FbrFH7BWfiX3ic7FffCEOiC/FQfGVyBRfi0PiG3FYfCuOiO/EUfG9OCaOixPiB3FS/ChOidPijDgrzomfxHnxs7ggvACJUkgplQxkjMwlY2VumUdeJeNkcOnoXivj5XUyn7xe5pcFZEFZSCbIwrKI1NJIK0mGsqgsJqPyBllc3ihLyJKylCwtnSwjy8qbZDl5sywvb5EV5K2yorxNVpKVZRVZVd4uq8k7JEQubqOmrCVryzrybpkE98h68l5ZX94nG8j7ZUOZ/YD6IdlYPiybyEdkU/mobCabyxaypWwlH5Ot5eOyjWwr28knZHv5pOwgn5KJ8mnZUfpLb5FnZRf5nOwqn5fdZHfZQ/4sL0gve8neEvqA7Ctfkv1kfzlADpSD5MtysHxFDpGvymQ5VA6Tr8nh8nU5Qr4hR8pRcrR8U46Rb8mxcpwcLyfIFDlRTpJvy8nyHTlFTpXT5HSZKmfIAZdmmiPl38x/+w/yh/yy9c1yi9wqt+GlQyA/kbvkLrlb7pZ75V65T+6T++V+eUAekAflQZkpM+UheUgeloflEXlEHpVH5TF5XJ6VP8iT8kd5Sp6Wp+VZeU6ek+cvHQNQqISSSqlAxahcKlblVnnUVSpOXa3yqmtURF2r4tV1Kp+6XuVXBVRBVUglqMKqiNLKKKtIhaqoKqai6obsKlUpVVo5VUaVVTf9T/JVcXWjKqFK/iY/u76kP6mvlWqlWqvWqo1qo9qpdqq9aq86qA4qUSWqjqqj6qQ6qc6qs+qiuqiuqqvqprqpHqqH6ql6ql6ql0pSSaqvekn1U/3VADVQDVIvq8FqsBqihqhklayGqWFquBquRqgRaqQaqUar0WqMGqPGqrFqvBqvUlSKmqQmqclqspqipqhpappKValqppqpZqlZao6ao+aquWqemqcWqAUqTaWpRWqRSlfpaolaojLUUrVULVfL1Uq1Uq1Wq9VatVatV+vVRrVRZagtaovaprapHWqH2ql2ql1ql9qtdqu9aq/ap/ap/Wq/OqAOqIPqoMpUmeqQOqQOq8PqiDqijqqj6pg6pk6oE+qkOqlOqVPqjDqjzqlz6rw6ry6oC1mXfYEIRKCCrPMsJogNYoM8QZ4gLogL8gZ5g0gQCeKD+CBfcH2QPygQFAwKBQlB4aBIoAMT2EBcano0uCEoHtwYlAhKBqWC0oELygRlg5uCcsHNQfnglqBCcGtQMbgtqBRUDqoEVYPbg2rBHUH14M6gRnBXUDOoFdQO6gR3B3WDe4J6wb1B/eC+oEFwf9AweCB4MPhL0Ch4KGgcPBw0CR4JmgaPBs2C5kGLoGXQ6p86v/enCjzuNuveOkn30X31S7qf7q8H6IF6kH5ZD9av6CH6VZ2sh+ph+jU9XL+uR+g39Eg9So/Wb+ox+i09Vo/T4/UEnaIn6kn6bT1Zv6On6Kl6mp6uU/UMPVO/q2fp2XqOfk/P1e/reXq+XqAX6jT9gV6kF+t0/aFeoj/SGXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sd+mO9U3+id+lP9W69R+/Vn+l9+nO9X3+hD+gv9UH9lc7UX+tD+ht9WH+rj+jv9FH9vT6mj+sT+gd9Uv+oT+nT+ow+q8/pn/R5/bO+oH3WxX3W17tRRpkYE2NiTazJY/KYOBNn8pq8JmIiJt7Em3wmn8lv8puCpqBJMAmmiClispAhU9QUNVETNcVNcVPClDClTCnjjDNlTVlTzpQz5U15U8FUMBVNRVPJVDJVTBVzu7nd3GHuMHeaO81d5i5Ty9QydUwdU9fUNfVMPVPf1DcNTAPT0DQ0D5oHTSPTyDQ2jU0T08Q0NU1NM9PMtDAtTCvTyrQ2rU0b08a0M+1Me9PedDAdTKJJNB1NR9PJdDKdTWfTxXQxXU1X0810Mz1MD9PT9DS9TC+TZJJMX9PX9DP9zAAzwAwyg8xgM9gMMUNMskk2w8wwM9wMNyPMCDPSjDKjs04f85YZa8aZ8WaCSTEpZpKZZCabyWaKmWKmmWkm1aSamWammWVmmTlmjplr5pp5Zp5ZYBaYNJNmFplFJt2kmyVmickwGWaZWWZWmBVmlVll1pg1Zp1ZZzbABrPJbDJbzBazzWwzO8wOs9PsNLvMLrPb7DZ7zV6zz+wz+81+c8AcMAfNQZNpMs0hc8gcNofNEXPEHDVHzTFzzJwwJ8xJc9KcMqfMGXPGnDMFLn1fehNrc9s89iobZ6+2ee019r/HBW0hm2AL2yJW2/y2wG9iY60tYUvaUra0dbaMLWtv+l1cyVa2VWxVe7utZu+w1X8X17X32Hr2Xlvf3mfr2Lt/Ezew99uG9hH7ICKAbW4b25a2iX3ENrWP2ma2uW1hW9r29knbwT5lE+3TtqN95nfxIrvYrrFr7Tq73u62e+wZe9Yett/ac/Yn28v2toPsy3awfcUOsa/aZDv0d/Fo+6YdY9+yY+04O95O+F08zU63qXaGnWnftbPs7N/FafYDO9em23l2vl1gF/4SZ9WUbj+0S+xHNsMGsMwutyvsSrvKrv6vWpfbjXaT3Wx32U/tNrvd7rAf253ZF8J2j91rP7P77Of2kP3GHrBf2oP2iM20X/8SZ+3fEfudPWq/t8fscXvC/mBP2h9VdnbWvv9gf7YXrLdASECSFAUUQ7kolnJTHrqK4uhqykvXUISupXi6jvLR9ZSfClBBKkQJVJiKkCZDlohCKkrFKEo3UHZ5pag0OSpDZekmKkc3U3m6hSrQrVSRbqNKVJmqUFW6narRHVSd7qQadBfVpFpUm+rQ3VSX7qF6dC/Vh/uoAd1PDekBepD+Qo3oIWpMD1MTeoSa0qPUjJpTC2pJregxak2PUxtqS+3oCWpPT1IHeooS6WnqSM9QJ/ordaZnqQs9R13peepG3akHvUA96UXqRb0pifpQX3qJ+lF/GkADaRC9TIPpFRpCr1IyDaVh9BoNp9dpBL1BI2kUjaY3aQy9RWNpHI2nCZRCE2kSvU2T6R2aQlNpGk2nVJpBM+ldmkWzaQ69R3PpfZpH82kBLaQ0+oAW0WJKpw9pCX1EGbSUltFyWkErKaDVtIbW0jpaTxtoI22izbSFttI22k476GPaSZ/QLvqUdtMe2kuf0T76nPbTF3SAvqSD9BVl0td0iL6hw/QtHaHvfG/6no7RcTpBP9BJ+pFO0Wk6Q2fpHP1E5+lnukCeIMRQhDJUYRDGhLnC2DB3mCe8KowLrw7zhteEkfDaMD68LswXXh/mDwuEBcNCYUJYOCwS6tCENqQwDIuGxcJoeENYPLwxLBGWDEuFpUMXlgnLhjeF5cKbw/LhLWGF8NawYnhbWCmsHD5yX9Xw9rBaeEdYPbwzrBHeFdYMa4W1wzrh3WHd8J6wXnhvWD+8Lywf3h82DB8IHwz/EjYKHwobhw+HTcJHwqbho2GzsHnYImwZtgofC1uHj4dtwrZhu/CJsH34ZNghfCpMDJ8OO4bP/LL8/sV/vjwp7BP2DV8KXwq9v1cuiC6MpkU/iC6KLo6mRz+MLol+FM2ILo0uiy6ProiujK6Kro6uia6Nrouuj26Iboxuim6Oel8nFzh0wkmnXOBiXC4X63K7PO4qF+eudnndNS7irnXx7jqXz13v8rsCrqAr5BJcYVfEaWecdeRCV9QVc1F3gyvubnQlXElXypV2zpVxZV1L18q1cq3d466Na+vauSfcE+5J96R7yj3lnnYd3TOuk/ur6+yedV3cc+4597zr5rq7Hu4F19NNzHvxnExyfV1f18/1cwPcADfIDXKD3WA3xA1xyS7ZDXPD3HA33I1wI9xIN9KNdqPdGDfGjXVj3Xg33qW4FDfJTXKT3WQ3xU1x09w0l+pS3Uw3081ys1y12Re3Ms/NcwvcApfm0twil3XNmO6WuCUuw2W4ZW6ZW+FWuFVulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb5Xa53f6ai5O6fW6/2+8OuAPuoPvKZbqv3SH3jTvsvnVH3HfuqPveHXPH3Qn3gzvpfnSn3Gl3xp1159xP7rz72V1w3qVEJkYmRd6OTI68E5kSmRqZFpkeSY3MiMyMvBuZFZkdmRN5LzI38n5kXmR+ZEFkYSQt8kFkUWRxJD3yYWRJ5KNIRmRpZFlkeWRFZGXE+8LbQl/UF/NRf4Mv7m/0JXxJX8qX9s6X8WX9Tb6cv9mX97f4Cv5WX9Hf5iv5yr6Kf9Q38819C9/St/KP+db+cd/Gt/Xt/BO+vX/Sd/BP+UT/tO/on/Gd/F99Z/+s7+Kf8139876b7+57+Bd8T/+i7+V7+yTfx/f1L/l+vr8f4Af6Qf5lP9i/4of4V32yH+qH+df8cP+6H+Hf8CP9KD865k0/JvsWGSb4FD/RT/Jv+8n+HbjTT/XT/HSf6mf4mf5dP8vP9nP8e36uf9/P8/P9Ar/Qp/kP/CK/2Kf7D/0S/5HP8EuzHyr7VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+E/9jv9J36X/9Tv9nv8Xv+Z3+c/9/v9F/6A/9If9F/5TP+1P+S/8Yf9t/6I/84f9d/7Y/64P+F/8Cf9j/6UP+3P+LP+nP/Jn/c/+wt/+n/WGGOMMcbYr028PBS/XXLxcX6fP8gRv1q5LwBcvb1Q5q+XZ11Rbsh/cdxfJLSPAMDTvbs+lP2qWTMpKenSuhkSgmLzAbL/JihLDFyOl0I7eBISoS2U+8P6+4vu5+hvzB+9FSDPr3Ji4XJ8ef4vADDpD+Z/7InRiyqGZ+L/P/PPByhR7HJObrgcL4V2vzxfaQvl/6T+Aq3/Rv25v0wBaPOrnDi4HF+uvyw8Ds9A4m/WZIwxxhhjjDHGLuovqnTOvv/M/heff3R/nqAu5+SCy/Hfuj9njDHGGGOMMcbYlfds9x5PPZaY2Lbz/3xQ/R/K+rsHTeFfNTMP/nDgPUD2TxQAdM5+j/xjEwJkDeS/cy+2/lu2lfxfhyX3b06iFWd9AP83WvnPGFyZzyPGGGOMMcbYv87li/7f/lxdqYIYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEc6N/x68Su9D4yxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9r/CwAA//8zifGY") r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, 0x0, 0x0, 0x40000020, 0x0, 0x0) shutdown(r3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000300)={[{@discard}, {@dmask={'dmask', 0x3d, 0x9}}, {@time_offset={'time_offset', 0x3d, 0x101}}, {@fmask={'fmask', 0x3d, 0x3}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@namecase}]}, 0x1, 0x1535, &(0x7f00000028c0)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, r6, 0x25, 0x0, @val=@perf_event={0x10000000000200}}, 0x18) sendmsg(r3, &(0x7f0000000780)={&(0x7f00000001c0)=@xdp={0x2c, 0x4, r6, 0x1d}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="2b733f831158308ec914867f00ceb456a8374a8db293f2ac2e707df8b2d059f58de4fee4425df4438012ffb799da7891482ebc4dcece2a447676543087614240a61f5bd4abffda1ddecf2d2f947c6f43640d6d00867c6e9e2874831e8ef3905351023fc9ba711c7aad4d031d66272da7a62f64b1640bc9258d2bf4e4fed57ec7f9d1cb5b298059e88362fb647e689a3849809b277dee87e8096112352301021da8b753df134f1307748df96a9c71491b99d44fe044b8864dc640f4a1aaf3c13da961e7561644c1cebdd5c6ca", 0xcc}, {&(0x7f0000000500)="21c0184d0b08ceea724b182b149c27be43522f43249f261de2a57183f8f40771ffd91a6390e7db9c55261aa0b04a03a54d82b151d5caebfa4177d78da5574c979a2cbf64d503a11ea6e0c06d2519671e2552de3ad42a1474f0b4b101d59a092b299d0bcb8306af6b49a02a94c311c7dd845a4dbfb193e13298901bf6fa16f8645c8b13e7dcc8f56bec045bb1bdf1e9593cca2efe12c15c262374ef277627c3e503f7ab0f3c0037fdc2f2de0156a886d7c390b32c43bdd9e2e7fd2c03db95622affc49fd9c463953df251bf78e121fd3498ac61cc", 0xd4}, {&(0x7f0000000640)="7b0f99b1dd29b9564d12aa99d31d45284d8b0178ccb7347413288c2fb9f58aeb6fbf2c2f", 0x24}, {&(0x7f0000000680)="38c2541bda06a8b60882e80ea8eda1b1b684faa4f564ab323d5891290f0ae7ad9910dfbb0df197577f5dd9678a615a56c9d381458405dbfcd1677842", 0x3c}], 0x4, &(0x7f0000000700)=[{0x38, 0xd, 0xd638, "c1eb9a76ca3e686b839236b3f05445d74771107a4f2a29379f468f0fc635b334cef490d5a721"}, {0x30, 0x2, 0x8, "6ab7fb3559910ff6c58fcfca96f834f88335018adbb28ca540027314"}], 0x68}, 0x4801) open_tree(0xffffffffffffff9c, 0x0, 0x9901) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) 1m17.549327998s ago: executing program 2 (id=754): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2a0471a, &(0x7f0000000900), 0x82, 0x48f, &(0x7f0000000380)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x42, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x2e8a, &(0x7f0000000140)={0x0, 0x859, 0x20, 0x3, 0x3a5, 0x0, r3}, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x16, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x61, 0x0, 0x2, 0x4}, {0x4}, {0x3, 0xfd, 0x1}, {0x0, 0x5, 0x0, 0x10000000}, {0x0, 0x0, 0x34}, {0x0, 0x0, 0xf8}, {0x400, 0x0, 0x0, 0xb}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa0}}, 0x1) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000001580)) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_emit_ethernet(0x109, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab90000000081d5455f9e751ff36b59ce5d00000086dd6080000000cf2f0000000000000000000000ffff7f000001ff02000000000000000000000000000100000800fcffffff0420880b002d000000000800000086dd080088be3419000010002000010000f2ffffffff070022eb"], 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000240)={0xeeee8000, 0x1c000}) r5 = syz_usb_connect$hid(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040d80402c000000000000109022200010100803209040000010300000009211101000122440007058103"], 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x18b341, 0x84) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) recvfrom$inet_nvme(r6, &(0x7f0000000a80)=""/152, 0x98, 0x62, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="002244000b214ea000000600ff0901a10185140902150026ff0075089502810285210903150026ff00750895018102859109041500b27967be7472bff39ccc2c3fd783790aa8ca42c7ef8b92473edbffab1b3dc5f833c5f6d2be394537f8e42f710c80875db61372784e861d0f77dcf1feba9881010374c02eceaafb3967735d211644b6f007e10c113f", @ANYRES32=r1, @ANYRES32=r2], 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYRES64=r3], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x10, '\x00', r7, @fallback=0xc, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000940)={0x17c04, 0xffffffffffffffff, 0x6, 0x8100000002}) 1m17.446490809s ago: executing program 1 (id=756): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000280)="18d36a471f0aec493448604c4819129103a19bb3dab534f7f627c2d2ed0fac6b8c5f851eee44cf5176c637f548c80a99076b89d4586a6742abc049715449c96cce6013d1cf39b741a6fdae2711d6a6699905480ae83c9eaa849d061bc7181db6d485a2c8ff6ea471626719ac2c5f47", &(0x7f0000000380)=""/52, &(0x7f0000000500)="98b97658aaf88817f6ea71525ee6f91d732e83a560ea5419ccb2bf2e835d095544619c0ab6f3f8e6160cb3978e29ab0ac9673895796e490e3d7484681e6a23573b", &(0x7f0000000580)="18bf202aa6c6f8dee7a6fccac23c4066489caa", 0x3800000, r2, 0x4}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff2, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r4, &(0x7f0000000300), 0x48) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@test_dummy_encryption}, {@debug}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xe2, 0x47c, &(0x7f0000000cc0)="$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") r5 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x6, 0xfe, 0x0, 0xffff}]}) getdents64(r5, 0x0, 0x0) (async, rerun: 64) quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m17.446217019s ago: executing program 39 (id=756): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000280)="18d36a471f0aec493448604c4819129103a19bb3dab534f7f627c2d2ed0fac6b8c5f851eee44cf5176c637f548c80a99076b89d4586a6742abc049715449c96cce6013d1cf39b741a6fdae2711d6a6699905480ae83c9eaa849d061bc7181db6d485a2c8ff6ea471626719ac2c5f47", &(0x7f0000000380)=""/52, &(0x7f0000000500)="98b97658aaf88817f6ea71525ee6f91d732e83a560ea5419ccb2bf2e835d095544619c0ab6f3f8e6160cb3978e29ab0ac9673895796e490e3d7484681e6a23573b", &(0x7f0000000580)="18bf202aa6c6f8dee7a6fccac23c4066489caa", 0x3800000, r2, 0x4}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff2, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r4, &(0x7f0000000300), 0x48) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (rerun: 32) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@test_dummy_encryption}, {@debug}, {@minixdf}, {@jqfmt_vfsv1}, {@prjquota}, {@nombcache}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@errors_remount}, {@auto_da_alloc}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0xe2, 0x47c, &(0x7f0000000cc0)="$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") r5 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff02c}, {0x6, 0xfe, 0x0, 0xffff}]}) getdents64(r5, 0x0, 0x0) (async, rerun: 64) quotactl$Q_QUOTAON(0xffffffff80000101, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m16.869834981s ago: executing program 3 (id=765): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0xffffffff, 0x4) r1 = socket(0xa, 0x3, 0xff) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x20000000, @mcast2={0xff, 0x5}}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @remote, 0x1}, 0x1c) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0xc1) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f00000000c0)={0x2, 0x1, 0x4d74, 0x6, 0xfffffff9, 0x400000}) write(r2, &(0x7f0000000400)='n\x00', 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) r3 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x10, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x20, 0x29, 0x0, @multicast1, @loopback}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000080)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@grpid}]}, 0x1, 0x513, &(0x7f00000017c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000040)={0x780440d44e0f187e, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r5 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xffe}) 1m16.657599136s ago: executing program 3 (id=766): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1080}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x96f7f4a4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x4}}]}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xd72e}}]}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d6632359cf3413d6e1522670d25613b700e6c6673002c6d6f64653d61646170746976652c686561702c09000000636f766572792c6673796e635f6d6f64653d706f7369782c757365725f78617474722c64697361626c655f726f6c6c5f666f72776172642c00000099dbe00589414f3d9fbcbd39d0f118d5695a79937a1d978b344d7a4ade72ba41a330106521321a6e610582b731c4a1e1d95b6ad5b4e9ed654acd52a832c01ccbb26ba71f86de07e38fcaa4a51d62e00cc844f667061f8c9f9a1824faaabeb3b88e2da58b7ddc94b9df0c6e483f9c8f7338954ee24c7463866842dc56a178c425dc91bac4f3f6a332bcfd14daf5e8ca565141312430b5d52e18624a6638d322828ddae5d12026da9e78a06d4fb94d74a6a4d0531a278a8feb5cbfccf1228f878a1b9e5e50fb01d16f1bcc552d7b918f2cece5eb6bd975361ed8e7e344cb8acaac3b091ba3976e3c9bce122d1f9c441d"], 0x1, 0x105fc, &(0x7f0000010600)="$eJzs3E1vG1UXAODr5E3T9i0lQizYdSSElEi1Vacfgl2BVoBEqoiPBStwbMdy648odhJThAisEcv+EVixZ8+fYIdYILFAKiry3JuqSYqSJpETJ88jjc/M9dzjc0eKojNjOQBn1kz215+FcDlcCCFMhhAuhZDvF9KWux3DayGEKyGEiWe2Qhp/OnAuhHAxhHB5mDzmLKS3vn60ufB4sHAxZb16PCsGToI3Qgjtlbi/0Y6x24jxfhqvrDfz2L6xnmJ8o/0gHXdj3Kgv5Rk2KlvnVfJ4vRHP766s9YZxuVWpDmOjuZyPr3TiB/bWG1t58gn3K6v5ca2+tFXuZj7vYTwYpPiw1495ainfl3n60O9vxTheH0zH9aw8yGO100/j3VhfrT4YxvUUe3E4VLutWl7H0gEv8hj4sNlZG2Tr9dVes9vJbpbKb5bKt4rl1W6t3q/fKFbatVs3stlGa3hasV+vtG83ut1Gq16qdttz2WyjWi2Wy9nsnfpSs9LJyuXS9dK14s25tHc1e+/ep1mrls0O4zvNzlq/2eply93VLM6Yy+ZL19+ay14vZx8vLGaLH929u7D4yed3Prv39sIH76aTdpWVzc5fm58vlq8V58tzL7jgf07k+of/okez/h3OH246Z13huAsAGD95/38hjLL//+rnR3/c+a7yq/4fToe/n0QvNGmc+v9masgP3v/X43r0/7uckP53d/8fRtP/xvVPb1v/tydh/fp/xoH+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzPpt6sf3852ZePz/NP5SGnolHRdCCBMhhCfPMRnObcs5mfJM/cf5Uztq+KUQ8gzDz5hO28UQwu20PX75+bX/70ivBAAAAJxOP21e+SF26/Fl5rgLYpTiTZuJS18cUb5CCGFq5vd9nbe3ieHLq4evKprMbxcNDjb53M6B/AbW+cNXlUs3xb45onR7yC9r/HN/Gs4/EwoxTIymGgAAYJS2dwKeqAMAAJxe3x93ARy9/Ty/y5/Dpu/ip0ec0zGkB4IXth0BAAAAY2h/38MGAAAAxlne/4/z7/8BAAAAe4u//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAv+zcTW7aQBQH8GeDW/qloqrLSr1Kd3CMHqHLLhEH6CU4Ar1CLsAZyC5HiHCExyg4IlIUxkZBv5/kj7HgzzNi82aQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6dFut5/8XP/+dm7Orz5PnbgAAAIBTttV63pxM0/hTe/1Le+lbOy4iooyIU737KN51MkdtTvXM66snNdxENAn7z3jfbh8j4le73X/t+1sAAACA67VZrmapW0+76aULYkhp0qb8/DtTXhER1fQuU1q5333PFNb8vsfxN1NaM4E1yRSWptzGudJeZNQ5TI4ORTqUg5YDAAAMotsJDNuFAAAAMKQ/R+eLC9bBwIo4LGUe1oKbf94/Lgh+6IwAAACAN6i4dAEAAABA75r+3/P/AAAA4Lql5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQp221nm+Wq9m5Obv6FX5M0pvrus5wKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8sD/vKBACYRAGe9d3JnP/w0qDxoYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzrykQAgEQRTMGf876fsfVhJ05QmECGh4VFENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EW/++X/xNQ4k8ydNpaOR5K1q8bWVWPvQePowXh9DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf79vMaRxUHAPzN7s42qUjXKIF6sWKhothk6y8ELz0IwYPgSTwu6aasblXaHGzJwVw8CP4HXvTaixAQpB78C3rwZI/1UkH2UMGDJ+XNj3baDXVq7Oxu/Hzgzftm8nbm+yYQ8p33AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMzI5G06UcTseenncKs79fHtnM/Y37uujW4Orx2OLcdJs2gunE5/R6qyzAAAA4LBrl/V9COFmurcR+1Yvq/+Tx4rzsebfeTyPy3r+/rq/7MvaP7ZrP3zz7p0b9fL7pCGE73rj4XpzU5xrJ2uOO1ZjTPYuIX9D085+bK23d5+cpNlTT768fv2tbhYeOVjGAMB/4XTZF8FW8ln299HWaDzszzIxABZX55+/XQ6J9f9SLB57TSQGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFuT3fBiGSchhKc7d+Poxu2dzf36W4Orx8t27P2nPq9eM14iDSFsjcbDpQbnMs9O1hx36fKVDwfj8fDiQwXP/KtPCRYkaB/g42mYl1kIDhQ84l9QAAAcKmnRYl1/M93biOeSlRD++vre+v9UJQ416/8fR9dOVe9Vrf/7jc1wvj2o/l+uxGvbFz5Zu3T5ykujC4Pzw/PDj870X+m/vv7Gq/3X1uLzXM+PDWQMAADAIuoWLenerf9bK9Pr/0crcahZ///063u/Ve/VVv9Pefj1/0ecEAAAwP/YEyf++D3Z53zS7YZPB9vbF/v58c7XZ/LjDFJ9sOXpU0eKVl3/b6/MIDcAAACgcZPd5J71/3OVONRc///+hT+/ql6zXbyC2BqNh6c3Px6fa246c2t6/b+377gm/p24gekCAAAwI8tFq67/p9n+/9az5ZhWCOH55/K4U+wXqFP/v9n54mz1XtX9/y83O82501rNn0ed/f/Z2NUQOqsNJAYAAMChtFS0WP//ku5tfPDt0Xe69v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3+zPvW3CQBjH4deXRInbZIT0Fh8z0FAhWAGQkCx5BgZgIRoqWotFYAWQ4FzTGYrnaf6/4op7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7V2fvviIiCJSlynSdPt3/oyIr0i7tp1837PYX07NzyMXh+Ms52/M/8uIKKPo4xwAgN5V3eZYb+rVIO8w7yjvOG9VNvXylZ8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBWAAAA///KU19N") sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c6, &(0x7f0000000bc0)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004804}, 0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000380)=0xe, 0x4) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd27, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xc081}, 0x84800) sendmsg$TIPC_NL_BEARER_DISABLE(r5, 0x0, 0x0) 1m15.27298594s ago: executing program 3 (id=772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendfile(r1, r1, &(0x7f0000000080)=0x9, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)="331c"}) 1m15.061716505s ago: executing program 2 (id=773): socket$inet6(0xa, 0x3, 0x8000000003c) syz_clone(0x40800000, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0)="7d903839ed88b59c70720bdb0c67bd26ee0eecb158423f68776b30b553f863e3abe980b80f98caf33fdb8048d952a2095ec12f9ca346bb3b36000632bf0fae298279b41d8332e657324e9e06641f72bc2bd32f29798b258778dd284d84369f56c0be3f096c6a6683cd02c9b17ace301dd680f1b6020234f7a309349e9bf6c04a54e4229eca640850518e1a13e23b39af25cd0e5b879f56d7411b12242cec066e2ca110c46e219ab3ef14ac7e5c2e") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x83, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='3', 0x1) r2 = socket(0x1e, 0x4, 0xfffffff8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x8007, 0x7, 0x1f, 0x9545, {{0x19, 0x4, 0x2, 0x35, 0x64, 0x68, 0x0, 0x8, 0x29, 0x0, @private=0xa010101, @loopback, {[@rr={0x7, 0x1f, 0xf0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0x8, 0x1, 0x0, [{@broadcast, 0xfffffffe}, {@rand_addr=0x64010101, 0x690}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x5}]}, @end, @ssrr={0x89, 0x13, 0x1d, [@remote, @local, @empty, @rand_addr=0x64010101]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e00)={0xffffffffffffffff, 0xe0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001b80), &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f0000001c00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001c40), &(0x7f0000001c80), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000001cc0)}}, 0x10) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001e40)={0x0, @local, @loopback}, &(0x7f0000001e80)=0xc) getsockname$packet(r2, &(0x7f0000001ec0), &(0x7f0000001f00)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xfff0}, {0xfff3, 0x8}, {0xa}}}, 0x24}}, 0x20040000) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000010027bd700402d4df2500000000", @ANYRES32=r8, @ANYBLOB="94e40700100c000064001280110001006272696467655f736c617665000000004c000580080003000100000005002100"], 0x84}}, 0x200088c2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000002240)={'batadv_slave_1\x00'}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @broadcast}, &(0x7f0000000480)=0xfd78) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003140)) 1m14.648097842s ago: executing program 2 (id=776): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@dev}}}, &(0x7f0000000540)=0x119) getuid() bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x500, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private=0xa010100}, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4, 0x0, 0x40}) 1m14.487391656s ago: executing program 3 (id=778): r0 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[], 0x1, 0x152a, &(0x7f0000003f80)="$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") r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r3, 0x0, 0x0, 0x40000020, 0x0, 0x0) shutdown(r3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', 0x0}) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000300)={[{@discard}, {@dmask={'dmask', 0x3d, 0x9}}, {@time_offset={'time_offset', 0x3d, 0x101}}, {@fmask={'fmask', 0x3d, 0x3}}, {@fmask={'fmask', 0x3d, 0x4}}, {@namecase}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@umask={'umask', 0x3d, 0x81}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@namecase}]}, 0x1, 0x1535, &(0x7f00000028c0)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, r6, 0x25, 0x0, @val=@perf_event={0x10000000000200}}, 0x18) sendmsg(r3, &(0x7f0000000780)={&(0x7f00000001c0)=@xdp={0x2c, 0x4, r6, 0x1d}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)="2b733f831158308ec914867f00ceb456a8374a8db293f2ac2e707df8b2d059f58de4fee4425df4438012ffb799da7891482ebc4dcece2a447676543087614240a61f5bd4abffda1ddecf2d2f947c6f43640d6d00867c6e9e2874831e8ef3905351023fc9ba711c7aad4d031d66272da7a62f64b1640bc9258d2bf4e4fed57ec7f9d1cb5b298059e88362fb647e689a3849809b277dee87e8096112352301021da8b753df134f1307748df96a9c71491b99d44fe044b8864dc640f4a1aaf3c13da961e7561644c1cebdd5c6ca", 0xcc}, {&(0x7f0000000500)="21c0184d0b08ceea724b182b149c27be43522f43249f261de2a57183f8f40771ffd91a6390e7db9c55261aa0b04a03a54d82b151d5caebfa4177d78da5574c979a2cbf64d503a11ea6e0c06d2519671e2552de3ad42a1474f0b4b101d59a092b299d0bcb8306af6b49a02a94c311c7dd845a4dbfb193e13298901bf6fa16f8645c8b13e7dcc8f56bec045bb1bdf1e9593cca2efe12c15c262374ef277627c3e503f7ab0f3c0037fdc2f2de0156a886d7c390b32c43bdd9e2e7fd2c03db95622affc49fd9c463953df251bf78e121fd3498ac61cc", 0xd4}, {&(0x7f0000000640)="7b0f99b1dd29b9564d12aa99d31d45284d8b0178ccb7347413288c2fb9f58aeb6fbf2c2f", 0x24}, {&(0x7f0000000680)="38c2541bda06a8b60882e80ea8eda1b1b684faa4f564ab323d5891290f0ae7ad9910dfbb0df197577f5dd9678a615a56c9d381458405dbfcd1677842", 0x3c}], 0x4, &(0x7f0000000700)=[{0x38, 0xd, 0xd638, "c1eb9a76ca3e686b839236b3f05445d74771107a4f2a29379f468f0fc635b334cef490d5a721"}, {0x30, 0x2, 0x8, "6ab7fb3559910ff6c58fcfca96f834f88335018adbb28ca540027314"}], 0x68}, 0x4801) open_tree(0xffffffffffffff9c, 0x0, 0x9901) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) 1m14.083998591s ago: executing program 3 (id=780): ioctl(0xffffffffffffffff, 0xc138fd0f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/', 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x16, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000fc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x3, 0x6, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0xffffffffffffffc0) close(r4) setresuid(0x0, 0xee00, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x18, 0x0, &(0x7f0000000080)) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x8, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_rs}}}}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x40, 0x6, 0x8, 0x840}, 0x50) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r8, &(0x7f0000009e40)=[{{&(0x7f0000000f40)=@in6={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}, 0x401}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000000000000000000006000004000000e0a3fef0947f5e462f49bee0a817dfc3b5a17780c7e8cc6ac6dacc76e746525ab4aab13094f0f29e539b01b53ee80c21e57571fa3c6417e1db6f7900058ca6c117030cd8dd5d8d0c09c100000011b53cd32c2659569b08"], 0x20}}], 0x1, 0x20008004) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0c1d000004000000040000000000a4bd002000007dff596c207b04bc6e97d1af55fbbacd47f8c387829c39c8cd35c2864df1a7045da8873d1de8a200"/82, @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 1m13.326664652s ago: executing program 2 (id=783): r0 = syz_usb_connect$hid(0x0, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f3044d070000000000010902240001000000010904000802030000000921100000012218000905810310"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xf) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) 1m13.326238582s ago: executing program 3 (id=784): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfffc, 0xf, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x6, 0xf3}}}}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setgroups(0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) recvfrom$inet(r3, &(0x7f0000002500)=""/4096, 0x1000, 0x10020, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r5, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmsg$inet_nvme(r5, &(0x7f0000004040)={0x0, 0x0, 0x0}, 0x220) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") syz_mount_image$exfat(0x0, &(0x7f000009de80)='./file7\x00', 0x2040c20, 0x0, 0x0, 0x0, &(0x7f000009de80)) creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22c9337721601c52, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000001440), &(0x7f0000001480)=0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x0, 0x30, 0x93, {0x93, 0x6, "3b1619b9acc0bbd4d215278ce925a7d6514052ccab1d30f4e79591d13c1b869c678c98a3b4995c8a578c38ee145d7e812965698996bdf74eed3cc124dc5a5a3254f976913d5fdae37fbcb03c557d2b0c41dcf7baf9500e4405e7b0ec6b79a284c75d35ba2cf892de5eec3746976fd41fba91af3d34d4bbdca19a617e12a0cec5041f71a637823815361c3ea0bdcc69d0b3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m13.244963549s ago: executing program 40 (id=783): r0 = syz_usb_connect$hid(0x0, 0x71, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040f3044d070000000000010902240001000000010904000802030000000921100000012218000905810310"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xf) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) 58.637607132s ago: executing program 41 (id=784): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfffc, 0xf, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x6, 0xf3}}}}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setgroups(0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) recvfrom$inet(r3, &(0x7f0000002500)=""/4096, 0x1000, 0x10020, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r5, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmsg$inet_nvme(r5, &(0x7f0000004040)={0x0, 0x0, 0x0}, 0x220) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") syz_mount_image$exfat(0x0, &(0x7f000009de80)='./file7\x00', 0x2040c20, 0x0, 0x0, 0x0, &(0x7f000009de80)) creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22c9337721601c52, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000001440), &(0x7f0000001480)=0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000002c0)={0x0, 0x30, 0x93, {0x93, 0x6, "3b1619b9acc0bbd4d215278ce925a7d6514052ccab1d30f4e79591d13c1b869c678c98a3b4995c8a578c38ee145d7e812965698996bdf74eed3cc124dc5a5a3254f976913d5fdae37fbcb03c557d2b0c41dcf7baf9500e4405e7b0ec6b79a284c75d35ba2cf892de5eec3746976fd41fba91af3d34d4bbdca19a617e12a0cec5041f71a637823815361c3ea0bdcc69d0b3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 56.798437652s ago: executing program 7 (id=881): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 56.730431596s ago: executing program 7 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) capset(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80340, 0x168) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0386dd000000000000000000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.565877803s ago: executing program 7 (id=888): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x4, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000029000000370000001600000000f4ffff13000000000000002900000043"], 0x30, 0x40000}}], 0x1, 0x44000) 55.150559821s ago: executing program 7 (id=889): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x80, &(0x7f00000000c0)=ANY=[], 0xf4, 0x216, &(0x7f0000000480)="$eJzsmb9v00AUx793sZ2kAiQWBqQKJCpRpNaxHUBdGMo/AFLLj25U2EUF0yDXQ1sJQcTCwp/Bv8DQiYGNjRUGQEJiICNiQofuR+wrSdxUISx9H6nnr98937336nuREhAEcWz5+uXn51fXl1YXAJxw51A39u+10odb/p8aRnx8/W7r1NN9a0ow48v0/dsxQ9iYXa4h7y8ihLAn58x1FbzQt8Bxyeg7YPCNvgeO2+X+WDuprw/BsGZsnaYRaeLf76TxxmaaBHII5RDJoW3v7wDodRliAA0TH7Pmt3f3Hq2naZIpwUuLK/r7ZAd9ji6qiucATm+Z45pVPxnF3ZcvuvK+X5vAql8IjtDoNhhWjF5CHb7vy1dAl8TK/6xTrl8bmX8h4l/AgfxlTIdme8OdvFhSeNDi9GKV88JEe/HD06kSHoB/kOm4Qp7LsZxFU/2Ln/011f1/oU5fMMvSlEIe6MJyprf/fvCpb9MM7Px0U4bp2QNTH2ZKS3Feh64zG/9mgyt75pmhu5f9U7bci1Z/cuAU/aOVP37S2t7dW9yUQT5ItqKofTW4HARXopbqzXqs6H8N1Z9mrPXdEb4e87CznudZuAPkWVjcR3q0Ou7Km84P9QxX/Y9j/oJeQ74qKu368D2Y+dOfg1LN10YGTxAEQRAEQRAEQRAEQRAEcSTOgalvQc0PVUIIPNczwia6qWx/AgAA//+ipku5") socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20040004}, 0x48044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010"], 0x48}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000002bc0)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000001740)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="d66fdcb7bbc8a9cabecbee8e229089cb517afe713656ea450646dff1aae4c77a787fd73126bb532645e082ebfffc79f16e5033f328cb93be485e21e1eaf35747119d5680d0c7d0bdfbeed398f476dce16b0a7701a58096", 0x57}], 0x2, &(0x7f0000001780)=[{0x68, 0x10b, 0x6, "86117db02081741773573d57a64611f01e0d21734cd3e719be3580b125baa61bd4bed7e2bdb44ce9f879c099908e720af68dc322f60027f0d7fc38e1f3949accab3f35fc8d66ccb0a5cee7b298aab1f89817"}, {0x110, 0x23a, 0x2, "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"}, {0x20, 0x10b, 0x80, "c34e8d4f18c18f497e93c3"}, {0xd8, 0x1, 0x1, "b141ba4fc7d1f93c08eb40d904ea5423e11632d61d6218f5cf1cd09810043defcf19b781a5b9be45833c7e8069fe2ab05f2918ad4baf3b160af245f83ef01b914dc0b3040a94c60bb1b5560c53058a16a7205974edd5b393d92d7b67a8173c4509a566ce2ba27dc4fecf8a5410bd8975fac546e81c30c6623847be2af7ba50672fab4fc1d201adaa552e2f9fc4fadb7f9e4fa5391bc84b15f03576b2f52fca65b4dc31df30c3629b9dcb31d3f94992e7d7b77f7aab87d5d8c5f48914feeb1ff907db2c80fcff"}, {0x90, 0x1, 0xcb, "70ebbdf1929ba9e87d78b8225e2ac8349aa5f71c188584715cf840e1d39f183d44ac3d32d0efff5fe3cb5cdf1bc222b71c0ca189c3faf7c5fac599641b98925c80f04c5438c6ecaeb9278c9d95051c792e9784b24ee19250a2e3dee771284f0696a004bdb4dcd3604bc3d2c5fe375e72527ce4f3f9399ebead6b6f"}, {0xb0, 0x102, 0x3, "f0e13b354a40b5c084d2c73648ab3a11d6efde96bb5f80efb5b84784daba97dc364efe6dbe29ac46d41e2f0f7181cb884736a559d36dd656eb9a148e76b6c2cf9c02ff2f8f90c05760083a514833d752109f89bbb3b57d89e15cae1f93fd2ac79323de8418ed938c9c651709f1751e31fb066620f2eb67a994f2dd6827e7c763ced3d656685b16f5090ee36ff35551f6c914e2ec3ef3eae3129114a614aa"}, {0x68, 0x88, 0x81, "c32bd094415fd001387c64e0dee5516e0c361be4f6f30a13d0b70cfaa40f0ff7ff6a510273e5adec280f3440a575ab92a0fefedc221d00070bdf5dfcd7e4daae24610abca6d41b46de249a5122dec0c6a8f1e540b7fae7"}, {0x1010, 0x110, 0x3, "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"}], 0x1428}, 0x4040000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) setreuid(0xee01, 0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) syz_io_uring_setup(0x126b, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x1181700, &(0x7f0000000040), 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) 54.533178051s ago: executing program 7 (id=895): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) mprotect(&(0x7f0000425000/0x8000)=nil, 0x8000, 0x2) (async) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f00000000c0)=0x4, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000000040)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRESDEC, @ANYRES32=0x0], 0xff, 0x1211, &(0x7f0000000900)="$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") r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2000, &(0x7f00003df000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x36, 0x4000000000, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0x6], 0x80a0000, 0xc0006}) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) r9 = socket(0x28, 0x1, 0x0) execve(&(0x7f00000000c0)='./proc\x00', 0x0, 0x0) (async) connect$packet(r9, &(0x7f0000000100)={0x28, 0xf7, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmsg$nl_route_sched(r8, 0x0, 0x800) (async, rerun: 64) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffaf) (async, rerun: 64) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x34fffffd) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x15, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) 54.346584351s ago: executing program 7 (id=896): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 54.345999291s ago: executing program 42 (id=896): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 22.613315381s ago: executing program 5 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) copy_file_range(r2, 0x0, r2, 0x0, 0x8, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000000)) 22.297066608s ago: executing program 5 (id=1137): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x1, &(0x7f0000000640)={[{@resuid}]}, 0x0, 0x236, &(0x7f00000002c0)="$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") ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0xa25) 21.990325553s ago: executing program 5 (id=1144): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000080026006c0901"], 0x30}}, 0x0) 21.834430546s ago: executing program 5 (id=1147): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000000480)="$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") syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 21.735471177s ago: executing program 5 (id=1151): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x403, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 21.58001632s ago: executing program 5 (id=1152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001640)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000000)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) 21.551232506s ago: executing program 43 (id=1152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001640)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000000)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) 10.651028974s ago: executing program 9 (id=1207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) 10.590631967s ago: executing program 9 (id=1208): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x6a0c, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f00000001c0)={0x3, 0xffffffff, 0x10, 0x3, 0x401, 0x7}) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 9.222275027s ago: executing program 8 (id=1212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x2, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x4) 9.170639878s ago: executing program 8 (id=1213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18070000000000000000000000000001851000000200000026000000ffffff859501007b00000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x94) 9.170347468s ago: executing program 8 (id=1215): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000040)='t', 0x1}], 0x1) socket$inet_udp(0x2, 0x2, 0x0) open(0x0, 0x100, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x291, &(0x7f0000000600)="$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") r4 = memfd_create(&(0x7f00000002c0)='R\x17\bK\x85X\xa3\x1b\xc7p\x13\x10\xa8F\xb4.\'\x19\x8b\xe2\xd8\xf8\xa21{.;0\x17\x11\n\x8d\xfa\xa8\x05\x1b\xdd*\xf8\xf3_\x1a\xd1F\x16\x88N#\xc2\xb1\x1c\x05\x00\x00\x00\x00\x00\x00\a!\xcd\x84;\x13\x9d\xe7\x03\xe6\x1d8\x9f\xa8A', 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x44a7e, 0x90) fallocate(r5, 0x0, 0x0, 0x1000f4) sendfile(r4, r5, 0x0, 0xfffffff2) 7.503529141s ago: executing program 8 (id=1219): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x17c) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket(0x11, 0x3, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x10800, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 7.503436811s ago: executing program 9 (id=1220): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be0402071405640604", 0x1b, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109"], 0x0) 7.485754795s ago: executing program 8 (id=1222): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1, 0x2aa, &(0x7f0000000c80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x68c50012, 0x4, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0xb22f, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) pivot_root(&(0x7f0000000000)='./file0/file0/file0\x00', 0x0) 7.410122411s ago: executing program 4 (id=1225): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x68, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r1, 0x0, r0, 0x0, 0x2000, 0xb) 7.382686757s ago: executing program 0 (id=1162): unshare(0x22020600) unshare(0x2a060400) 6.567164359s ago: executing program 4 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000004ec0)=0x6, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4) 6.56548272s ago: executing program 8 (id=1228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 6.56535185s ago: executing program 44 (id=1228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) 6.548134953s ago: executing program 4 (id=1229): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$eJzs3b+LHFUcAPDv7O3NTrTYLaxEyIAprIKXTmz2kATEqwxbRAs9TAJyuwg5OIiKaypbGwsL/wJBsPG/SON/INgKdkYIjMzszO3s3uZ+RPckd59Pc9977/ud997sY2+3mHcfvzbZu5vH/Udf/hZZlkRnGMN4ksQgOtH4OhYMvw0A4EX2pCjiz2KmakhOV1emZeudGgCwJkf+/q/UnYc/n8u0AIA1un3ng/e2d3Zuvp9FFrcm3xyMym/25c9Z//b9+DTGcS/ejH48jag+J9Rf/Mv4VlEU025eGsS1yfRgVFZOPnpcX3/7j4iqfiv6MTgsqz5tVPXv7tzcqsrzXqt+Ws7jpXr8YVl/I/rxymHxQv2NWX3ero9RGm+83pr/9ejHr5/EZzGOu9Uk5vVfbeX5O8V3f33xYTm9sj6ZHox6Vd5csXGerwsAAAAAAAAAAAAAAAAAAAAAABfb9bw5fCe/GtcmZVN9/s7G07TOqVMG86qyfxYdHhfcOh+oNC3ih9mRgpsL483P9+nGq932wYIAAAAAAAAAAAAAAAAAAABwee0//Hxvdzy+9+A/CZKIK82V/74d8bzXGbZarsbxyb16vN3xuFOHCzmP03ZLbDQ5ScSx04huxELL8y/npOBKtjTnJvjxp3KBZ7lg1mp5a/UCN5fWdSS40/u3e6PZA3u7yeqxetG0ZPVd/T6NmOekccqx0md1FdF+vU5acrqyq3/mtacvV8H0mTlFsmKLtoK3f5/11y1JLO26tLqrK0ffrINW+dLeOOEm1OXZrPzoe0VSndbRW8O7EAAAAAAAAAAAAAAAAAAAENXTvM3Tv+Vvvyx2Pjq2tFN4FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2L/YfP//88QTOviUySn8WD/f14iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8A/AQAA//+0t0sX") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 6.473559509s ago: executing program 0 (id=1162): unshare(0x22020600) unshare(0x2a060400) 4.731786358s ago: executing program 6 (id=1232): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x14, 0xffd, &(0x7f0000001e40)=""/4093}, 0x94) 4.729942328s ago: executing program 4 (id=1233): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004a40)={0x2020}, 0x2020) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006a80), &(0x7f0000006ac0)=0xc) sendfile(r0, r0, 0x0, 0x2000007ff) 4.729854768s ago: executing program 1 (id=1236): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x96, 0xd, 0xfc, 0x10, 0x4f2, 0xaff9, 0x985b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0x0, 0xf, "", [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0xff, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e40)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) iopl(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f00000005c0)={0x20, 0x15, 0x3, "cbb7e9"}, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x5, 0x4, "abc8abc8"}}) 4.6730367s ago: executing program 9 (id=1234): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT], 0x1, 0x3b7, &(0x7f0000000780)="$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") r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x119) 4.67222009s ago: executing program 4 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xc00, 0x191) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(r2, 0xe, &(0x7f00000006c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(r2) sched_setaffinity(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x800000000084, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000000200)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 4.586246089s ago: executing program 0 (id=1162): unshare(0x22020600) unshare(0x2a060400) 2.802847467s ago: executing program 6 (id=1237): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0xc004ae02, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0x1a) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x20028001) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe) 2.802596107s ago: executing program 4 (id=1238): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x482, 0x4800, 0x4, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xfffffffc, 0x3, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0xd3e, 0xfffffff9, 0xffffffff, 0xc, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x2, 0xb, 0x9, 0xe, 0x5, 0x7, 0x9, 0x2, 0x1, 0x1, 0x8, 0x7, 0x1fe, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e86, 0x5, 0x80000001, 0x8, 0x3f92, 0x6, 0x2, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x9, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x6, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x9, 0x401, 0x5], [0x108f, 0x10003, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x4, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x3, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000001c0)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_usb_connect$uac2(0x0, 0x9a, &(0x7f0000000280)=ANY=[@ANYBLOB="12010102000000200c201810540001020301090288000301018008080b0001010c200609040000000101200009240503000428000408240a05004000020c24030207030503"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 2.802523536s ago: executing program 1 (id=1236): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x96, 0xd, 0xfc, 0x10, 0x4f2, 0xaff9, 0x985b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0x0, 0xf, "", [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0xff, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e40)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) iopl(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f00000005c0)={0x20, 0x15, 0x3, "cbb7e9"}, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x5, 0x4, "abc8abc8"}}) 2.78583573s ago: executing program 9 (id=1239): prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x42) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x881e, 0xc000, 0x8, 0xbd}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x8916, 0x0) 2.719105814s ago: executing program 6 (id=1240): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000160033060000000000000080e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141447e32e3f000000000000000000000004d23200000000000000000000000000000000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000c000000000000000000000000000000050000000000000030ec0fab040000000000000000000000020000000200000002000418000000000000000048000200656362286369706865725f6e756c6c29000000000000000000d1f900000000000000000000000000000000000000000000000000000000000000ffe400000000"], 0x138}}, 0x0) 2.663638036s ago: executing program 0 (id=1162): unshare(0x22020600) unshare(0x2a060400) 789.061283ms ago: executing program 6 (id=1241): write(0xffffffffffffffff, &(0x7f0000000340)='0fc5:1227:', 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x400, @none, 0x8}, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x4) fcntl$getown(r0, 0x9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone3(&(0x7f0000000180)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xc9cf, 0x2, 0x0, 0x42}, &(0x7f0000000280), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 788.949183ms ago: executing program 1 (id=1236): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x96, 0xd, 0xfc, 0x10, 0x4f2, 0xaff9, 0x985b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0x0, 0xf, "", [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0xff, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e40)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) iopl(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f00000005c0)={0x20, 0x15, 0x3, "cbb7e9"}, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x5, 0x4, "abc8abc8"}}) 773.833436ms ago: executing program 9 (id=1242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) 394.138177ms ago: executing program 6 (id=1243): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./sys\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, &(0x7f0000000100)) 255.270235ms ago: executing program 1 (id=1236): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x96, 0xd, 0xfc, 0x10, 0x4f2, 0xaff9, 0x985b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0x0, 0xf, "", [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0xff, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e40)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) iopl(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f00000005c0)={0x20, 0x15, 0x3, "cbb7e9"}, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x5, 0x4, "abc8abc8"}}) 210.642655ms ago: executing program 0 (id=1162): unshare(0x22020600) unshare(0x2a060400) 207.673265ms ago: executing program 6 (id=1244): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='atkbd', 0x5) 90.346611ms ago: executing program 1 (id=1236): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x96, 0xd, 0xfc, 0x10, 0x4f2, 0xaff9, 0x985b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x0, 0x0, 0xf, "", [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0xff, 0xff, 0xff, 0xff}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e40)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) iopl(0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000040)) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f00000005c0)={0x20, 0x15, 0x3, "cbb7e9"}, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x40, 0x5, 0x4, "abc8abc8"}}) 0s ago: executing program 0 (id=1162): unshare(0x22020600) unshare(0x2a060400) kernel console output (not intermixed with test programs): 64_sys_openat+0x136/0x160 [ 177.687000][ T3630] ? x64_sys_call+0x219/0x9a0 [ 177.691671][ T3630] ? do_syscall_64+0x4c/0xa0 [ 177.696251][ T3630] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.702310][ T3630] ? do_filp_open+0x400/0x400 [ 177.706988][ T3630] do_filp_open+0x1df/0x400 [ 177.711475][ T3630] ? vfs_tmpfile+0x2d0/0x2d0 [ 177.716078][ T3630] do_sys_openat2+0x15e/0x7f0 [ 177.720739][ T3630] ? __se_sys_futex+0x135/0x330 [ 177.725574][ T3630] ? do_sys_open+0xe0/0xe0 [ 177.729970][ T3630] ? __x64_sys_futex+0x100/0x100 [ 177.734897][ T3630] ? ksys_write+0x1fa/0x260 [ 177.739382][ T3630] __x64_sys_openat+0x136/0x160 [ 177.744217][ T3630] x64_sys_call+0x219/0x9a0 [ 177.748708][ T3630] do_syscall_64+0x4c/0xa0 [ 177.753106][ T3630] ? clear_bhb_loop+0x50/0xa0 [ 177.757766][ T3630] ? clear_bhb_loop+0x50/0xa0 [ 177.762427][ T3630] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.768303][ T3630] RIP: 0033:0x7fbc33b11159 [ 177.772705][ T3630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.792296][ T3630] RSP: 002b:00007fbc3256a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 177.800694][ T3630] RAX: ffffffffffffffda RBX: 00007fbc33d98fa0 RCX: 00007fbc33b11159 [ 177.808651][ T3630] RDX: 0000000000000042 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 177.816608][ T3630] RBP: 00007fbc33ba806b R08: 0000000000000000 R09: 0000000000000000 [ 177.824559][ T3630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.832514][ T3630] R13: 00007fbc33d99038 R14: 00007fbc33d98fa0 R15: 00007ffd06e37118 [ 177.840476][ T3630] [ 177.864327][ T3620] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 177.872430][ T3620] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 177.882534][ T3620] F2FS-fs (loop6): invalid crc value [ 177.888845][ T3620] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 177.968290][ T3637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.913'. [ 177.983875][ T3637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.913'. [ 178.006012][ T30] audit: type=1400 audit(1790857737.802:919): avc: denied { create } for pid=3632 comm="syz.5.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 178.054552][ T3620] F2FS-fs (loop6): Start checkpoint disabled! [ 178.069526][ T3635] loop4: detected capacity change from 0 to 512 [ 178.113536][ T3620] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 178.134434][ T3635] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 178.142735][ T3620] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 178.146354][ T3635] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 178.184626][ T3635] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #13: comm syz.4.914: iget: bad i_size value: 12154757448730 [ 178.197700][ T3635] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.914: couldn't read orphan inode 13 (err -117) [ 178.211453][ T3635] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 178.253259][ T293] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 178.257824][ T3643] loop9: detected capacity change from 0 to 512 [ 178.319827][ T3643] fscrypt (loop9, inode 2): Error -61 getting encryption context [ 178.327831][ T3643] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61 [ 178.336090][ T3643] EXT4-fs error (device loop9): ext4_orphan_get:1410: inode #13: comm syz.9.916: iget: bad i_size value: 12154757448730 [ 178.348764][ T293] usb 9-1: USB disconnect, device number 14 [ 178.356048][ T3643] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.916: couldn't read orphan inode 13 (err -117) [ 178.381866][ T293] usblp0: removed [ 178.429822][ T3651] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 178.456936][ T3656] EXT4-fs (loop4): re-mounted. Opts: . Quota mode: writeback. [ 179.177597][ T3658] FAULT_INJECTION: forcing a failure. [ 179.177597][ T3658] name failslab, interval 1, probability 0, space 0, times 0 [ 179.190254][ T3658] CPU: 1 PID: 3658 Comm: syz.5.918 Not tainted syzkaller #0 [ 179.197545][ T3658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.207682][ T3658] Call Trace: [ 179.210962][ T3658] [ 179.213901][ T3658] __dump_stack+0x21/0x30 [ 179.218229][ T3658] dump_stack_lvl+0x110/0x170 [ 179.222901][ T3658] ? show_regs_print_info+0x20/0x20 [ 179.228097][ T3658] dump_stack+0x15/0x20 [ 179.232244][ T3658] should_fail+0x3ab/0x500 [ 179.236653][ T3658] __should_failslab+0xa4/0xe0 [ 179.241414][ T3658] should_failslab+0x9/0x20 [ 179.245910][ T3658] slab_pre_alloc_hook+0x39/0xd0 [ 179.250850][ T3658] ? vm_area_alloc+0x24/0x130 [ 179.255529][ T3658] kmem_cache_alloc+0x44/0x260 [ 179.260288][ T3658] vm_area_alloc+0x24/0x130 [ 179.264787][ T3658] mmap_region+0x87d/0x1700 [ 179.269285][ T3658] ? selinux_mmap_addr+0xbe/0xe0 [ 179.274219][ T3658] ? security_mmap_addr+0x72/0x90 [ 179.279240][ T3658] do_mmap+0x812/0xf10 [ 179.283305][ T3658] vm_mmap_pgoff+0x1d6/0x410 [ 179.287889][ T3658] ? account_locked_vm+0x270/0x270 [ 179.292996][ T3658] ? sysvec_reschedule_ipi+0x78/0x80 [ 179.298276][ T3658] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 179.303901][ T3658] ksys_mmap_pgoff+0xf6/0x1d0 [ 179.308576][ T3658] __x64_sys_mmap+0xfa/0x110 [ 179.313162][ T3658] x64_sys_call+0x83/0x9a0 [ 179.317621][ T3658] do_syscall_64+0x4c/0xa0 [ 179.322047][ T3658] ? clear_bhb_loop+0x50/0xa0 [ 179.326723][ T3658] ? clear_bhb_loop+0x50/0xa0 [ 179.331401][ T3658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.337291][ T3658] RIP: 0033:0x7fbc33b11159 [ 179.341701][ T3658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.361303][ T3658] RSP: 002b:00007fbc32528028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 179.369731][ T3658] RAX: ffffffffffffffda RBX: 00007fbc33d99180 RCX: 00007fbc33b11159 [ 179.377711][ T3658] RDX: 0000000002000007 RSI: 0000000008000002 RDI: 000000110c230000 [ 179.385683][ T3658] RBP: 00007fbc32528090 R08: ffffffffffffffff R09: 0000000000000000 [ 179.393646][ T3658] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000001 [ 179.401609][ T3658] R13: 00007fbc33d99218 R14: 00007fbc33d99180 R15: 00007ffd06e37118 [ 179.409569][ T3658] [ 179.498288][ T3651] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 179.517812][ T3651] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #13: comm syz.6.915: iget: bad i_size value: 12154757448730 [ 179.530690][ T3643] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 179.609713][ T3651] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.915: couldn't read orphan inode 13 (err -117) [ 179.624997][ T3651] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 179.665798][ T3660] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.676896][ T3660] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.803475][ T3665] FAULT_INJECTION: forcing a failure. [ 179.803475][ T3665] name failslab, interval 1, probability 0, space 0, times 0 [ 179.816141][ T3665] CPU: 0 PID: 3665 Comm: syz.9.916 Not tainted syzkaller #0 [ 179.823430][ T3665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.833482][ T3665] Call Trace: [ 179.836757][ T3665] [ 179.839681][ T3665] __dump_stack+0x21/0x30 [ 179.844012][ T3665] dump_stack_lvl+0x110/0x170 [ 179.848683][ T3665] ? show_regs_print_info+0x20/0x20 [ 179.853883][ T3665] ? release_firmware_map_entry+0x190/0x190 [ 179.859778][ T3665] ? _raw_spin_unlock+0x4d/0x70 [ 179.864626][ T3665] dump_stack+0x15/0x20 [ 179.868776][ T3665] should_fail+0x3ab/0x500 [ 179.874460][ T3665] __should_failslab+0xa4/0xe0 [ 179.879235][ T3665] should_failslab+0x9/0x20 [ 179.883740][ T3665] slab_pre_alloc_hook+0x39/0xd0 [ 179.888694][ T3665] ? getname_flags+0xba/0x510 [ 179.893369][ T3665] kmem_cache_alloc+0x44/0x260 [ 179.898144][ T3665] getname_flags+0xba/0x510 [ 179.902656][ T3665] __x64_sys_mkdirat+0x7c/0xa0 [ 179.907425][ T3665] x64_sys_call+0x37e/0x9a0 [ 179.911938][ T3665] do_syscall_64+0x4c/0xa0 [ 179.916352][ T3665] ? clear_bhb_loop+0x50/0xa0 [ 179.921029][ T3665] ? clear_bhb_loop+0x50/0xa0 [ 179.925720][ T3665] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 179.925766][ T3665] RIP: 0033:0x7fb43fea9fc7 [ 179.925780][ T3665] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.925793][ T3665] RSP: 002b:00007fb43e8c1e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 179.925810][ T3665] RAX: ffffffffffffffda RBX: 00007fb43e8c1ee0 RCX: 00007fb43fea9fc7 [ 179.925821][ T3665] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 179.925831][ T3665] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000 [ 179.925841][ T3665] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 179.925851][ T3665] R13: 00007fb43e8c1ea0 R14: 0000000000000000 R15: 0000200000003440 [ 179.925863][ T3665] [ 180.044847][ T3665] EXT4-fs (loop9): re-mounted. Opts: . Quota mode: writeback. [ 180.053617][ T3670] EXT4-fs (loop6): re-mounted. Opts: . Quota mode: writeback. [ 180.103905][ T3667] erofs: (device loop4): mounted with root inode @ nid 36. [ 180.160135][ T3671] set_capacity_and_notify: 3 callbacks suppressed [ 180.160181][ T3671] loop5: detected capacity change from 0 to 1024 [ 180.208430][ T3667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 180.252805][ T3671] EXT4-fs (loop5): barriers disabled [ 180.258530][ T3671] JBD2: no valid journal superblock found [ 180.264388][ T3671] EXT4-fs (loop5): error loading journal [ 180.279491][ T3673] loop8: detected capacity change from 0 to 512 [ 180.335364][ T3675] loop7: detected capacity change from 0 to 7 [ 180.341939][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.352846][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.361819][ T30] audit: type=1326 audit(1790857740.322:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3662 comm="syz.5.923" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc33b11159 code=0x7ffc0000 [ 180.362066][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.397399][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.416448][ T3675] loop7: unable to read partition table [ 180.423038][ T3675] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 180.437032][ T30] audit: type=1326 audit(1790857740.322:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3662 comm="syz.5.923" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc33b11159 code=0x7ffc0000 [ 180.463458][ T30] audit: type=1326 audit(1790857740.364:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3662 comm="syz.5.923" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc33b11159 code=0x7ffc0000 [ 180.502631][ T3675] loop4: detected capacity change from 0 to 256 [ 180.507197][ T30] audit: type=1326 audit(1790857740.364:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3662 comm="syz.5.923" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc33b11159 code=0x7ffc0000 [ 180.517256][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.534359][ T30] audit: type=1326 audit(1790857740.364:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3662 comm="syz.5.923" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbc33b11159 code=0x7ffc0000 [ 180.544986][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.578806][ T30] audit: type=1326 audit(1790857740.427:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3662 comm="syz.5.923" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc33b11159 code=0x7ffc0000 [ 180.613283][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.617255][ T30] audit: type=1326 audit(1790857740.427:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3662 comm="syz.5.923" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc33b11159 code=0x7ffc0000 [ 180.624190][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.656759][ T3677] loop7: unable to read partition table [ 180.669142][ T3673] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 180.678667][ T3673] System zones: 1-12 [ 180.684059][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.694964][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.703118][ T3673] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.924: missing EA_INODE flag [ 180.722250][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.733171][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.744834][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.755724][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.764319][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.775223][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.783236][ T30] audit: type=1326 audit(1790857740.427:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3662 comm="syz.5.923" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc33b11159 code=0x7ffc0000 [ 180.791675][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 180.813030][ T3673] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.924: error while reading EA inode 12 err=-117 [ 180.818765][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 180.833245][ T3680] netlink: 60 bytes leftover after parsing attributes in process `syz.6.927'. [ 180.847479][ T3673] EXT4-fs (loop8): 1 orphan inode deleted [ 180.853437][ T3673] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 180.900344][ T3701] loop5: detected capacity change from 0 to 16 [ 180.909724][ T3699] loop6: detected capacity change from 0 to 128 [ 180.922659][ T3701] erofs: (device loop5): mounted with root inode @ nid 36. [ 180.951602][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.935'. [ 180.957591][ T3699] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.989949][ T3699] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.991202][ T3705] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=3705 comm=syz.9.936 [ 181.286361][ T3714] netlink: 4 bytes leftover after parsing attributes in process `syz.9.939'. [ 181.307377][ T310] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 181.362448][ T3724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.942'. [ 181.401062][ T3722] kvm: pic: level sensitive irq not supported [ 181.404852][ T3730] loop8: detected capacity change from 0 to 256 [ 181.442863][ T3733] loop5: detected capacity change from 0 to 128 [ 181.461950][ T930] udevd[930]: incorrect ext4 checksum on /dev/loop5 [ 181.470243][ T3733] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 181.498011][ T3730] input: syz0 as /devices/virtual/input/input12 [ 181.514393][ T3730] netlink: 280 bytes leftover after parsing attributes in process `syz.8.945'. [ 181.564585][ T310] usb 5-1: Using ep0 maxpacket: 8 [ 181.597873][ T3734] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 181.655246][ T3734] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 181.674488][ T3741] loop8: detected capacity change from 0 to 16 [ 181.699000][ T3741] erofs: (device loop8): mounted with root inode @ nid 36. [ 181.939200][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.8.948'. [ 182.036338][ T3753] loop8: detected capacity change from 0 to 16 [ 182.041262][ T310] usb 5-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 182.055886][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.065764][ T310] usb 5-1: Product: syz [ 182.070148][ T310] usb 5-1: Manufacturer: syz [ 182.074803][ T310] usb 5-1: SerialNumber: syz [ 182.313792][ T3675] UDC core: couldn't find an available UDC or it's busy: -16 [ 182.322009][ T3675] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 182.339446][ T3776] erofs: (device loop6): mounted with root inode @ nid 36. [ 182.347251][ T3781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.961'. [ 182.365273][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.961'. [ 182.556964][ T3783] SELinux: failed to load policy [ 182.621798][ T354] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 182.917035][ T354] usb 6-1: device descriptor read/64, error -71 [ 183.142473][ T3776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.959'. [ 183.165528][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 183.165544][ T30] audit: type=1400 audit(1790857743.272:951): avc: denied { read write } for pid=3797 comm="syz.4.964" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 183.218514][ T30] audit: type=1400 audit(1790857743.314:952): avc: denied { open } for pid=3797 comm="syz.4.964" path="/33/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 183.232555][ T3798] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 183.251204][ T3798] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.964: corrupted in-inode xattr [ 183.263428][ T3798] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.964: couldn't read orphan inode 15 (err -117) [ 183.276167][ T3798] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,max_dir_size_kb=0x0000000000000005,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 183.278985][ T310] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 183.303974][ T930] udevd[930]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Not a directory [ 183.352256][ T3805] 9pnet: Insufficient options for proto=fd [ 183.358295][ T30] audit: type=1400 audit(1790857743.471:953): avc: denied { ioctl } for pid=3797 comm="syz.4.964" path="/33/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 183.359988][ T930] udevd[930]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 183.393836][ T354] usb 6-1: device descriptor read/64, error -71 [ 183.408087][ T944] udevd[944]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 183.421866][ T310] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 183.434211][ T930] udevd[930]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 183.445963][ T944] udevd[944]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 183.460659][ T930] udevd[930]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 183.470193][ T944] udevd[944]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 183.499495][ T310] usb 5-1: USB disconnect, device number 5 [ 183.522306][ T930] udevd[930]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 183.550397][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 183.562694][ T30] audit: type=1326 audit(1790857743.660:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.6.967" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc243eff159 code=0x7ffc0000 [ 183.573314][ T3816] xt_hashlimit: size too large, truncated to 1048576 [ 183.587891][ T3817] xt_hashlimit: size too large, truncated to 1048576 [ 183.609933][ T30] audit: type=1326 audit(1790857743.660:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.6.967" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fc243eff159 code=0x7ffc0000 [ 183.717117][ T354] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 183.890929][ T30] audit: type=1326 audit(1790857743.660:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.6.967" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc243eff159 code=0x7ffc0000 [ 183.933161][ T30] audit: type=1326 audit(1790857743.660:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.6.967" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc243eff159 code=0x7ffc0000 [ 183.990869][ T30] audit: type=1326 audit(1790857743.660:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.6.967" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc243eff159 code=0x7ffc0000 [ 184.043876][ T30] audit: type=1326 audit(1790857743.660:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.6.967" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc243eff159 code=0x7ffc0000 [ 184.088715][ T30] audit: type=1326 audit(1790857743.734:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.6.967" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc243eff159 code=0x7ffc0000 [ 184.600168][ T354] usb 6-1: device descriptor read/64, error -71 [ 184.832296][ T3852] erofs: (device loop8): mounted with root inode @ nid 36. [ 184.891409][ T3852] netlink: 8 bytes leftover after parsing attributes in process `syz.8.977'. [ 185.086124][ T354] usb 6-1: device descriptor read/64, error -71 [ 185.171441][ T3881] set_capacity_and_notify: 5 callbacks suppressed [ 185.171459][ T3881] loop4: detected capacity change from 0 to 512 [ 185.212676][ T354] usb usb6-port1: attempt power cycle [ 185.230393][ T3885] xt_hashlimit: size too large, truncated to 1048576 [ 186.137322][ T3883] loop9: detected capacity change from 0 to 512 [ 186.172265][ T3873] netlink: 20 bytes leftover after parsing attributes in process `syz.8.982'. [ 186.183306][ T3881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.193366][ T3881] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 186.193919][ T310] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 186.210697][ T3883] EXT4-fs (loop9): Ignoring removed nobh option [ 186.217052][ T3883] EXT4-fs (loop9): Unrecognized mount option "subj_type=^" or missing value [ 186.264277][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 186.266096][ T930] udevd[930]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 186.274867][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 186.308554][ T930] udevd[930]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 186.365254][ T3906] loop4: detected capacity change from 0 to 16 [ 186.378699][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 186.388047][ T3911] loop8: detected capacity change from 0 to 512 [ 186.395600][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 186.405998][ T3906] erofs: Unknown parameter 'ϱú¿P2 ¬¸l' [ 186.415137][ T3911] EXT4-fs error (device loop8): ext4_do_update_inode:5260: inode #15: comm syz.8.990: corrupted inode contents [ 186.427304][ T3911] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 186.436108][ T3911] EXT4-fs error (device loop8): ext4_do_update_inode:5260: inode #15: comm syz.8.990: corrupted inode contents [ 186.443253][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 186.456528][ T310] usb 7-1: Using ep0 maxpacket: 16 [ 186.464296][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 186.464636][ T3911] EXT4-fs error (device loop8): ext4_evict_inode:333: inode #15: comm syz.8.990: mark_inode_dirty error [ 186.484402][ T3911] EXT4-fs (loop8): 1 orphan inode deleted [ 186.490321][ T3911] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,init_itable=0x00000000000000ff,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 186.548238][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 186.557855][ T3916] xt_hashlimit: size too large, truncated to 1048576 [ 186.558447][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 186.573635][ T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.585327][ T310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.595939][ T310] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 186.605134][ T310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.616098][ T310] usb 7-1: config 0 descriptor?? [ 186.631791][ T354] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 186.874638][ T354] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 186.884293][ T504] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 186.892028][ T354] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.902136][ T354] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 186.911127][ T354] usb 6-1: config 1 has no interface number 1 [ 187.117323][ T504] usb 9-1: Using ep0 maxpacket: 8 [ 187.163745][ T3923] loop4: detected capacity change from 0 to 16 [ 187.193609][ T354] usb 6-1: string descriptor 0 read error: -22 [ 187.199903][ T354] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 187.204334][ T3923] erofs: (device loop4): mounted with root inode @ nid 36. [ 187.209227][ T354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.230478][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 187.262560][ T354] usb 6-1: MIDIStreaming interface descriptor not found [ 187.269730][ T504] usb 9-1: unable to get BOS descriptor or descriptor too short [ 187.277430][ T354] snd-usb-audio: probe of 6-1:1.2 failed with error -16 [ 187.293859][ T3925] loop4: detected capacity change from 0 to 128 [ 187.329086][ T3925] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.339945][ T3925] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.355515][ T504] usb 9-1: config 4 has an invalid interface number: 147 but max is 0 [ 187.368860][ T504] usb 9-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 187.383373][ T504] usb 9-1: config 4 has no interface number 0 [ 187.402298][ T3933] netlink: 'syz.9.997': attribute type 12 has an invalid length. [ 187.410140][ T3933] netlink: 'syz.9.997': attribute type 29 has an invalid length. [ 187.417930][ T3933] netlink: 'syz.9.997': attribute type 7 has an invalid length. [ 187.425688][ T3933] netlink: 'syz.9.997': attribute type 37 has an invalid length. [ 187.433504][ T3933] netlink: 80 bytes leftover after parsing attributes in process `syz.9.997'. [ 187.452020][ T354] usb 6-1: USB disconnect, device number 13 [ 187.462714][ T3936] loop9: detected capacity change from 0 to 512 [ 187.481703][ T3936] EXT4-fs (loop9): 1 truncate cleaned up [ 187.487351][ T3936] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,acl,norecovery,jqfmt=vfsold,nojournal_checksum,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 187.499277][ T3939] loop4: detected capacity change from 0 to 256 [ 187.538041][ T3939] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 187.545656][ T3939] FAT-fs (loop4): Filesystem has been set read-only [ 187.552501][ T504] usb 9-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 187.562150][ T504] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.571388][ T504] usb 9-1: Product: syz [ 187.576225][ T3939] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 187.579096][ T504] usb 9-1: Manufacturer: syz [ 187.589763][ T504] usb 9-1: SerialNumber: syz [ 187.600383][ T3952] netem: change failed [ 187.879330][ T6] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 187.941598][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 187.941613][ T30] audit: type=1400 audit(1790857748.280:965): avc: denied { ioctl } for pid=3957 comm="syz.5.1004" path="socket:[33349]" dev="sockfs" ino=33349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 187.958163][ T3960] device veth0 entered promiscuous mode [ 187.977992][ T3960] device vlan2 entered promiscuous mode [ 188.006731][ T3961] loop5: detected capacity change from 0 to 512 [ 188.107454][ T30] audit: type=1400 audit(1790857748.448:966): avc: denied { accept } for pid=3962 comm="syz.6.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 188.136049][ T3965] FAULT_INJECTION: forcing a failure. [ 188.136049][ T3965] name fail_futex, interval 1, probability 0, space 0, times 0 [ 188.149095][ T6] usb 10-1: Using ep0 maxpacket: 32 [ 188.154902][ T3965] CPU: 0 PID: 3965 Comm: syz.5.1007 Not tainted syzkaller #0 [ 188.162292][ T3965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.165341][ T504] usb 9-1: Found UVC 0.02 device syz (04f2:b746) [ 188.172359][ T3965] Call Trace: [ 188.172370][ T3965] [ 188.172378][ T3965] __dump_stack+0x21/0x30 [ 188.188676][ T504] usb 9-1: No valid video chain found. [ 188.189218][ T3965] dump_stack_lvl+0x110/0x170 [ 188.199341][ T3965] ? show_regs_print_info+0x20/0x20 [ 188.200239][ T504] usb 9-1: USB disconnect, device number 15 [ 188.204614][ T3965] dump_stack+0x15/0x20 [ 188.204639][ T3965] should_fail+0x3ab/0x500 [ 188.204659][ T3965] get_futex_key+0x143/0xb60 [ 188.204684][ T3965] ? futex_wait_restart+0x250/0x250 [ 188.228827][ T3965] futex_wake+0x133/0x8f0 [ 188.233166][ T3965] ? futex_wait+0x8f0/0x8f0 [ 188.237674][ T3965] do_futex+0xd8d/0x2800 [ 188.241936][ T3965] ? debug_smp_processor_id+0x17/0x20 [ 188.247312][ T3965] ? kasan_quarantine_put+0x34/0x190 [ 188.252602][ T3965] ? futex_exit_release+0x1e0/0x1e0 [ 188.257812][ T3965] ? __set_current_blocked+0x94/0x230 [ 188.263194][ T3965] ? __kasan_check_read+0x11/0x20 [ 188.268228][ T3965] ? copy_fpstate_to_sigframe+0x881/0xa40 [ 188.274087][ T3965] ? signal_setup_done+0x384/0x480 [ 188.279213][ T3965] ? ptrace_signal+0x470/0x470 [ 188.283987][ T3965] ? fpregs_set+0x5c0/0x5c0 [ 188.288507][ T3965] ? _raw_spin_unlock_irq+0x4e/0x70 [ 188.293712][ T3965] ? get_signal+0x1390/0x1430 [ 188.298406][ T3965] ? __local_bh_enable_ip+0x58/0x80 [ 188.303611][ T3965] ? local_bh_enable+0x1f/0x30 [ 188.308424][ T3965] ? arch_do_signal_or_restart+0xd49/0x1100 [ 188.311300][ T3966] loop6: detected capacity change from 0 to 40427 [ 188.314325][ T3965] __se_sys_futex+0x135/0x330 [ 188.325379][ T3965] ? __fget_files+0x2e1/0x340 [ 188.330041][ T3965] ? __x64_sys_futex+0x100/0x100 [ 188.335072][ T3965] ? __se_sys_ioctl+0x1f/0x1a0 [ 188.339975][ T3965] __x64_sys_futex+0xe5/0x100 [ 188.344664][ T3965] x64_sys_call+0x251/0x9a0 [ 188.349154][ T3965] do_syscall_64+0x4c/0xa0 [ 188.353554][ T3965] ? clear_bhb_loop+0x50/0xa0 [ 188.358223][ T3965] ? clear_bhb_loop+0x50/0xa0 [ 188.362894][ T3965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.368769][ T3965] RIP: 0033:0x7fbc33b11159 [ 188.373170][ T3965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.392760][ T3965] RSP: 002b:00007fbc3256a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 188.401162][ T3965] RAX: ffffffffffffffda RBX: 00007fbc33d98fa8 RCX: 00007fbc33b11159 [ 188.409234][ T3965] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbc33d98fac [ 188.417214][ T3965] RBP: 00007fbc33d98fa0 R08: 0010735b016e96a4 R09: 0000000000000000 [ 188.425175][ T3965] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 188.433147][ T3965] R13: 00007fbc33d99038 R14: 00007ffd06e37030 R15: 00007ffd06e37118 [ 188.441107][ T3965] [ 188.451217][ T30] audit: type=1400 audit(1790857748.805:967): avc: denied { getopt } for pid=3964 comm="syz.5.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.473498][ T3966] F2FS-fs (loop6): invalid crc value [ 188.477541][ T3970] 9pnet: Insufficient options for proto=fd [ 188.480656][ T3966] F2FS-fs (loop6): Found nat_bits in checkpoint [ 188.489523][ T310] usbhid 7-1:0.0: can't add hid device: -71 [ 188.497692][ T310] usbhid: probe of 7-1:0.0 failed with error -71 [ 188.510102][ T310] usb 7-1: USB disconnect, device number 6 [ 188.517739][ T3968] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.523688][ T3966] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 188.528847][ T3968] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.537009][ T6] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 188.559313][ T6] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.570119][ T6] usb 10-1: config 0 interface 0 has no altsetting 0 [ 188.576926][ T6] usb 10-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 188.590095][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.615423][ T6] usb 10-1: config 0 descriptor?? [ 188.943149][ T3209] attempt to access beyond end of device [ 188.943149][ T3209] loop6: rw=2049, want=45104, limit=40427 [ 188.965510][ T30] audit: type=1400 audit(1790857749.362:968): avc: denied { validate_trans } for pid=3980 comm="syz.4.1010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 189.646460][ T3994] 9pnet: Insufficient options for proto=fd [ 189.729610][ T3996] FAULT_INJECTION: forcing a failure. [ 189.729610][ T3996] name failslab, interval 1, probability 0, space 0, times 0 [ 189.747388][ T3996] CPU: 1 PID: 3996 Comm: syz.6.1016 Not tainted syzkaller #0 [ 189.754791][ T3996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.764848][ T3996] Call Trace: [ 189.768133][ T3996] [ 189.771058][ T3996] __dump_stack+0x21/0x30 [ 189.775189][ T6] input: HID 054c:0374 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:054C:0374.0007/input/input13 [ 189.775384][ T3996] dump_stack_lvl+0x110/0x170 [ 189.791644][ T3996] ? show_regs_print_info+0x20/0x20 [ 189.796834][ T3996] dump_stack+0x15/0x20 [ 189.800969][ T3996] should_fail+0x3ab/0x500 [ 189.805360][ T3996] __should_failslab+0xa4/0xe0 [ 189.810103][ T3996] should_failslab+0x9/0x20 [ 189.814583][ T3996] slab_pre_alloc_hook+0x39/0xd0 [ 189.819495][ T3996] ? security_inode_alloc+0x33/0x110 [ 189.824777][ T3996] kmem_cache_alloc+0x44/0x260 [ 189.829532][ T3996] security_inode_alloc+0x33/0x110 [ 189.834734][ T3996] inode_init_always+0x72c/0x9b0 [ 189.839686][ T3996] new_inode_pseudo+0x91/0x210 [ 189.844445][ T3996] new_inode+0x28/0x1e0 [ 189.848584][ T3996] fat_build_inode+0x201/0x3d0 [ 189.853335][ T3996] msdos_lookup+0x3bd/0x490 [ 189.854332][ T6] sony 0003:054C:0374.0007: input,hiddev96,hidraw0: USB HID v0.07 Device [HID 054c:0374] on usb-dummy_hcd.9-1/input0 [ 189.857852][ T3996] ? setup+0xb0/0xb0 [ 189.873940][ T3996] ? d_hash_and_lookup+0x1f0/0x1f0 [ 189.879065][ T3996] ? __kasan_check_write+0x14/0x20 [ 189.884184][ T3996] ? rwsem_read_trylock+0x2af/0x640 [ 189.889398][ T3996] ? lockref_get_not_dead+0xe6/0x1c0 [ 189.894690][ T3996] ? downgrade_write+0x440/0x440 [ 189.899635][ T3996] __lookup_slow+0x2b8/0x410 [ 189.904239][ T3996] ? lookup_one_len+0x2d0/0x2d0 [ 189.909109][ T3996] ? down_read+0xab/0x100 [ 189.913424][ T3996] ? handle_dots+0xe10/0xe10 [ 189.917993][ T3996] ? msdos_hash+0x145/0x1e0 [ 189.922476][ T3996] lookup_slow+0x57/0x70 [ 189.926724][ T3996] walk_component+0x326/0x460 [ 189.931400][ T3996] link_path_walk+0x688/0xde0 [ 189.936064][ T3996] ? handle_lookup_down+0x130/0x130 [ 189.941243][ T3996] __filename_parentat+0x254/0x690 [ 189.946357][ T3996] ? vfs_path_parent_lookup+0x60/0x60 [ 189.951715][ T3996] do_renameat2+0x355/0xfc0 [ 189.956234][ T3996] ? fsnotify_move+0x450/0x450 [ 189.960977][ T3996] ? strncpy_from_user+0x186/0x2d0 [ 189.966068][ T3996] ? getname_flags+0x205/0x510 [ 189.970811][ T3996] __x64_sys_rename+0x86/0x90 [ 189.975463][ T3996] x64_sys_call+0x680/0x9a0 [ 189.979943][ T3996] do_syscall_64+0x4c/0xa0 [ 189.984334][ T3996] ? clear_bhb_loop+0x50/0xa0 [ 189.989004][ T3996] ? clear_bhb_loop+0x50/0xa0 [ 189.993728][ T3996] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 189.999633][ T3996] RIP: 0033:0x7fc243eff159 [ 190.004052][ T3996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.023654][ T3996] RSP: 002b:00007fc242958028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 190.032066][ T3996] RAX: ffffffffffffffda RBX: 00007fc244186fa0 RCX: 00007fc243eff159 [ 190.040024][ T3996] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000280 [ 190.047981][ T3996] RBP: 00007fc242958090 R08: 0000000000000000 R09: 0000000000000000 [ 190.055932][ T3996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.063880][ T3996] R13: 00007fc244187038 R14: 00007fc244186fa0 R15: 00007fff2f5f8dd8 [ 190.071832][ T3996] [ 190.087743][ T504] usb 10-1: USB disconnect, device number 7 [ 190.100780][ T4003] set_capacity_and_notify: 4 callbacks suppressed [ 190.100791][ T4003] loop9: detected capacity change from 0 to 256 [ 190.152083][ T4003] FAT-fs (loop9): Directory bread(block 64) failed [ 190.157080][ T4011] loop6: detected capacity change from 0 to 128 [ 190.158956][ T4003] FAT-fs (loop9): Directory bread(block 65) failed [ 190.171511][ T4003] FAT-fs (loop9): Directory bread(block 66) failed [ 190.178425][ T4003] FAT-fs (loop9): Directory bread(block 67) failed [ 190.185557][ T4003] FAT-fs (loop9): Directory bread(block 68) failed [ 190.192150][ T4003] FAT-fs (loop9): Directory bread(block 69) failed [ 190.199919][ T4003] FAT-fs (loop9): Directory bread(block 70) failed [ 190.207321][ T4014] netlink: 13 bytes leftover after parsing attributes in process `syz.8.1021'. [ 190.207464][ T4011] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.217689][ T4014] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1021'. [ 190.227115][ T4003] FAT-fs (loop9): Directory bread(block 71) failed [ 190.235981][ T1002] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 190.242938][ T4011] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.258586][ T4003] FAT-fs (loop9): Directory bread(block 72) failed [ 190.267009][ T4003] FAT-fs (loop9): Directory bread(block 73) failed [ 190.807082][ T4003] tmpfs: Unknown parameter '017777777777777777777770000000000000000000000400000000000000000003' [ 190.906247][ T4021] loop5: detected capacity change from 0 to 1024 [ 190.913086][ T1002] usb 5-1: unable to get BOS descriptor or descriptor too short [ 190.933192][ T444] attempt to access beyond end of device [ 190.933192][ T444] loop9: rw=1, want=1768, limit=256 [ 190.960580][ T444] attempt to access beyond end of device [ 190.960580][ T444] loop9: rw=1, want=1928, limit=256 [ 190.978640][ T444] attempt to access beyond end of device [ 190.978640][ T444] loop9: rw=1, want=4016, limit=256 [ 191.000231][ T444] attempt to access beyond end of device [ 191.000231][ T444] loop9: rw=1, want=6072, limit=256 [ 191.013234][ T1002] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.045437][ T1002] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.127074][ T444] attempt to access beyond end of device [ 191.127074][ T444] loop9: rw=1, want=14552, limit=256 [ 191.139557][ T4021] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 191.159680][ T444] attempt to access beyond end of device [ 191.159680][ T444] loop9: rw=1, want=21576, limit=256 [ 191.164221][ T444] attempt to access beyond end of device [ 191.164221][ T444] loop9: rw=1, want=27032, limit=256 [ 191.167349][ T444] attempt to access beyond end of device [ 191.167349][ T444] loop9: rw=1, want=29624, limit=256 [ 191.169051][ T444] attempt to access beyond end of device [ 191.169051][ T444] loop9: rw=1, want=31704, limit=256 [ 191.298873][ T1002] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 191.308110][ T1002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.316099][ T1002] usb 5-1: Product: syz [ 191.320615][ T1002] usb 5-1: Manufacturer: syz [ 191.325660][ T1002] usb 5-1: SerialNumber: syz [ 191.343411][ T946] udevd[946]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 191.353431][ T946] udevd[946]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 191.371933][ T944] udevd[944]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 191.384326][ T930] udevd[930]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 191.391222][ T944] udevd[944]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 191.395096][ T4031] 9pnet: Insufficient options for proto=fd [ 191.402281][ T4033] ip_tables: iptables: counters copy to user failed while replacing table [ 191.410301][ T930] udevd[930]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 191.429977][ T4026] loop8: detected capacity change from 0 to 1024 [ 191.430259][ T4037] FAULT_INJECTION: forcing a failure. [ 191.430259][ T4037] name failslab, interval 1, probability 0, space 0, times 0 [ 191.436839][ T4029] fuse: Invalid rootmode [ 191.452579][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 191.454133][ T1002] usb 5-1: selecting invalid altsetting 1 [ 191.463743][ T4031] loop5: detected capacity change from 0 to 128 [ 191.468730][ T1002] usb 5-1: unit 6 not found! [ 191.478789][ T4037] CPU: 1 PID: 4037 Comm: syz.6.1028 Not tainted syzkaller #0 [ 191.481236][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 191.486168][ T4037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.486180][ T4037] Call Trace: [ 191.486186][ T4037] [ 191.486192][ T4037] __dump_stack+0x21/0x30 [ 191.515272][ T4037] dump_stack_lvl+0x110/0x170 [ 191.519935][ T4037] ? show_regs_print_info+0x20/0x20 [ 191.525116][ T4037] dump_stack+0x15/0x20 [ 191.529267][ T4037] should_fail+0x3ab/0x500 [ 191.533666][ T4037] ? netlink_ack+0x35c/0xb10 [ 191.538234][ T4037] __should_failslab+0xa4/0xe0 [ 191.542977][ T4037] should_failslab+0x9/0x20 [ 191.547456][ T4037] slab_pre_alloc_hook+0x39/0xd0 [ 191.552373][ T4037] ? netlink_ack+0x35c/0xb10 [ 191.557034][ T4037] ? netlink_ack+0x35c/0xb10 [ 191.561863][ T4037] __kmalloc_track_caller+0x6c/0x2c0 [ 191.567153][ T4037] ? netlink_ack+0x35c/0xb10 [ 191.571725][ T4037] ? netlink_ack+0x35c/0xb10 [ 191.576293][ T4037] __alloc_skb+0x210/0x730 [ 191.580687][ T4037] netlink_ack+0x35c/0xb10 [ 191.585088][ T4037] ? netlink_dump+0xdf0/0xdf0 [ 191.589746][ T4037] ? selinux_nlmsg_lookup+0x233/0x440 [ 191.595203][ T4037] netlink_rcv_skb+0x267/0x430 [ 191.599956][ T4037] ? xfrm_netlink_rcv+0x90/0x90 [ 191.604795][ T4037] ? netlink_ack+0xb10/0xb10 [ 191.609389][ T4037] ? wait_for_completion_killable_timeout+0x10/0x10 [ 191.616086][ T4037] ? __netlink_lookup+0x387/0x3b0 [ 191.621101][ T4037] xfrm_netlink_rcv+0x72/0x90 [ 191.625782][ T4037] netlink_unicast+0x86c/0xa30 [ 191.630535][ T4037] netlink_sendmsg+0x879/0xb80 [ 191.635282][ T4037] ? netlink_getsockopt+0x530/0x530 [ 191.640460][ T4037] ? kasan_set_track+0x4a/0x70 [ 191.645201][ T4037] ? security_socket_sendmsg+0x82/0xa0 [ 191.650639][ T4037] ? netlink_getsockopt+0x530/0x530 [ 191.655818][ T4037] ____sys_sendmsg+0x5be/0x8f0 [ 191.660569][ T4037] ? __sys_sendmsg_sock+0x40/0x40 [ 191.665574][ T4037] ? import_iovec+0x7c/0xb0 [ 191.670061][ T4037] ___sys_sendmsg+0x236/0x2e0 [ 191.674808][ T4037] ? __sys_sendmsg+0x280/0x280 [ 191.679559][ T4037] ? __fdget+0x1a1/0x230 [ 191.683777][ T4037] __x64_sys_sendmsg+0x201/0x2d0 [ 191.688692][ T4037] ? ___sys_sendmsg+0x2e0/0x2e0 [ 191.693518][ T4037] ? ksys_write+0x1fa/0x260 [ 191.698003][ T4037] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 191.704049][ T4037] x64_sys_call+0x4b/0x9a0 [ 191.708455][ T4037] do_syscall_64+0x4c/0xa0 [ 191.712850][ T4037] ? clear_bhb_loop+0x50/0xa0 [ 191.717506][ T4037] ? clear_bhb_loop+0x50/0xa0 [ 191.722159][ T4037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 191.728035][ T4037] RIP: 0033:0x7fc243eff159 [ 191.732429][ T4037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.752015][ T4037] RSP: 002b:00007fc242958028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.760413][ T4037] RAX: ffffffffffffffda RBX: 00007fc244186fa0 RCX: 00007fc243eff159 [ 191.765317][ T911] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 191.768375][ T4037] RDX: 0000000020004000 RSI: 0000200000000600 RDI: 0000000000000003 [ 191.768390][ T4037] RBP: 00007fc242958090 R08: 0000000000000000 R09: 0000000000000000 [ 191.768400][ T4037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.768412][ T4037] R13: 00007fc244187038 R14: 00007fc244186fa0 R15: 00007fff2f5f8dd8 [ 191.807898][ T4037] [ 191.814200][ T4026] EXT4-fs (loop8): barriers disabled [ 191.819748][ T4026] JBD2: no valid journal superblock found [ 191.825646][ T4026] EXT4-fs (loop8): error loading journal [ 191.828137][ T4043] netlink: 'syz.6.1030': attribute type 17 has an invalid length. [ 191.840995][ T30] audit: type=1400 audit(1790857752.364:969): avc: denied { create } for pid=4042 comm="syz.6.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 191.881627][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 191.892163][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 191.982094][ T4049] loop8: detected capacity change from 0 to 1024 [ 192.170162][ T4049] EXT4-fs (loop8): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 192.197412][ T4049] SELinux: Context  is not valid (left unmapped). [ 192.206316][ T30] audit: type=1400 audit(1790857752.753:970): avc: denied { create } for pid=4048 comm="syz.8.1032" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 192.250361][ T30] audit: type=1400 audit(1790857752.753:971): avc: denied { write } for pid=4048 comm="syz.8.1032" name=E91F7189591E9233614B dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 192.259362][ T4059] loop5: detected capacity change from 0 to 256 [ 192.273780][ T1002] usb 5-1: cannot get ctl value: req = 0x84, wValue = 0x100, wIndex = 0x200, type = 3 [ 192.290734][ T30] audit: type=1400 audit(1790857752.763:972): avc: denied { relabelto } for pid=4048 comm="syz.8.1032" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=01 [ 192.313764][ T1002] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 192.337219][ T1002] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 192.347055][ T1002] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 192.353924][ T4047] loop6: detected capacity change from 0 to 40427 [ 192.356558][ T1002] usb 5-1: USB disconnect, device number 6 [ 192.367775][ T4059] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.375040][ T4061] loop8: detected capacity change from 0 to 128 [ 192.378614][ T4059] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 192.384810][ T911] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.395661][ T4059] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 192.405505][ T911] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.425597][ T911] usb 10-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 192.440062][ T4047] F2FS-fs (loop6): invalid crc value [ 192.446597][ T4047] F2FS-fs (loop6): Found nat_bits in checkpoint [ 192.455384][ T4061] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.466060][ T4061] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.481141][ T4047] F2FS-fs (loop6): Start checkpoint disabled! [ 192.488151][ T4047] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 192.584453][ T911] usb 10-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 192.593742][ T911] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.610920][ T4067] loop5: detected capacity change from 0 to 512 [ 192.637192][ T4065] Restarting kernel threads ... done. [ 192.645064][ T30] audit: type=1400 audit(1790857753.194:973): avc: denied { write } for pid=4046 comm="syz.6.1031" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 192.668672][ T911] usb 10-1: Product: syz [ 192.673073][ T911] usb 10-1: Manufacturer: syz [ 192.678202][ T911] usb 10-1: SerialNumber: syz [ 192.719699][ T4067] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 192.735384][ T911] usb-storage 10-1:1.0: USB Mass Storage device detected [ 192.743620][ T4067] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.756767][ T911] usb-storage 10-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 192.786254][ T911] scsi host1: usb-storage 10-1:1.0 [ 193.022859][ T4041] FAT-fs (loop9): Unrecognized mount option "" or missing value [ 193.103031][ T4080] 8021q: VLANs not supported on lo [ 193.135601][ T911] usb 10-1: USB disconnect, device number 8 [ 193.204099][ T4080] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.221245][ T4082] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 193.252295][ T4082] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.279620][ T4080] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,sysvgroups,dioread_nolock,,errors=continue. Quota mode: writeback. [ 193.327369][ T4080] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.375492][ T30] audit: type=1400 audit(1790857753.971:974): avc: denied { write } for pid=4079 comm="syz.4.1039" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.400804][ T30] audit: type=1400 audit(1790857753.971:975): avc: denied { open } for pid=4079 comm="syz.4.1039" path="/46/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.423976][ T30] audit: type=1400 audit(1790857753.971:976): avc: denied { ioctl } for pid=4079 comm="syz.4.1039" path="/46/file1/file1" dev="loop4" ino=15 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.449653][ T30] audit: type=1400 audit(1790857753.971:977): avc: denied { read append } for pid=4079 comm="syz.4.1039" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.650087][ T30] audit: type=1400 audit(1790857754.244:978): avc: denied { connect } for pid=4088 comm="syz.6.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 193.673292][ T4094] x_tables: duplicate entry at hook 2 [ 193.687389][ T30] audit: type=1400 audit(1790857754.265:979): avc: denied { rename } for pid=4081 comm="syz.8.1036" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.712315][ T30] audit: type=1400 audit(1790857754.265:980): avc: denied { unlink } for pid=4081 comm="syz.8.1036" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 193.811572][ T4106] 9pnet: Insufficient options for proto=fd [ 193.811901][ T4099] FAT-fs (loop8): Directory bread(block 64) failed [ 193.824016][ T4099] FAT-fs (loop8): Directory bread(block 65) failed [ 193.830646][ T4099] FAT-fs (loop8): Directory bread(block 66) failed [ 193.837395][ T4099] FAT-fs (loop8): Directory bread(block 67) failed [ 193.844046][ T4099] FAT-fs (loop8): Directory bread(block 68) failed [ 193.850566][ T4099] FAT-fs (loop8): Directory bread(block 69) failed [ 193.857314][ T4099] FAT-fs (loop8): Directory bread(block 70) failed [ 193.863982][ T4099] FAT-fs (loop8): Directory bread(block 71) failed [ 193.870841][ T4099] FAT-fs (loop8): Directory bread(block 72) failed [ 193.877506][ T4099] FAT-fs (loop8): Directory bread(block 73) failed [ 193.902348][ T4104] program syz.5.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.913914][ T4104] mmap: syz.5.1045 (4104) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 193.995607][ T4096] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 194.185076][ T4119] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x43f62a2d, utbl_chksum : 0xe619d30d) [ 194.240424][ T4096] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 194.250074][ T4096] EXT4-fs (loop9): orphan cleanup on readonly fs [ 194.260497][ T4096] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.1043: Inode bitmap for bg 0 marked uninitialized [ 194.277179][ T4096] EXT4-fs (loop9): Remounting filesystem read-only [ 194.285565][ T4122] tipc: Started in network mode [ 194.290636][ T4122] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 194.298002][ T4096] EXT4-fs (loop9): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000001000000,errors=remount-ro,inode_readahead_blks=0x0000000000800000,lazytime,. Quota mode: writeback. [ 194.315790][ T4122] tipc: Enabled bearer , priority 0 [ 194.385384][ T4124] EXT4-fs warning (device loop5): ext4_multi_mount_protect:300: Invalid MMP block in superblock [ 194.427142][ T4096] SELinux: failed to load policy [ 195.022478][ T4140] ip_tables: iptables: counters copy to user failed while replacing table [ 195.171639][ T4142] set_capacity_and_notify: 12 callbacks suppressed [ 195.171678][ T4142] loop5: detected capacity change from 0 to 16 [ 195.231197][ T4129] ip_tables: iptables: counters copy to user failed while replacing table [ 195.349263][ T504] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 195.376164][ T4142] erofs: (device loop5): mounted with root inode @ nid 36. [ 195.395046][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 195.416146][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.450635][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 195.482218][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.491745][ T4129] loop4: detected capacity change from 0 to 2048 [ 195.510690][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.519117][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.527500][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.535714][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.548607][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'. [ 195.557596][ T4129] EXT4-fs (loop4): Unrecognized mount option "smackfsroot=ext4" or missing value [ 195.567551][ T4144] €˜Ð9x�:>ËCµŸc·oþ8™aœ4éS«/Áø: Can't open blockdev [ 195.583950][ T6] tipc: Node number set to 43690 [ 195.618036][ T4153] loop9: detected capacity change from 0 to 256 [ 195.640872][ T4129] overlayfs: failed to get inode (-116) [ 195.655073][ T4153] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x43f62a2d, utbl_chksum : 0xe619d30d) [ 195.667456][ T4129] overlayfs: failed to get inode (-116) [ 195.687807][ T4129] overlayfs: failed to get inode (-116) [ 195.706762][ T4129] overlayfs: failed to get inode (-116) [ 195.756659][ T504] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.775260][ T504] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.829746][ T4149] loop8: detected capacity change from 0 to 40427 [ 195.891286][ T4149] F2FS-fs (loop8): invalid crc value [ 195.906361][ T4149] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 195.966099][ T504] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 195.975893][ T504] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.983972][ T4149] F2FS-fs (loop8): Start checkpoint disabled! [ 195.990523][ T504] usb 7-1: Product: syz [ 196.000185][ T504] usb 7-1: Manufacturer: syz [ 196.010037][ T504] usb 7-1: SerialNumber: syz [ 196.020621][ T4149] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 196.053533][ T4158] loop4: detected capacity change from 0 to 40427 [ 196.099698][ T4158] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 196.107403][ T4158] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 196.121866][ T4163] loop9: detected capacity change from 0 to 512 [ 196.129739][ T4158] F2FS-fs (loop4): Unrecognized mount option "dont_appraise" or missing value [ 196.140014][ T930] udevd[930]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 196.157548][ T930] udevd[930]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 196.177263][ T930] udevd[930]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 196.201386][ T4163] EXT4-fs error (device loop9): ext4_orphan_get:1410: inode #15: comm syz.9.1062: iget: bad extended attribute block 134217728 [ 196.212094][ T4169] 9pnet: Insufficient options for proto=fd [ 196.214950][ T4163] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.1062: couldn't read orphan inode 15 (err -117) [ 196.233821][ T930] udevd[930]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 196.236122][ T4171] loop8: detected capacity change from 0 to 16 [ 196.243712][ T930] udevd[930]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 196.257848][ T4163] EXT4-fs (loop9): mounted filesystem without journal. Opts: prjquota,,errors=continue. Quota mode: writeback. [ 196.271406][ T944] udevd[944]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 196.283632][ T4169] loop5: detected capacity change from 0 to 128 [ 196.291015][ T930] udevd[930]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 196.299591][ T4171] erofs: (device loop8): mounted with root inode @ nid 36. [ 196.320969][ T4158] loop4: detected capacity change from 0 to 1024 [ 196.322214][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1065'. [ 196.338374][ T930] udevd[930]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 196.358982][ T930] udevd[930]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 196.382600][ T4158] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.410325][ T4173] EXT4-fs (loop9): shut down requested (1) [ 196.410378][ T930] udevd[930]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 196.418533][ T4158] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,grpquota,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 197.331515][ T4185] loop5: detected capacity change from 0 to 512 [ 197.408868][ T4185] EXT4-fs (loop5): orphan cleanup on readonly fs [ 197.482292][ T4185] EXT4-fs error (device loop5): ext4_quota_enable:6431: comm syz.5.1068: Bad quota inum: 32, type: 0 [ 197.493895][ T4185] EXT4-fs warning (device loop5): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=32). Please run e2fsck to fix. [ 197.509288][ T4185] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 197.516034][ T4185] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,noblock_validity,journal_dev=0x0000000000000003,journal_dev=0x000000000000000b,barrier=0x0000000000000081,minixdf,inode_readahead_blks=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 197.542033][ T4185] FAULT_INJECTION: forcing a failure. [ 197.542033][ T4185] name failslab, interval 1, probability 0, space 0, times 0 [ 197.555030][ T4185] CPU: 1 PID: 4185 Comm: syz.5.1068 Not tainted syzkaller #0 [ 197.562410][ T4185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.572461][ T4185] Call Trace: [ 197.575737][ T4185] [ 197.578659][ T4185] __dump_stack+0x21/0x30 [ 197.582988][ T4185] dump_stack_lvl+0x110/0x170 [ 197.587663][ T4185] ? show_regs_print_info+0x20/0x20 [ 197.592861][ T4185] dump_stack+0x15/0x20 [ 197.597012][ T4185] should_fail+0x3ab/0x500 [ 197.601424][ T4185] __should_failslab+0xa4/0xe0 [ 197.606186][ T4185] should_failslab+0x9/0x20 [ 197.610689][ T4185] slab_pre_alloc_hook+0x39/0xd0 [ 197.615633][ T4185] ? getname_flags+0xba/0x510 [ 197.620304][ T4185] kmem_cache_alloc+0x44/0x260 [ 197.625054][ T4185] getname_flags+0xba/0x510 [ 197.629541][ T4185] user_path_at_empty+0x2f/0x1c0 [ 197.634462][ T4185] __se_sys_mount+0x2eb/0x390 [ 197.639122][ T4185] ? __x64_sys_mount+0xd0/0xd0 [ 197.643868][ T4185] __x64_sys_mount+0xbf/0xd0 [ 197.648441][ T4185] x64_sys_call+0x6bf/0x9a0 [ 197.652927][ T4185] do_syscall_64+0x4c/0xa0 [ 197.657346][ T4185] ? clear_bhb_loop+0x50/0xa0 [ 197.662020][ T4185] ? clear_bhb_loop+0x50/0xa0 [ 197.666679][ T4185] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.672555][ T4185] RIP: 0033:0x7fbc33b123ca [ 197.676965][ T4185] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.696555][ T4185] RSP: 002b:00007fbc32569e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.704955][ T4185] RAX: ffffffffffffffda RBX: 00007fbc32569ee0 RCX: 00007fbc33b123ca [ 197.712908][ T4185] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 0000000000000000 [ 197.720868][ T4185] RBP: 0000200000000180 R08: 00007fbc32569ee0 R09: 00000000018920f4 [ 197.728842][ T4185] R10: 00000000018920f4 R11: 0000000000000246 R12: 0000200000000040 [ 197.736890][ T4185] R13: 00007fbc32569ea0 R14: 0000000000000000 R15: 00002000000001c0 [ 197.744848][ T4185] [ 197.809778][ T4191] binder: 4190:4191 ioctl c018620c 2000000001c0 returned -22 [ 197.848890][ T4196] erofs: (device loop4): mounted with root inode @ nid 36. [ 197.858847][ T4194] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x43f62a2d, utbl_chksum : 0xe619d30d) [ 197.877374][ T4198] ip_tables: iptables: counters copy to user failed while replacing table [ 197.956576][ T504] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 198.007002][ T504] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 198.114798][ T4201] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.215387][ T504] usb 7-1: USB disconnect, device number 7 [ 198.350274][ T4207] zero sized request [ 198.847874][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'. [ 198.908411][ T4215] 9pnet: Insufficient options for proto=fd [ 198.918695][ T4212] EXT4-fs (loop9): Test dummy encryption mode enabled [ 198.925544][ T4212] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 198.960242][ T4212] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 198.969475][ T4212] System zones: 0-5 [ 198.974123][ T4212] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,resuid=0x000000000000ee01,user_xattr,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 199.008453][ T4212] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1077'. [ 199.081630][ T30] audit: type=1400 audit(1790857759.976:981): avc: denied { read write } for pid=4211 comm="syz.9.1077" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.125740][ T30] audit: type=1400 audit(1790857759.976:982): avc: denied { open } for pid=4211 comm="syz.9.1077" path="/152/file1/file0/file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.150500][ T30] audit: type=1400 audit(1790857760.008:983): avc: denied { setattr } for pid=4211 comm="syz.9.1077" name="#20" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 199.172900][ T30] audit: type=1400 audit(1790857760.008:984): avc: denied { link } for pid=4211 comm="syz.9.1077" name="#20" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.105724][ T4218] F2FS-fs (loop5): invalid crc value [ 200.166889][ T30] audit: type=1400 audit(1790857761.110:985): avc: denied { unlink } for pid=1661 comm="syz-executor" name="file1" dev="loop9" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 200.245270][ T312] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 200.255236][ T4218] F2FS-fs (loop5): Found nat_bits in checkpoint [ 200.264614][ T30] audit: type=1326 audit(1790857761.215:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.1084" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961545e159 code=0x7ffc0000 [ 200.297353][ T30] audit: type=1326 audit(1790857761.215:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.1084" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961545e159 code=0x7ffc0000 [ 200.302980][ T4236] set_capacity_and_notify: 7 callbacks suppressed [ 200.302997][ T4236] loop6: detected capacity change from 0 to 512 [ 200.328249][ T30] audit: type=1326 audit(1790857761.215:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.1084" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961545e159 code=0x7ffc0000 [ 200.347158][ T4218] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 200.369053][ T30] audit: type=1326 audit(1790857761.215:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.1084" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f961545e159 code=0x7ffc0000 [ 200.401149][ T30] audit: type=1326 audit(1790857761.215:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4231 comm="syz.4.1084" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961545e159 code=0x7ffc0000 [ 200.441537][ T4242] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 200.449834][ T4236] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 200.470337][ T4242] loop9: detected capacity change from 0 to 512 [ 200.476991][ T4236] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.477739][ T4218] handle_bad_sector: 2 callbacks suppressed [ 200.477756][ T4218] attempt to access beyond end of device [ 200.477756][ T4218] loop5: rw=2049, want=45104, limit=40427 [ 200.528318][ T312] usb 9-1: Using ep0 maxpacket: 32 [ 200.570192][ T4242] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.581673][ T4242] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.855363][ T4265] loop5: detected capacity change from 0 to 16 [ 200.893109][ T312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.899236][ T1002] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 200.905343][ T312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.919492][ T4265] erofs: (device loop5): mounted with root inode @ nid 36. [ 200.921608][ T312] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.937524][ T312] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.964926][ T312] usb 9-1: config 0 descriptor?? [ 200.970029][ T4265] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1086'. [ 200.980120][ T946] udevd[946]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 200.991596][ T4270] loop6: detected capacity change from 0 to 256 [ 200.993161][ T4271] loop4: detected capacity change from 0 to 512 [ 201.005624][ T312] hub 9-1:0.0: USB hub found [ 201.011485][ T944] udevd[944]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 201.011958][ T946] udevd[946]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 201.030297][ T946] udevd[946]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 201.045519][ T4270] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x43f62a2d, utbl_chksum : 0xe619d30d) [ 201.078150][ T4271] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 201.093774][ T4271] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.138557][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 201.155413][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 201.175249][ T4279] loop5: detected capacity change from 0 to 16 [ 201.182488][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 201.204213][ T312] hub 9-1:0.0: 1 port detected [ 201.213037][ T4279] erofs: (device loop5): mounted with root inode @ nid 36. [ 201.392976][ T946] udevd[946]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 201.433036][ T1002] usb 10-1: config 100 has an invalid interface number: 9 but max is 0 [ 201.459272][ T4283] FAULT_INJECTION: forcing a failure. [ 201.459272][ T4283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.459882][ T946] udevd[946]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 201.473525][ T1002] usb 10-1: config 100 has no interface number 0 [ 201.487805][ T4283] CPU: 1 PID: 4283 Comm: syz.6.1093 Not tainted syzkaller #0 [ 201.495184][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.498288][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1092'. [ 201.505244][ T4283] Call Trace: [ 201.505256][ T4283] [ 201.505262][ T4283] __dump_stack+0x21/0x30 [ 201.505286][ T4283] dump_stack_lvl+0x110/0x170 [ 201.505300][ T4283] ? show_regs_print_info+0x20/0x20 [ 201.505316][ T4283] dump_stack+0x15/0x20 [ 201.538639][ T4283] should_fail+0x3ab/0x500 [ 201.543082][ T4283] should_fail_usercopy+0x1a/0x20 [ 201.548121][ T4283] fpu__restore_sig+0x1de/0xef0 [ 201.553220][ T4283] ? _raw_spin_unlock_irq+0x4e/0x70 [ 201.558438][ T4283] ? copy_fpstate_to_sigframe+0xa40/0xa40 [ 201.564155][ T4283] ? __kasan_check_write+0x14/0x20 [ 201.569257][ T4283] ? recalc_sigpending+0x1ac/0x230 [ 201.574361][ T4283] ? __kasan_check_write+0x14/0x20 [ 201.579465][ T4283] ? _copy_from_user+0x95/0xd0 [ 201.584218][ T4283] __ia32_sys_rt_sigreturn+0x601/0x730 [ 201.589664][ T4283] ? load_gs_index+0xc0/0xc0 [ 201.594242][ T4283] ? vfs_write+0xfd0/0xfd0 [ 201.598646][ T4283] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 201.604697][ T4283] x64_sys_call+0x4ab/0x9a0 [ 201.609216][ T4283] do_syscall_64+0x4c/0xa0 [ 201.613617][ T4283] ? clear_bhb_loop+0x50/0xa0 [ 201.618278][ T4283] ? clear_bhb_loop+0x50/0xa0 [ 201.622941][ T4283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.628908][ T4283] RIP: 0033:0x7fc243eff157 [ 201.633316][ T4283] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 201.653007][ T4283] RSP: 002b:00007fc242958028 EFLAGS: 00000246 [ 201.659094][ T4283] RAX: 0000000000000000 RBX: 00007fc244186fa0 RCX: 00007fc243eff159 [ 201.667063][ T4283] RDX: 0000000000001004 RSI: 0000200000001c00 RDI: 0000000000000004 [ 201.675055][ T4283] RBP: 00007fc242958090 R08: 0000000000000000 R09: 0000000000000000 [ 201.683016][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.690979][ T4283] R13: 00007fc244187038 R14: 00007fc244186fa0 R15: 00007fff2f5f8dd8 [ 201.698945][ T4283] [ 201.711020][ T1002] usb 10-1: config 100 interface 9 has no altsetting 0 [ 201.729847][ T4287] 9pnet: Insufficient options for proto=fd [ 201.736998][ T4287] loop6: detected capacity change from 0 to 128 [ 201.745166][ T946] udevd[946]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 201.794857][ T312] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 201.801316][ T312] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 201.876886][ T4291] loop4: detected capacity change from 0 to 16 [ 201.899780][ T312] usbhid 9-1:0.0: can't add hid device: -71 [ 201.899782][ T1002] usb 10-1: New USB device found, idVendor=12d1, idProduct=7ffc, bcdDevice=be.6a [ 201.899807][ T1002] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.906221][ T312] usbhid: probe of 9-1:0.0 failed with error -71 [ 201.915227][ T1002] usb 10-1: Product: syz [ 201.934051][ T1002] usb 10-1: Manufacturer: syz [ 201.942364][ T1002] usb 10-1: SerialNumber: syz [ 201.960161][ T4291] erofs: (device loop4): mounted with root inode @ nid 36. [ 202.124372][ T4291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 202.139072][ T312] usb 9-1: USB disconnect, device number 16 [ 202.175733][ T911] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 202.237982][ T4297] loop4: detected capacity change from 0 to 1024 [ 202.261866][ T4299] loop8: detected capacity change from 0 to 256 [ 202.281411][ T4297] EXT4-fs (loop4): barriers disabled [ 202.286831][ T4297] JBD2: no valid journal superblock found [ 202.292636][ T4297] EXT4-fs (loop4): error loading journal [ 202.301076][ T4299] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.371800][ T1002] usb 10-1: USB disconnect, device number 9 [ 202.395618][ T4301] FAT-fs (loop8): Unrecognized mount option "rodir^‡„¥Xu-me=win95" or missing value [ 202.407403][ T4303] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 202.418568][ T4303] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.432755][ T911] usb 6-1: device descriptor read/64, error -71 [ 202.530044][ T4307] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 202.540791][ T4307] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.585956][ T4312] erofs: (device loop6): mounted with root inode @ nid 36. [ 202.608421][ T4312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1103'. [ 202.677520][ T444] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.756792][ T293] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 202.814146][ T911] usb 6-1: device descriptor read/64, error -71 [ 203.118619][ T911] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 203.156597][ T293] usb 9-1: unable to get BOS descriptor or descriptor too short [ 203.204337][ T293] usb 9-1: not running at top speed; connect to a high speed hub [ 203.290004][ T293] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 203.301188][ T293] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 4 [ 203.385151][ T911] usb 6-1: device descriptor read/64, error -71 [ 203.470983][ T293] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 203.480237][ T293] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.488544][ T293] usb 9-1: Product: syz [ 203.493042][ T293] usb 9-1: Manufacturer: syz [ 203.497726][ T293] usb 9-1: SerialNumber: syz [ 203.766532][ T911] usb 6-1: device descriptor read/64, error -71 [ 203.785657][ T1002] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 203.852424][ T293] usb 9-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 203.860963][ T293] usb 9-1: found format II with max.bitrate = 512, frame size=4095 [ 203.869301][ T293] usb 9-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 203.877860][ T293] usb 9-1: found format II with max.bitrate = 512, frame size=4095 [ 203.886738][ T911] usb usb6-port1: attempt power cycle [ 203.929927][ T4334] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 203.941083][ T4334] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.947475][ T293] usb 9-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 203.986243][ T293] usb 9-1: USB disconnect, device number 17 [ 204.018001][ T30] kauditd_printk_skb: 185 callbacks suppressed [ 204.018018][ T30] audit: type=1400 audit(1790857765.163:1176): avc: denied { write } for pid=4342 comm="syz.6.1114" name="functions" dev="configfs" ino=16012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.049931][ T30] audit: type=1400 audit(1790857765.163:1177): avc: denied { add_name } for pid=4342 comm="syz.6.1114" name="hid.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 204.102188][ T4345] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 204.185400][ T1002] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 204.195402][ T1002] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 204.206046][ T4347] EXT4-fs (loop6): Test dummy encryption mode enabled [ 204.212944][ T4347] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 204.223415][ T4347] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 204.231796][ T4347] System zones: 0-5 [ 204.236495][ T4347] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 204.290170][ T911] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 204.312437][ T4350] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 204.323784][ T4350] EXT4-fs (loop8): 1 truncate cleaned up [ 204.329673][ T4350] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 204.375815][ T1002] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 204.385254][ T1002] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.386575][ T4359] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.393324][ T1002] usb 10-1: Product: syz [ 204.408781][ T1002] usb 10-1: Manufacturer: syz [ 204.413503][ T1002] usb 10-1: SerialNumber: syz [ 204.419327][ T1002] usb 10-1: config 0 descriptor?? [ 204.442871][ T4320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 204.445025][ T4361] option changes via remount are deprecated (pid=4360 comm=syz.8.1122) [ 204.450351][ T30] audit: type=1400 audit(1790857765.604:1178): avc: denied { remount } for pid=4360 comm="syz.8.1122" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 204.467011][ T4320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 204.479303][ T30] audit: type=1400 audit(1790857765.625:1179): avc: denied { unmount } for pid=748 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 204.504939][ T911] usb 6-1: device descriptor read/8, error -71 [ 204.538552][ T4363] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 204.546057][ T4363] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 204.555845][ T4363] EXT4-fs (loop6): orphan cleanup on readonly fs [ 204.562258][ T4363] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 204.563237][ T30] audit: type=1400 audit(1790857765.730:1180): avc: denied { mounton } for pid=4367 comm="syz.8.1125" path="/196/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 204.570318][ T4363] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 204.592564][ T912] Bluetooth: hci0: command 0x1003 tx timeout [ 204.600895][ T4363] EXT4-fs (loop6): 1 truncate cleaned up [ 204.607288][ T4368] FAULT_INJECTION: forcing a failure. [ 204.607288][ T4368] name failslab, interval 1, probability 0, space 0, times 0 [ 204.612071][ T4363] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 204.619189][ T4363] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 204.625316][ T4316] Bluetooth: hci0: sending frame failed (-49) [ 204.652604][ T4368] CPU: 0 PID: 4368 Comm: syz.8.1125 Not tainted syzkaller #0 [ 204.666678][ T4368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.676741][ T4368] Call Trace: [ 204.680015][ T4368] [ 204.682933][ T4368] __dump_stack+0x21/0x30 [ 204.687252][ T4368] dump_stack_lvl+0x110/0x170 [ 204.691915][ T4368] ? show_regs_print_info+0x20/0x20 [ 204.697116][ T4368] dump_stack+0x15/0x20 [ 204.701261][ T4368] should_fail+0x3ab/0x500 [ 204.705697][ T4368] __should_failslab+0xa4/0xe0 [ 204.710448][ T4368] should_failslab+0x9/0x20 [ 204.714936][ T4368] slab_pre_alloc_hook+0x39/0xd0 [ 204.719875][ T4368] ? proc_alloc_inode+0x1d/0xb0 [ 204.724710][ T4368] kmem_cache_alloc+0x44/0x260 [ 204.729458][ T4368] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 204.735774][ T4368] proc_alloc_inode+0x1d/0xb0 [ 204.740439][ T4368] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 204.746784][ T4368] new_inode_pseudo+0x62/0x210 [ 204.751566][ T4368] new_inode+0x28/0x1e0 [ 204.755713][ T4368] proc_setup_self+0xe3/0x310 [ 204.760371][ T4368] ? _raw_spin_unlock+0x4d/0x70 [ 204.765210][ T4368] proc_fill_super+0x51d/0x760 [ 204.769978][ T4368] get_tree_nodev+0xb3/0x160 [ 204.774554][ T4368] ? proc_reconfigure+0x3c0/0x3c0 [ 204.779562][ T4368] proc_get_tree+0x1c/0x20 [ 204.783961][ T4368] vfs_get_tree+0x89/0x260 [ 204.788386][ T4368] do_new_mount+0x251/0xb40 [ 204.792872][ T4368] ? security_capable+0x87/0xb0 [ 204.797706][ T4368] path_mount+0x640/0xff0 [ 204.802027][ T4368] __se_sys_mount+0x320/0x390 [ 204.806687][ T4368] ? __x64_sys_mount+0xd0/0xd0 [ 204.811430][ T4368] ? __kasan_check_write+0x14/0x20 [ 204.816528][ T4368] __x64_sys_mount+0xbf/0xd0 [ 204.821124][ T4368] x64_sys_call+0x6bf/0x9a0 [ 204.825617][ T4368] do_syscall_64+0x4c/0xa0 [ 204.830018][ T4368] ? clear_bhb_loop+0x50/0xa0 [ 204.834684][ T4368] ? clear_bhb_loop+0x50/0xa0 [ 204.839442][ T4368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 204.845319][ T4368] RIP: 0033:0x7f97e1301159 [ 204.849721][ T4368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.869307][ T4368] RSP: 002b:00007f97dfd5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.879185][ T4368] RAX: ffffffffffffffda RBX: 00007f97e1588fa0 RCX: 00007f97e1301159 [ 204.887410][ T4368] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 204.895375][ T4368] RBP: 00007f97e139806b R08: 0000000000000000 R09: 0000000000000000 [ 204.903341][ T4368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.911303][ T4368] R13: 00007f97e1589038 R14: 00007f97e1588fa0 R15: 00007ffdddb57248 [ 204.919266][ T4368] [ 204.928160][ T4368] proc_fill_super: can't allocate /proc/self [ 204.928559][ T1002] dm9601: probe of 10-1:0.0 failed with error -71 [ 204.949242][ T1002] usb 10-1: USB disconnect, device number 10 [ 204.975808][ T911] usb 6-1: device descriptor read/8, error -71 [ 204.996199][ T4374] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 205.015398][ T4375] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.030383][ T4375] ext4 filesystem being mounted at /197/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.040573][ T4382] FAULT_INJECTION: forcing a failure. [ 205.040573][ T4382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.053930][ T4382] CPU: 0 PID: 4382 Comm: syz.5.1130 Not tainted syzkaller #0 [ 205.061313][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.071367][ T4382] Call Trace: [ 205.074633][ T4382] [ 205.077551][ T4382] __dump_stack+0x21/0x30 [ 205.082312][ T4382] dump_stack_lvl+0x110/0x170 [ 205.086973][ T4382] ? show_regs_print_info+0x20/0x20 [ 205.092153][ T4382] ? vfs_write+0xc72/0xfd0 [ 205.096558][ T4382] dump_stack+0x15/0x20 [ 205.100698][ T4382] should_fail+0x3ab/0x500 [ 205.105117][ T4382] should_fail_usercopy+0x1a/0x20 [ 205.110148][ T4382] strncpy_from_user+0x24/0x2d0 [ 205.115004][ T4382] __se_sys_add_key+0xd8/0x410 [ 205.120224][ T4382] ? __x64_sys_add_key+0xd0/0xd0 [ 205.125846][ T4382] ? ksys_write+0x1fa/0x260 [ 205.130345][ T4382] ? __kasan_check_write+0x14/0x20 [ 205.135463][ T4382] __x64_sys_add_key+0xbf/0xd0 [ 205.140241][ T4382] x64_sys_call+0x713/0x9a0 [ 205.144734][ T4382] do_syscall_64+0x4c/0xa0 [ 205.149137][ T4382] ? clear_bhb_loop+0x50/0xa0 [ 205.153803][ T4382] ? clear_bhb_loop+0x50/0xa0 [ 205.158466][ T4382] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.164981][ T4382] RIP: 0033:0x7fbc33b11159 [ 205.169400][ T4382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.188999][ T4382] RSP: 002b:00007fbc3256a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 205.197416][ T4382] RAX: ffffffffffffffda RBX: 00007fbc33d98fa0 RCX: 00007fbc33b11159 [ 205.205376][ T4382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.213330][ T4382] RBP: 00007fbc33ba806b R08: ffffffffffffffff R09: 0000000000000000 [ 205.221289][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.229244][ T4382] R13: 00007fbc33d99038 R14: 00007fbc33d98fa0 R15: 00007ffd06e37118 [ 205.237235][ T4382] [ 205.288892][ T4389] set_capacity_and_notify: 13 callbacks suppressed [ 205.288911][ T4389] loop8: detected capacity change from 0 to 4096 [ 205.328872][ T4389] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 205.336330][ T4389] EXT4-fs (loop8): Test dummy encryption mode enabled [ 205.344953][ T4389] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 205.393586][ T30] audit: type=1400 audit(1790857766.601:1181): avc: denied { rename } for pid=4388 comm="syz.8.1131" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.418067][ T30] audit: type=1400 audit(1790857766.601:1182): avc: denied { rename } for pid=4388 comm="syz.8.1131" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 205.548941][ T4395] loop9: detected capacity change from 0 to 128 [ 205.615382][ T4395] FAT-fs (loop9): bogus number of reserved sectors [ 205.622195][ T4395] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 205.632095][ T4395] FAT-fs (loop9): Can't find a valid FAT filesystem [ 205.697583][ T4408] loop8: detected capacity change from 0 to 256 [ 205.738156][ T312] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 205.763501][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 205.791440][ T4412] loop5: detected capacity change from 0 to 128 [ 205.799240][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 205.855001][ T4408] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 205.874727][ T4412] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 205.891126][ T30] audit: type=1400 audit(1790857767.126:1183): avc: denied { append } for pid=4407 comm="syz.8.1142" name="file1" dev="loop8" ino=1048733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 205.914597][ T4408] exFAT-fs (loop8): hint_cluster is invalid (17) [ 205.972537][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 205.984709][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 206.060711][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 206.087249][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 206.114423][ T4424] loop5: detected capacity change from 0 to 256 [ 206.128170][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 206.185884][ T4429] Core dump to core aborted: cannot preserve file permissions [ 206.186126][ T3568] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 206.203084][ T3568] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 206.242450][ T3568] tipc: Resetting bearer [ 206.255282][ T3568] tipc: Disabling bearer [ 206.310503][ T8] tipc: Left network mode [ 206.330316][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 206.362845][ T946] udevd[946]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 206.576431][ T1002] Bluetooth: hci0: command 0x1001 tx timeout [ 206.582582][ T4316] Bluetooth: hci0: sending frame failed (-49) [ 206.587105][ T312] usb 7-1: Using ep0 maxpacket: 16 [ 206.700471][ T312] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.735576][ T312] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.757135][ T312] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 206.770466][ T312] usb 7-1: config 0 interface 0 has no altsetting 0 [ 206.777332][ T312] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 206.786658][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.813225][ T312] usb 7-1: config 0 descriptor?? [ 206.835699][ T8] device bridge_slave_1 left promiscuous mode [ 206.847062][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.891107][ T8] device bridge_slave_0 left promiscuous mode [ 206.897331][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.917897][ T8] device veth1_macvtap left promiscuous mode [ 206.926768][ T8] device veth0_vlan left promiscuous mode [ 207.050066][ T4446] loop8: detected capacity change from 0 to 1024 [ 207.057411][ T930] udevd[930]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 207.101543][ T4446] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.274281][ T312] hid (null): invalid report_size 24934 [ 207.280525][ T312] hid (null): unknown global tag 0xd [ 207.285999][ T312] hid (null): unknown global tag 0xd [ 207.291338][ T312] hid (null): global environment stack underflow [ 207.297661][ T312] hid (null): global environment stack underflow [ 207.304069][ T312] hid (null): invalid report_count 32373 [ 207.464698][ T312] usb 7-1: USB disconnect, device number 8 [ 207.814249][ T310] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 207.814472][ T1002] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 208.052443][ T1002] usb 9-1: Using ep0 maxpacket: 8 [ 208.131923][ T4470] loop6: detected capacity change from 0 to 512 [ 208.168701][ T4470] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 208.183208][ T4470] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #11: comm syz.6.1163: corrupted inode contents [ 208.195328][ T4470] EXT4-fs error (device loop6): ext4_dirty_inode:6118: inode #11: comm syz.6.1163: mark_inode_dirty error [ 208.206862][ T4470] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1163: invalid indirect mapped block 1 (level 1) [ 208.220122][ T310] usb 10-1: unable to get BOS descriptor or descriptor too short [ 208.228064][ T4470] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #11: comm syz.6.1163: corrupted inode contents [ 208.240168][ T4470] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 208.243199][ T1002] usb 9-1: unable to get BOS descriptor or descriptor too short [ 208.248942][ T4470] EXT4-fs error (device loop6): ext4_do_update_inode:5260: inode #11: comm syz.6.1163: corrupted inode contents [ 208.268408][ T4470] EXT4-fs error (device loop6): ext4_truncate:4317: inode #11: comm syz.6.1163: mark_inode_dirty error [ 208.279683][ T4470] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 208.288791][ T4470] EXT4-fs (loop6): 1 truncate cleaned up [ 208.294473][ T4470] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.338149][ T1002] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.348310][ T1002] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.357049][ T310] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 208.528606][ T310] usb 10-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 208.537828][ T310] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.546585][ T310] usb 10-1: Product: syz [ 208.550909][ T912] Bluetooth: hci0: command 0x1009 tx timeout [ 208.551027][ T310] usb 10-1: Manufacturer: syz [ 208.561617][ T310] usb 10-1: SerialNumber: syz [ 208.595396][ T1002] usb 9-1: string descriptor 0 read error: -22 [ 208.601739][ T1002] usb 9-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 208.610839][ T1002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.653294][ T1002] usb 9-1: invalid UAC_HEADER (v1) [ 208.658498][ T1002] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 208.848098][ T1002] usb 9-1: USB disconnect, device number 18 [ 209.023817][ T310] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 209.243143][ T310] snd-usb-audio: probe of 10-1:1.0 failed with error -2 [ 209.450227][ T4482] usb usb8: usbfs: process 4482 (syz.6.1166) did not claim interface 0 before use [ 209.452640][ T310] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 209.481913][ T30] audit: type=1400 audit(1790857770.895:1184): avc: denied { append } for pid=4483 comm="syz.6.1167" name="usbmon2" dev="devtmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.522055][ T30] audit: type=1400 audit(1790857770.916:1185): avc: denied { ioctl } for pid=4483 comm="syz.6.1167" path="/dev/usbmon2" dev="devtmpfs" ino=161 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.652396][ T310] snd-usb-audio: probe of 10-1:1.1 failed with error -2 [ 209.671460][ T310] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 209.690571][ T310] snd-usb-audio: probe of 10-1:1.2 failed with error -2 [ 209.701969][ T310] usb 10-1: USB disconnect, device number 11 [ 210.355347][ T4497] loop6: detected capacity change from 0 to 512 [ 210.392002][ T4502] loop8: detected capacity change from 0 to 4096 [ 210.406852][ T4502] EXT4-fs (loop8): Test dummy encryption mode enabled [ 210.413844][ T4497] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 210.423995][ T4502] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 210.435163][ T4502] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 210.441444][ T4497] EXT4-fs (loop6): 1 truncate cleaned up [ 210.443502][ T4502] System zones: [ 210.448965][ T4497] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,mb_optimize_scan=0x0000000000000001,errors=remount-ro,nombcache,. Quota mode: none. [ 210.456401][ T4502] 0-5 [ 210.484693][ T4502] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,resuid=0x000000000000ee01,user_xattr,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 210.607331][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 210.616778][ T930] udevd[930]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 210.627132][ T930] udevd[930]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 210.636803][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 211.390318][ T4516] loop6: detected capacity change from 0 to 512 [ 211.397832][ T4517] loop9: detected capacity change from 0 to 16 [ 211.405419][ T946] udevd[946]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 211.415006][ T930] udevd[930]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 211.433994][ T4517] erofs: (device loop9): mounted with root inode @ nid 36. [ 211.445705][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 299 @ nid 36 [ 211.455381][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 298 @ nid 36 [ 211.464538][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 297 @ nid 36 [ 211.473688][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 296 @ nid 36 [ 211.482848][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 295 @ nid 36 [ 211.491993][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 294 @ nid 36 [ 211.501168][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 293 @ nid 36 [ 211.510316][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 292 @ nid 36 [ 211.519443][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 291 @ nid 36 [ 211.528847][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 290 @ nid 36 [ 211.538001][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 289 @ nid 36 [ 211.547131][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 288 @ nid 36 [ 211.556321][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 280 @ nid 36 [ 211.565458][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 279 @ nid 36 [ 211.568427][ T4516] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 211.574611][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 278 @ nid 36 [ 211.598582][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 277 @ nid 36 [ 211.607736][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 276 @ nid 36 [ 211.616882][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 275 @ nid 36 [ 211.624948][ T4516] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.626034][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 274 @ nid 36 [ 211.645686][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 273 @ nid 36 [ 211.655023][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 272 @ nid 36 [ 211.664232][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 271 @ nid 36 [ 211.673486][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 270 @ nid 36 [ 211.682675][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 269 @ nid 36 [ 211.691822][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 268 @ nid 36 [ 211.700986][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 267 @ nid 36 [ 211.710122][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 266 @ nid 36 [ 211.719229][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 265 @ nid 36 [ 211.728358][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 264 @ nid 36 [ 211.737515][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 263 @ nid 36 [ 211.746665][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 262 @ nid 36 [ 211.755818][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 261 @ nid 36 [ 211.765029][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 260 @ nid 36 [ 211.774304][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 259 @ nid 36 [ 211.783597][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 258 @ nid 36 [ 211.792816][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 257 @ nid 36 [ 211.802031][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 256 @ nid 36 [ 211.811204][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 255 @ nid 36 [ 211.820364][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 254 @ nid 36 [ 211.829515][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 253 @ nid 36 [ 211.838658][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 252 @ nid 36 [ 211.847793][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 251 @ nid 36 [ 211.856933][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 250 @ nid 36 [ 211.866351][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 186 @ nid 36 [ 211.875474][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 185 @ nid 36 [ 211.884604][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 184 @ nid 36 [ 211.893737][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 183 @ nid 36 [ 211.902854][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 182 @ nid 36 [ 211.911976][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 181 @ nid 36 [ 211.921094][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 180 @ nid 36 [ 211.930210][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 179 @ nid 36 [ 211.939330][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 178 @ nid 36 [ 211.948443][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 177 @ nid 36 [ 211.957541][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 176 @ nid 36 [ 211.966747][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 155 @ nid 36 [ 211.975853][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 154 @ nid 36 [ 211.984976][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 153 @ nid 36 [ 211.994091][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 152 @ nid 36 [ 212.003215][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 151 @ nid 36 [ 212.012526][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 150 @ nid 36 [ 212.021666][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 149 @ nid 36 [ 212.030869][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 148 @ nid 36 [ 212.039983][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 147 @ nid 36 [ 212.049102][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 146 @ nid 36 [ 212.058255][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 145 @ nid 36 [ 212.067417][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 144 @ nid 36 [ 212.076542][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 143 @ nid 36 [ 212.088441][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 142 @ nid 36 [ 212.097572][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 141 @ nid 36 [ 212.106688][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 140 @ nid 36 [ 212.115851][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 139 @ nid 36 [ 212.125029][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 120 @ nid 36 [ 212.134165][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 119 @ nid 36 [ 212.143312][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 118 @ nid 36 [ 212.152559][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 117 @ nid 36 [ 212.161695][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 116 @ nid 36 [ 212.170818][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 115 @ nid 36 [ 212.179936][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 114 @ nid 36 [ 212.189060][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 113 @ nid 36 [ 212.198190][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 112 @ nid 36 [ 212.207311][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 212.216431][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 212.225548][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 212.234664][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 212.243781][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 107 @ nid 36 [ 212.252907][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 106 @ nid 36 [ 212.262119][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 212.271168][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 212.280218][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 212.289261][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 212.298312][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 212.307544][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 212.316603][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 212.325634][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 212.334794][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 212.343861][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 212.352914][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 212.361961][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 212.371027][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 212.380248][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 212.389277][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 212.398311][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 67 @ nid 36 [ 212.407350][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 212.416379][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 212.425420][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 212.434513][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 212.443559][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 212.452578][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 212.461621][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 212.470663][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 212.479703][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 212.488751][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 212.497784][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 212.506830][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 212.515872][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 212.524987][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 212.534050][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 212.543130][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 212.552550][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 212.561679][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 212.570763][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 212.579853][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 212.588915][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 212.597981][ T4517] erofs: (device loop9): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 212.607408][ T4517] attempt to access beyond end of device [ 212.607408][ T4517] loop9: rw=524288, want=328, limit=16 [ 212.618622][ T4517] attempt to access beyond end of device [ 212.618622][ T4517] loop9: rw=524288, want=336, limit=16 [ 212.629763][ T4517] attempt to access beyond end of device [ 212.629763][ T4517] loop9: rw=524288, want=1049296, limit=16 [ 212.641278][ T4517] attempt to access beyond end of device [ 212.641278][ T4517] loop9: rw=524288, want=1049304, limit=16 [ 212.652878][ T4517] attempt to access beyond end of device [ 212.652878][ T4517] loop9: rw=524288, want=408, limit=16 [ 212.664403][ T4517] attempt to access beyond end of device [ 212.664403][ T4517] loop9: rw=524288, want=416, limit=16 [ 212.675573][ T4517] attempt to access beyond end of device [ 212.675573][ T4517] loop9: rw=524288, want=32, limit=16 [ 212.686698][ T4517] attempt to access beyond end of device [ 212.686698][ T4517] loop9: rw=524288, want=752, limit=16 [ 212.697737][ T4517] attempt to access beyond end of device [ 212.697737][ T4517] loop9: rw=524288, want=760, limit=16 [ 212.708745][ T4517] attempt to access beyond end of device [ 212.708745][ T4517] loop9: rw=524288, want=525176, limit=16 [ 212.816534][ T930] udevd[930]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 212.825765][ T946] udevd[946]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 212.844842][ T4552] loop6: detected capacity change from 0 to 256 [ 212.855463][ T4555] loop8: detected capacity change from 0 to 1024 [ 212.855889][ T946] udevd[946]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 212.871358][ T930] udevd[930]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 212.874762][ T4557] loop4: detected capacity change from 0 to 512 [ 212.902877][ T4555] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.934503][ T4557] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 212.946701][ T4557] FAT-fs (loop4): Filesystem has been set read-only [ 213.993286][ T4571] loop9: detected capacity change from 0 to 256 [ 214.627918][ T4571] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 214.643391][ T4580] loop8: detected capacity change from 0 to 512 [ 214.710994][ T4580] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 214.722327][ T4580] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.783541][ T4588] EXT4-fs (loop8): shut down requested (0) [ 215.484803][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 215.494428][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 216.047124][ T4595] loop4: detected capacity change from 0 to 512 [ 216.056331][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 216.332282][ T4595] EXT4-fs (loop4): orphan cleanup on readonly fs [ 216.339048][ T4595] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #15: comm syz.4.1199: corrupted inode contents [ 216.351294][ T4595] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 216.361529][ T4595] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #15: comm syz.4.1199: corrupted inode contents [ 216.373841][ T4595] EXT4-fs error (device loop4): ext4_evict_inode:333: inode #15: comm syz.4.1199: mark_inode_dirty error [ 216.385598][ T4595] EXT4-fs (loop4): 1 orphan inode deleted [ 216.391619][ T4595] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000005c,nouid32,mb_optimize_scan=0x0000000000000001,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 216.483152][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 216.498545][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 216.507920][ T312] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 216.872389][ T312] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.882742][ T312] usb 9-1: config 1 interface 1 altsetting 2 endpoint 0x4 has invalid maxpacket 5127, setting to 1024 [ 216.894055][ T312] usb 9-1: config 1 interface 1 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 1024 [ 217.062872][ T312] usb 9-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 217.071940][ T312] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.079983][ T312] usb 9-1: Product: syz [ 217.084266][ T312] usb 9-1: Manufacturer: syz [ 217.088846][ T312] usb 9-1: SerialNumber: syz [ 217.302457][ T4620] loop4: detected capacity change from 0 to 256 [ 217.310068][ T930] udevd[930]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 217.360324][ T930] udevd[930]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 217.369982][ T930] udevd[930]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 217.455474][ T312] usb 9-1: USB disconnect, device number 19 [ 217.548209][ T293] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 217.586380][ T310] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 217.891428][ T293] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.902595][ T293] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.912440][ T293] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.925734][ T293] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.934894][ T293] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.943060][ T310] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.953382][ T310] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 217.962601][ T293] usb 10-1: config 0 descriptor?? [ 217.967759][ T310] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 218.129331][ T310] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 218.138400][ T310] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.146424][ T310] usb 7-1: Product: syz [ 218.150604][ T310] usb 7-1: Manufacturer: syz [ 218.155183][ T310] usb 7-1: SerialNumber: syz [ 218.388236][ T4612] loop6: detected capacity change from 0 to 128 [ 218.395424][ T944] udevd[944]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 218.425223][ T293] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 218.434647][ T293] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 218.473255][ T4623] udevd[4623]: open /dev/null failed: Not a directory [ 218.515225][ T4622] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1205'. [ 218.526848][ T4622] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1205'. [ 218.798962][ T4642] loop8: detected capacity change from 0 to 128 [ 218.836963][ T4642] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 218.923665][ T4642] handle_bad_sector: 33 callbacks suppressed [ 218.923688][ T4642] attempt to access beyond end of device [ 218.923688][ T4642] loop8: rw=0, want=156, limit=128 [ 218.985571][ T2740] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 219.205500][ T310] usb 7-1: Can't get UAC3 power state for id 10 [ 219.634100][ T310] usb 7-1: 0:2 : does not exist [ 219.639019][ T310] usb 7-1: BAAD SPEAKERPHONE c_chmask mismatch [ 219.645599][ T310] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 219.654232][ T310] usb 7-1: USB disconnect, device number 9 [ 220.452710][ T4659] loop8: detected capacity change from 0 to 128 [ 220.454619][ T4657] udevd[4657]: open /dev/null failed: Not a directory [ 220.467500][ T930] udevd[930]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 220.483339][ T4659] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 220.495620][ T946] udevd[946]: inotify_add_watch(7, /dev/sda, 10) failed: Not a directory [ 220.637397][ T946] udevd[946]: inotify_add_watch(7, /dev/sda1, 10) failed: Not a directory [ 220.748379][ T293] usb 10-1: reset high-speed USB device number 12 using dummy_hcd [ 221.015170][ T293] usb 10-1: device firmware changed [ 221.020649][ T912] usb 10-1: USB disconnect, device number 12 [ 221.167451][ T912] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 221.250605][ T748] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 221.259171][ T748] FAT-fs (loop8): Filesystem has been set read-only [ 221.265885][ T748] VFS: Lookup of 'file0' in vfat loop8 would have caused loop [ 221.273449][ T748] VFS: Lookup of 'file0' in vfat loop8 would have caused loop [ 221.321817][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 221.332760][ T946] udevd[946]: inotify_add_watch(7, /dev/loop8, 10) failed: Not a directory [ 221.397543][ T4682] loop4: detected capacity change from 0 to 256 [ 221.405165][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 221.567303][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 221.580186][ T946] udevd[946]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 221.615537][ T912] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.628147][ T912] usb 10-1: config 1 interface 1 altsetting 2 endpoint 0x1 has invalid maxpacket 1031, setting to 1024 [ 221.796633][ T912] usb 10-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 221.805834][ T912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.814285][ T912] usb 10-1: Product: syz [ 221.818633][ T912] usb 10-1: Manufacturer: syz [ 221.823373][ T912] usb 10-1: SerialNumber: syz [ 221.911591][ T8] device bridge_slave_0 left promiscuous mode [ 221.918076][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.928542][ T8] device veth1_macvtap left promiscuous mode [ 221.934637][ T8] device veth0_vlan left promiscuous mode [ 222.168014][ T912] usb 10-1: 1:2 : no or invalid class specific endpoint descriptor [ 222.241680][ T912] usb 10-1: USB disconnect, device number 13 [ 223.714361][ T4704] loop9: detected capacity change from 0 to 512 [ 223.750464][ T946] udevd[946]: inotify_add_watch(7, /dev/loop9, 10) failed: Not a directory [ 223.834979][ T4704] FAT-fs (loop9): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 225.291847][ T4717] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1240'. [ 227.537357][ T4732] loop6: detected capacity change from 0 to 512 [ 227.571699][ T4733] udevd[4733]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 227.642129][ T4732] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 227.659588][ T4732] ext4 filesystem being mounted at /101/sys supports timestamps until 2038-01-19 (0x7fffffff) [ 227.723693][ T4733] udevd[4733]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 227.741378][ T4733] udevd[4733]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=0 req=1162 state=3 status=67 (errno 32: Broken pipe) [ 227.927434][ T30] audit: type=1400 audit(1790857790.256:1186): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[325]" dev="pipefs" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 228.055029][ T4740] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 228.855081][ T2737] device bridge_slave_1 left promiscuous mode [ 228.861251][ T2737] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.868745][ T2737] device bridge_slave_0 left promiscuous mode [ 228.874941][ T2737] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.882693][ T2737] device bridge_slave_1 left promiscuous mode [ 228.888813][ T2737] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.896288][ T2737] device bridge_slave_0 left promiscuous mode [ 228.902547][ T2737] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.910841][ T2737] device veth1_macvtap left promiscuous mode [ 228.916945][ T2737] device veth0_vlan left promiscuous mode [ 228.922870][ T2737] device veth1_macvtap left promiscuous mode [ 228.928865][ T2737] device veth0_vlan left promiscuous mode [ 230.172120][ T2737] device bridge_slave_1 left promiscuous mode [ 230.178720][ T2737] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.186367][ T2737] device bridge_slave_0 left promiscuous mode [ 230.192871][ T2737] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.201097][ T2737] device veth1_macvtap left promiscuous mode [ 230.207164][ T2737] device veth0_vlan left promiscuous mode