last executing test programs: 9m16.751799949s ago: executing program 3 (id=181): r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="120101021e436d105e04f800e5e00102030109022c00012a09207f0904b270000e01002f08240201800296080924020101020806f70924020203010600", @ANYRESHEX], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x52}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0}) 9m12.927965867s ago: executing program 3 (id=195): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000001200010004000000000000000a"], 0x54}}, 0x20004054) 9m12.902147108s ago: executing program 3 (id=197): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100", @ANYRESOCT=r0], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000080)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000002280)=@ethtool_per_queue_op={0x1f, 0xf, [0x6, 0x9, 0x1, 0xffff0001, 0x10001, 0x4, 0x76, 0x5, 0x0, 0x6, 0x88, 0x80000000, 0x10000, 0x6, 0x5, 0x8, 0x49d, 0xa94, 0xabe, 0x1, 0x6, 0x6, 0x101, 0x0, 0x5d, 0x73f9d07d, 0x3, 0xd96, 0x0, 0x3, 0x0, 0xd9ea, 0x7, 0x1, 0x80000001, 0x1, 0x5, 0x1, 0x2, 0x9, 0x7330, 0x6, 0xc9b, 0x0, 0x7fff, 0x73, 0x6, 0x9, 0x5, 0xffff, 0x6, 0x4, 0x1, 0xdd, 0x6, 0xef83, 0x564c, 0x0, 0x6, 0x5, 0x1, 0x4, 0x4, 0xf, 0x9b9a, 0x308, 0x100, 0x5, 0x4, 0x2, 0x10, 0x8, 0xa, 0x1, 0x4, 0x0, 0x1, 0x1, 0x5, 0x1000, 0x6, 0x6, 0x7, 0xec, 0x1, 0xb2d9, 0x7, 0xd, 0x6, 0x7, 0x8341, 0x49, 0x8, 0x4, 0xd4, 0x5, 0x1442, 0x40, 0x7, 0x200, 0x7fffffff, 0x1, 0x4f, 0x8, 0xfffffffb, 0x5, 0x7fff, 0x0, 0x3, 0xc4, 0xfffffc01, 0x2, 0x2, 0x80000000, 0x400, 0xb, 0x0, 0xc2, 0xffffffff, 0x1, 0x3, 0x6, 0x80000001, 0x6, 0x6, 0x80, 0x3, 0x4]}}) 9m12.788821082s ago: executing program 3 (id=201): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000005c0), 0x2204010, 0x0) chdir(&(0x7f0000000140)='./file0\x00') readlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)=""/169, 0xa9) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 9m12.609547638s ago: executing program 3 (id=203): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0xc87119cbf340c0d9, 0x0, 0x0) 9m12.479790713s ago: executing program 3 (id=206): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="030000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 9m12.479584133s ago: executing program 32 (id=206): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="030000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 7m50.446078815s ago: executing program 5 (id=718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x9, 0x4}, @ipv4=@tcp={{0x8, 0x4, 0x0, 0x1, 0xf82, 0x67, 0x0, 0x9, 0x6, 0x0, @remote, @remote, {[@rr={0x7, 0x7, 0xb1, [@empty]}, @lsrr={0x83, 0x3, 0x3c}]}}, {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xc, 0x0, 0x4}, {"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"}}}}, 0xf90) 7m49.623789022s ago: executing program 5 (id=722): unshare(0x60040000) r0 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 7m48.78787687s ago: executing program 5 (id=725): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x100008) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x5) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 7m47.796044073s ago: executing program 5 (id=729): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000140)='./bus\x00', 0x3008014, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f00000020c0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) 7m47.545382042s ago: executing program 5 (id=733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x9, 0x4}, @ipv4=@tcp={{0x8, 0x4, 0x0, 0x1, 0xf82, 0x67, 0x0, 0x9, 0x6, 0x0, @remote, @remote, {[@rr={0x7, 0x7, 0xb1, [@empty]}, @lsrr={0x83, 0x3, 0x3c}]}}, {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0xc, 0x0, 0x4}, {"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"}}}}, 0xf90) 7m47.2992955s ago: executing program 5 (id=736): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x40, 0xf, 0x101, 0x8, 0x0, 0x7, 0x0}) 7m47.29917923s ago: executing program 33 (id=736): r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0x40, 0xf, 0x101, 0x8, 0x0, 0x7, 0x0}) 7.213781101s ago: executing program 2 (id=3628): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) capget(&(0x7f00000000c0)={0x19980330, r1}, &(0x7f0000000180)={0xfff, 0x0, 0x1000, 0x9, 0x4, 0xfffff800}) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/430], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 6.31193224s ago: executing program 2 (id=3636): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000cc0)={0x20, r0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_setup(0x1, &(0x7f00000003c0)) unshare(0x62020600) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x42040400) 2.780278837s ago: executing program 4 (id=3655): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e010103f70909050803ff030406090221072501"], 0x0) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0xffffffffffffffff) 2.507920026s ago: executing program 2 (id=3657): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x63953fd0e015314a, 0x8031, 0xffffffffffffffff, 0x2000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x7d9a80, 0x0) socket$igmp6(0xa, 0x3, 0x2) connect$pppl2tp(r3, 0x0, 0x0) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x404009c) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd}) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xb, 0x4, @empty, 0x8}, 0x1c) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/159, 0x9f}], 0x1}, 0x100) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) 2.479063447s ago: executing program 1 (id=3658): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f00000030c0)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 2.467587838s ago: executing program 1 (id=3659): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @remote, 0x6}, 0x1c) 2.456287848s ago: executing program 1 (id=3660): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/179, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=""/4101}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 2.40399945s ago: executing program 1 (id=3661): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x40000000010000, {0x1, 0x20000001, 0x6, 0x3, 0x2, 0x41004, {0x6, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3, 0x2, 0x4000, 0x80000e}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022b00001000000009046efd82deca6b0f12"], 0x0) 2.189821767s ago: executing program 4 (id=3662): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) statfs(&(0x7f0000000140)='./file0\x00', 0x0) 2.171060738s ago: executing program 2 (id=3663): unshare(0x6a040000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @loopback, 0x40004}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r2, r3, 0x0, 0xffffffff) fspick(r3, &(0x7f0000000000)='./file0\x00', 0x0) futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0xfffffff7) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) 2.165822608s ago: executing program 4 (id=3664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x42, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) 2.140011079s ago: executing program 4 (id=3665): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1.947999005s ago: executing program 6 (id=3667): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) lseek(r0, 0x800000100000a, 0x0) 1.947829515s ago: executing program 6 (id=3668): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() timer_create(0x3, &(0x7f0000000200)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) 1.894691267s ago: executing program 0 (id=3669): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000007c0)={[{@time_offset={'time_offset', 0x3d, 0x1}}, {@dmask={'dmask', 0x3d, 0x2}}, {@uid={'uid', 0x3d, 0xee00}}, {@fmask={'fmask', 0x3d, 0x8}}, {@time_offset={'time_offset', 0x3d, 0x1}}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@namecase}, {}, {@umask={'umask', 0x3d, 0x7}}]}, 0x1, 0x152d, &(0x7f0000006800)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy05ikSS5JMklSZIkyS0hSXIkITHkljQkIbkMyWUIyWVi0rjf75eEJGmSJOSerP9nYv7q1Pmfc3518vufeb6fz/7Mevbaz3qfd5693/3udzbfdh5SvWGNKvWJCP4QvPgjAQBiAWAAAFwDAAEAlIkrE5cxn11iwh/bCPtzPZx8pStgVxL3P2vj/mdt3P+sjfuftXH/szbuf9bG/c/auP+MZWWbpuW/lm9Z98bX/7Myfv//L5JeYsyXa0pc3wUg5l9N4f7//w//QC73/79W8K88iPuftXH/s6rYK10A+1+AX/9ZQbZ/OMP9z9q4/4xlZb+8FhwLV/569F99g8h/8m8gvufF3/KV389/uP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJwExSD4uCgBJSEm6EU3AKl4VYoA7dBWbgdykF5qAAV4Q6oBHdCZbgLqsDdUBWqQXWoAfdATbgXasF9UBvuhzrwANSFB6EePAT14WFoAI9AQ3gUGsFj0BiaQFNoBs3/R/kvQnd4CXpAT0iAXtAbXoY+0Bf6QX8YAK/AQHgVBsFrkAiDYQi8DkPhDRgGb8JwGAEj4S0YBW/DaBgDY2EcJMF4mADvwER4FybBZJgCUyEZpsF0eA9mwEyYBe/DbPgA5sBcmAfzIQU+hAWwEFLhI1gEH0MaLIYlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBn8BO+BR2wW7YA5/BXvj838w//Xf5XRAQUKBAhQpjMAZjMRZzYA7MiTkxF+bCCEYwDuMwN+bGPJgH82E+jMd4LIgF0aBBQsJCWAijGMUiWASLYlEshsXQocOSWBJL4S1YGktjGSyDZbEslsPyWB4rYkWshJWwMlbGKlgFq2JVrI7V8R68B3thLawFgLWxDtbJvDyF9bE+NsAG2BAbYiNshI2xMTbFptgcm2MLbIEtsSW2xtbYBttgW2yL7bAdtsf22AE7YEfsiJ2wE3bGztgFu2LX9BezAb6EL2FPrCp6YW/sjX0wMVs/7I/98RUciK/iq/gaJuJgHIKv4+v4Bg7DUzj8wggciSOxkngbR+MYJDEOkzAJJ+AEnIgTcRJOxsk4FZNxGk7H6TgDZ+JMfB9n4wf4Ac7FuTgfUzAFF+BCTMVUXISnMQ0X4xJcistwOS7DlbgKV+IaXItrcD2ux424ETfjZtyKW3E7bsdPUAHgp7gbd2Mi7sW9uA/34X7cjwfwAKZjOh7Eg3gID+FhPIxH8AgexWN4HI/hCTyBp/A0nsEzeA7P4Xl8Pv7rBp/ctDoRRAYllIgRMSJWxIocIofIKXKKXCKXiIiIiBNxIrfILfKIPCKfyCfiRbwoKAoKI4wgEWYcKURUREURUUQUFUVFMVFMOOFESVFSlBKlRGlRWpQRt4my4nZRTpQXrVxFUVFUEq1dZXGXqCKqiKqimqguaogaoqaoKWqJWqK2qC3qiDqirnhQ1BO9sB8+LDI601AMxkZiCDYWTYS8dIRqIYZhS9FKtBZPihE4HNuKFq6deEa0F6Oxg/ibGIPPiU5iHHYWL4guoqvoJl4U3UVL10P0FJOwl+gtpmIf0Vf0E/3FDKwm3sfZ2auL10SiGCyGiNfFfHxDDBNviuFihBgp3hKjxNtitBgjxopxIkmMFxPEO2KieFdMEpPFFDFVJItpYrp4T8wQM8Us8b6YLT4Qc8RcMU/MFyniQ7FALBSp4iOxSHws0sRisUQsFcvEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHaxQ3widopPxS6xW+wRn4m94nOxT3wh9osvxQHxlUgXX4uD4htxSHwrDovvxBHxvTgqjonj4gdxQpwUp8RpcUacFefEj+K8+ElcEF6ARCmklEoGMkZmk7Eyu8whr5I5ZZB5/Jdx8jqZW14v88i8Mp/ML+NlAVlQammklSRDWUgWllF5gywib5RF5U2ymCwunSwhS8qbZSl5iywtb5Vl5G2yrLxdlpPlZQVZUd4hK8k7JUQubqOqrCaryxryHpkA98pa8j5ZW94v68gHZF35oKwnH5L15cOygXxENpSPykbyMdlYNpFNZTPZXD4uW8gnZEvZSraWT8o28inZVj4t28lnZHvpLz1FnpOd5POys3xBdpFdZTf5k7wgvewhe0roBbK3fFn2kX1lP9lfDpCvyIHyVTlIviYT5WA5RL4uh8o35DD5phwuR8iR8i05Sr4tR8sxcqwcJ5PkeDlBviMnynflJDlZTpFTZbKcJvtdWmmWlP80/53fyR/089Y3yk1ys9wit8ptcrvcIT+RO+VOuUvuknvkHrlX7pX75D65X+6XB+QBmS7T5UF5UB6Sh+RheVgekUfkUXlMnpU/yBPypDwlT8vT8qw8J8/J85d+B6BQCSWVUoGKUdlUrMqucqirVE51tcqlrlERda2KU9ep3Op6lUflVflUfhWvCqiCSiujrCIVqkKqsIqqG/DSE0YVU8WVUyVUSXXzv5OviqgbVVF106/yM+tL+Af1NVfNVQvVQrVULVVr1Vq1UW1UW9VWtVPtVPuT7VUH1UF1VB1VJ9VJdVadVRfVRXVT3VR31V31UD1UgkpQvdXLqo/qq/qp/mqAekVk7MMgNUglqkQ1RA1RQ9VQNUwNU8PVcDVSjVSj1Cg1Wo1WY9VYlaSS1AQ1QU1UE9UkNUlNUVNUskpW09V0NUPNULPULDVbzVZz1Bw1T81TKSpFLVALVKpKVYvUIpWmFqvFaqlaqpar5WqlWqlWq9VqrVqr1qv1Kk1tUpvUFrVFbVPb1A61Q+1UO9UutUvtUXvUXrVX7VP71H61Xx1QB1S6SlcH1UF1SB1Sh9VhdUQdUUfVUXVcHVcn1Al1Sp1SZ9QZdU6dU+fVeXVBXcg47QtEIAIVqCAmiAlig9ggR5AjyBnkDHIFuYJIEAnigrggd3B9kCfIG+QL8gfxQYGgYKADE9hAXGp6NLghKBLcGBTNuCMoHrigRFAyuDkoFdwSlA5uDcoEtwVlg9uDckH5oEJQMbgjqBTcGVQO7gqqBHcHVYNqQfWgRnBPUDO4N6gV3BfUDu4P6gQPBHWDB4N6wUNB/eDhoEHwSNAweDRoFDwWNA6aBE2DZkHzP3V970/lfcL10D11gu6le+uXdR/dV/fT/fUA/YoeqF/Vg/RrOlEP1kP063qofkMP02/q4XqEHqnf0qP023q0HqPH6nE6SY/XE/Q7eqJ+V0/Sk/UUPVUn62l6un5Pz9Az9Sz9vp6tP9Bz9Fw9T8/XKfpDvUAv1Kn6I71If6zT9GK9RC/Vy/RyvUKv1Kv0ar1Gr9Xr9Hq9QW/Um/RmvUVv1dv0dr1Df6J36k/1Lr1b79Gf6b36c71Pf6H36y/1Af2VTtdf64P6G31If6sP6+/0Ef29PqqP6dL6B31Cn9Sn9Gl9Rp/V5/SP+rz+SV/QPuPkPuPt3SijTIyJMbEm1uQwOUxOk9PkMrlMxERMnIkzuU1uk8fkMflMPhNv4k1BU9BkIEOmkClkoiZqipgipqgpaoqZYsYZZ0qakqaUKWVKm9KmjCljypqyppwpZyqYCuYOc4e509xp7jJ3mbvN3aaaqWZqmBqmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpqFpaBqZzENQU9PcNDctTAvT0rQ0rU1r08a0MW1NW9POtDPtTXvTwXQwHU1H08l0Mp1NZ9PFdDHdTDfT3XQ3PUwPk2ASTG/T2/QxfUw/088MMAPMQDPQDDKDTKJJNEPMEDPUDDXDzDAz3IwwIzNOVM3bZrQZY8aacSbJJJkJZoKZaCaaSWaSmWKmmGSTbKab6WaGmWFmmVlmtplt5pg5Zp6ZZ1JMillgFphUk2oWmUUmzaSZJWaJWWaWmRVmhVllVpk1Zo1ZB+vMBrPBbDKbzBazxWwz28wOs8PsNDvNLrPL7DF7zF6z1+wz+8x+s98cMAdMukk3B81Bc8gcMofNYXPEHDFHzVFz3Bw3J8wJc8qcMmfMGXPO5L30fulNrM1uc9irbE57tc1lr7F/H+ez+W28LWALWm3z2Ly/io21tqi9yRazxa2zJWxJe/Nv4nK2vK1gK9o7bCV7p638m7imvdfWsvfZ2vZ+W8Pe86u4jn3A1rWP2nqIALaJbWCb2Yb2UdvIPmYb2ya2qW1m29inbFv7tG1nn7Ht7bO/iRfYhXaVXW3X2LV2l91tz9iz9pD91p6zP2Y8iewA+4odaF+1g+xrNtEO/k080r5lR9m37Wg7xo61434TT7FTbbKdZqfb9+wMO/M3cYr90M62qXaOnWvn2fk/xxk1pdqP7CL7sU2zASyxS+0yu9yusCv/b61L7Xq7wW60O+2ndovdarfZ7XZH5omw3W332M/sXvu5PWi/sfvtl/aAPWzT7dc/xxn7d9h+Z4/Y7+1Re8wetz/YE/akysw+Z3+0P9if7AXrLRASkCRFAcVQNoql7JSDrqKcdDXlomsoQtdSHF1Huel6ykN5KR/lp3gqQAVJkyFLRCEVosIUpRsos7xiVJwclaCSdDOVoluoNN1KZeg2Kku3UzkqTxWoIt1BlehOqkx3URW6m6pSNapONegeqkn3Ui26j2rT/VSHHqC69CDVo4eoPj1MDegRakiPUiN6jBpTE2pKzag5PU4t6AlqSa2oNT1JbegpaktPUzt6htrTs9SB/kYd6TnqRM9TZ3qBulBX6kYvUnd6iXpQT0qgXtSbXqY+1Jf6UX8aQK/QQHqVBtFrlEiDaQi9TkPpDRpGb9JwGkEj6S0aRW/TaBpDY2kcJdF4mkDv0ER6lybRZJpCUymZptF0eo9m0EyaRe/TbPqA5tBcmkfzKYU+pAW0kFLpI1pEH1MaLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lbbRdtpBn9BO+pR20W7aQ5/RXvqc9tEXtJ++pAP0FaXT13SQvqFD9C0dpu98T/qejtIxOk4/0Ak6SafoNJ2hs3SOfqTz9BNdIE8QYihCGaowCGPCbGFsmD3MEV4V5gyvDnOF14SR8NowLrwuzB1eH+YJ84b5wvxhfFggLBjq0IQ2pDAMC4WFw2h4Q1gkvDEsGt4UFguLhy4sEZYMbw5LhbeEpcNbwzLhbWHZ8PawXFg+fPT+iuEdYaXwzrByeFdYJbw7rBpWC6uHNcJ7wprhvWGt8L6wdnh/WDp8IKwbPhjWCx8K64cPhw3CR8KG4aNho/CxsHHYJGwaNgubh4+HLcInwpZhq7B1eFXYJnwqbBs+HbYLnwnbh8/+PP/Awsz5J38znxD2CnuHL4cvh97fJ+dF50dToh9GF0QXRlOjH0UXRT+OpkUXR5dEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0a9r5ENHDrhpFMucDEum4t12V0Od5XL6a52udw1LuKudXHuOpfbXe/yuLwun8vv4l0BV9BpZ5x15EJXyBV2UXeDK+JudEXdTa6YK+6cK+FKumauuWvuWrgnXEvXyrV2T7on3VPuKfe0e9o949q7Z10H9zfX0T3nOrnn3fPuBdfFdXXd3Iuuuxuf6+JrMsH1dr1dH9fH9XP93AA3wA10A90gN8glukQ3xA1xQ91QN8wNc8PdcDfSjXSj3Cg32o12Y91Yl+SS3AQ3wU10E90kN8lNcVNcskt20910N8PNcJVmXtzKHDfHzXPzXIpLcQtcxiliqlvkFrk0l+aWuCVumVvmVrgVbpVb5da4NW6dW+c2uA1uk9vktrgtbpvb5na4HW6n2+l2+WsuLur2un1un9vv9rsD7iuX7r52B9037pD71h1237kj7nt31B1zx90P7oQ76U650+6MO+vOuR/defeTu+C8S4qMj0yIvBOZGHk3MikyOTIlMjWSHJkWmR55LzIjMjMyK/J+ZHbkg8icyNzIvMj8SErkw8iCyMJIauSjyKLIx5G0yOLIksjSyLLI8oj3BbaEvpAv7KP+Bl/E3+iL+pt8MV/cO1/Cl/Q3+1IX607z/jZf1t/uy/nyvoJ/zDf2TXxT38w394/7Fv4J39K38q39k76Nf8q39U/7dv4Z394/6zv4v/mO/jnfyT/vO/sXfBff1XfzL/ru/iXfw/f0Cb6X7+1f9n18X9/P9/cD/Ct+oH/VD/Kv+UQ/2A/xr/uh/g0/zL/ph/sRfmTMW35U5kdkGOeT/Hg/wb/jJ/p3/SQ/2U/xU32yn+an+/f8DD/Tz/Lv+9n+Az/Hz/Xz/Hyf4j/0C/xCn+o/8ov8xz7NL868aOxX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1+m9/ud/hP/E7/qd/ld/s9/jO/13/u9/kv/H7/pT/gv/Lp/mt/0H/jD/lv/WH/nT/iv/dH/TF/3P/gT/iT/pQ/7c/4s/6c/9Gf9z/5C/xv1hhjjDHG/iXjLw/Fr2cuXkvr9Ts54hcP7g0AV2/Nn/7L+YwzynV5Lo77ivjYjJ/P9Oz8cOatatWEhIRLj02TEBSeC5D5l6AMP3/14FK8GFrDU9AOWkGp362/r+h6jv7J+tHbAHL8IiejoMz48vpfAGDC76z/+JMjF5QNz8T9P9afC1C08OWc7HA5Xgytf76+0gpK/4P687b4J/Vn/zIJoOUvcnLC5fhy/SXhCXgW2v3qkYwxxhhjjDHG2EV9RYWOmZ8/M7/x+Xufz+PV5ZxscDn+Z5/PGWOMMcYYY4wxduU917Xb04+3a9eq478/qPw/yvqXB43gP7UyD3534D1A5j0KAP7gggAZA/lX7sXmv2RbiZdeOn8/teysD+B/Ryv/jMEVPjAxxhhjjDHG/nSXT/p/fb+6UgUxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGNZ0F/x34ld6X1kjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGrrT/EwAA//+Pdvgw") creat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10) 1.885110877s ago: executing program 1 (id=3670): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r2, 0x7}, 0x14, 0x0}}], 0x1, 0x80) 1.831927199s ago: executing program 0 (id=3671): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) 1.763611351s ago: executing program 1 (id=3672): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d66326673002c6d6f64653d61646170746976652c686561702c6e6f7265636f766572792c667379ee635f6d6f64653d706f7369782c757365725f78617474722c64697361626c655f726f6c6c5f666f72776172642c000000"], 0x1, 0x105d8, &(0x7f0000010600)="$eJzs3E1vG1UXAODjpOnb5i0lQizYdSSElEi1FSdpBbsAqQCJVBEfC1bg2I7l1h9R7CSmCBFYI5b9I7Biz54/wQ6xQGJXBPLMGJpSREqN8/U80vjMvZ45PteKlBzfyAGcW3PJLz8X4mpcjojpiLgSkZ4X8iO1moUXIuJaREw9dBTy+T8mLkbEbERcHSbPchbypz69f7D+YLA+m2e9fjwrBk6ClyKivZ2d77ez2G1k8U4+X9lrprG9spfH7In23XzczeJ+fTPNsF8ZXVdJ43Iju767vdsbxq1WpTqMjeZWOr/dyV6wt9cY5UlvuFPZSce1+uao3IP0vnvZYJDHe71+lqeW5/s4TR/9/ihm8/VBPVvP9t00Vjv9fL6b1VerD4ZxL4+9bDqq3VYtrWPzX77Jp8Dbzc7uINmr7/Sa3U5yo1R+uVS+WSzvdGv1fn2lWGnXbq4k843W8LJiv15prza63UarXqp22wvJfKNaLZbLyfxafbNZ6STlcmm5tFi8sZCfXU/euP1+0qol88P4WrOz22+2eslWdyfJ7lhIlkrLrywkL5aTd9c3ko13bt1a33jvw7UPbr+6/tbr+UV/KSuZX1pcWiqWF4tL5YUnXPCvJ3L9w1/Rk1n/Iy493e2cd4XjLgDg9En7/8sxyf7/k2/v/7T2ReV7/T+cLU/0l9hp6v+beUOu/x+/E9L/Tq7/P8L6Pz9H69f/81T0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59YPM1+/mZ7MZeP/5/PP5FPP5eNCRExFxG+PMR0XD+WczvPM/M31M4/U8F0h0gzD1/hffsxGxGp+PHj28bVfGOs7AQAAAGfTNwfXvsq69exh7rgLYpKyD22mrnw0pnyFiJiZ+3FM2aaGD8+PKVn6830hBmPKln6AdWlMyfIPxT4bU7ojmT4ULj0UClmYmmQ1AADAZBzuBOyoAwAAnF1fHncBjN9R9u8KMdrKHO0Fp/95/+eG4OVDIwAAAOAUKhx3AQAAAMB/Lu3/T/P3/wEAAAD/LPv+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgd3buJjdtIIoD+LPBLf1SUdVlpV6lOzhGj9Bll4gD9BIcgV4hF+AMZJcjRDjCYxQcESkKY6Og30/yx1jw5xmxeTPIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCn22o9/7/4+e/cnF19njx3AwAAAJyyrdbz5mSaxp/a61/aS9/acRERZUSc6t1H8a6TOWpzqmdeXz2p4SaiSdh/xvt2+xgRv9rt/mvf3wIAAABcr81yNUvdetpNL10QQ0qTNuXn35nyioiopneZ0sr97numsOb3PY6/mdKaCaxJprA05TbOlfYio85hcnQo0qEctBwAAGAQ3U5g2C4EAACAIf05Ol9csA4GVsRhKfOwFtz88/5xQfBDZwQAAAC8QcWlCwAAAAB61/T/nv8HAAAA1y09/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA+bav1fLNczc7N2dWv8GOS3lzXdYZbAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe2J9jFQhhAAaguXJ36ib9/4+VoODo6PIeFNKEDgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgwec6Gcn3bvec19HwazWT/Ds1LJ0a1s4NWx/MFz8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzW7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzt38xpHGccB/Jndne0LSNcoC/VixUpFscnWNwQvPQjBg+BJPC7pblndqrQ52JKDuXgQ/A+86LUXISBIPfgX9ODJHuulguyhggcvrsxbnLyAE21md5PPB555fpk8mXlmAiHfeSYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqTy+FcUTeTTSerG/m+nx9urCX9vV194kH/9tmkJXVU77QXTiu5R91ZzwIAAICjrlnk+xDC/XhrNekbnTT/P1eMSTL/xmNZXeT53bm/6Ivsn7Q7P3zz7vaJOtl54hDCd53xYKW2K5xv5yuOO1NhTPosIXtC00y/bY23N5+YxOldj768e/etdlqe+H8zBgAehYtFnxfD6LP096PhaDzozXJiACyu1r9/uhhS5P9mp4Z5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMzYZDO8WNRRCOGp1j914t7DjbX9+gf922eLdub9Jz8vHzM5RBxCGI7Gg5M1Xss8O19x3I2btz7sj8eD6wcqnv5PX6VQKBalOOQfUAAAHClx3pJcfz/eWk32RUshTL/emf8vlOpQMf//OLpzoXyucv7v1XaF861q/l9ev/bJ8o2bt14aXetfHVwdfHSp90rv9ZU3Xu29tpzcz5Vse8izBQAAYFG181bO/42lvev/p0t1qJj/f/r1vd/K52rK/3scfP3/kCcEAABwjD1+7o/fo332R+12+LS/vn69l223P76UbUOed+fGqb27TuStnP+bSzOYGwAAAFC7yWa0Y/3/SqkOFdf/v3/hz6/Kx2zmjyCGo/Hg4trH4yv1Xc7cytb/yw9mOvuOq+PPiWu6ZAAAAGbgVN7K6/9x+v5/45kw/Ws6DSE0QgjPP5uNz/8NYKX8/2bri8vlc5Xf/395+0jHU6Ob3Y8q7/+nY7shtLo1TAwAAIAj6WTekvz/S7y1+sG3p99pe/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBv9ufeNmEgjOPw60uixG0yQnqLjxloqBCsAEhIljwDA7AQDRWtxSKwAkhwrukMxfM0/19xxb0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb+/69MVHRBSRukyRptu/82dEfEXate3k+57F/nJqfh65OBxnOX9j/l9GRBlFH+cAAPSu6jbHelOvBnmHeUd5x3mrsqmXr/w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwYwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jY4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICxAgAA//8mdl2/") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xa75) 1.518909089s ago: executing program 6 (id=3673): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x63953fd0e015314a, 0x8031, 0xffffffffffffffff, 0x2000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x7d9a80, 0x0) socket$igmp6(0xa, 0x3, 0x2) connect$pppl2tp(r3, 0x0, 0x0) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x404009c) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd}) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xb, 0x4, @empty, 0x8}, 0x1c) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/159, 0x9f}], 0x1}, 0x100) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) 1.150181661s ago: executing program 6 (id=3674): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000540)={0xff, 0x37, 0xffffffee, 0x7fffffef, 0x0, "b850e43615b1b70500000000000400", 0x81002, 0x2}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x302002, 0x0, 0x1, 0x0, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$inet6(r0, &(0x7f0000003100)={&(0x7f0000000200)={0xa, 0x4e21, 0x74, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x12}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="8000e859667fbc13", 0x8}], 0x1}, 0x8050) 1.149957351s ago: executing program 6 (id=3675): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1014080, &(0x7f0000000000), 0xfe, 0x5c8, &(0x7f0000000640)="$eJzs3V2IXFcdAPD/nd1N7SaaVmo11TZbq23sx2x2twRTC5JHbVNqP56MxCWZbMLOZuLuBLtbCxuKUMFIqD7pk4Kg4kNEUBAfCmJ9FHxTSgWLKIFQLEXRqCPnzkyYuJPZbHazt937+8HdPffcO3vOnT//+3Fy700ApTWWfmQROyLi1YjY2Z69coWx9q9zU+ePpymLVuvpN7N8vRemzh/vrtr93Pb0oxLxofTr1xHbR1a2u7C4NDtdr9fmO/PjzblT4wuLSw+dmJueqc3UTk5OTezbO7lvYt/+DdvWHz7/8mdff/7xS2cvjn7/tV27/5H6u6OzrHc7NspYjHW+k5H4aO+CLOLTG91YQYYiYjgiPlB0R1izQ7/7+rPd+I3k+b8zhvK5iNGpQ2/tjLOPFt1H4MZp5a62dKgFbGVZFN0DoBjdI326/u1Om3XuMbtVLoLfxS4eaF8AvtAZ2zl3Of7DUemsM3KDru93/zViLJr3n//M3V9NU9ygcRiubvlM5AN1K/M/y8fGbumsd09E7ImIj0XExyPi3oi4b51tP/OFFP8/frO3Tvw317XG/xMRUY2I+yPigYh4MCIeWmfbtx9M8d/+xd66K+OfrbMF3snu+FzRPWADtIau84O/fWmDe8Ka5fv/vcPD/fb/lXX+7bsHtZsuPvJ/V1x+o7fe8b88nnq66B5QpCf2Fd0DivSdN4vuAa8caF/MrTz+V+L2nvVS+YPtS8XYlc7dI+LDEfGRiLgzIu6KiN3d+4mu0VceS+tXa711K4//lQvr2T4Gu3gg4tGee7vO9cS/45ahztx78/GAkezYiXptb0S8Lx8TGrkpzU8MaONry796rF/9j+9M8f/UE93xvzSl9rtjgZ1+XBi+6crPHZ1uTq93u2m7eCbijuF+8c86dwK1R2FaETF+nW28uOcnv+lX/8mnUvzvfXBw/LmRWt9tj+P2i39XNvj+zPF8fzDe3Sus9GLcdrZf/ZOXUvzf+IP4Fyfl/+jg+Of7/8v36y6svY3hcxe+0bd+LsX/z7+8nv3/tuyZvIPbOnXPTTeb8xMR27LHV9ZPrr3PW1X3++h+Xyn+e+7pf/x/f+cz6QtNmf2fiPhvRPwzIv4VEZci4t8R8beIeGtAm794+ZGf96ufejbF/y+vyv/ipPgfXSX/syvyf+2Fb9+1/8v92v7B91L8R6ur5//DeWf2dGqc/63uWgNUdD8BAAAAAAAA2BiV/B14WaV6uVypVKvtd/jdFqOVemOh+cCxxumTR6PzPOhIpXun186e+0EnOs+Kducn/29+KiJujYiXhm7O56tHGvWjRW88lNSOiNd/+qUj27ZfJf+T1673wU7gHS3l/7FvDS2n8tvyHEol5f+P3p7Ln8uS/1Au8h/KS/5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF69+Q+U05MHD6ap1X3v58nGzInZ46f2T+6tzp0+Uj3SmD9VnWk0ZvInduZW/3v1RuPUxMNx+rnxZm2hOb6wuHR4rnH6ZPNw/t7ow7WRTdgmYHV//9Pnf3br7ld+n0XE8iM351P0vDtbrsLW5tIfymu46A4AhXGOD2SrLH/P1RYc2vi+AJtjvf/HP/Dudd8u4/9QVsb/obyM/0N5OccHsogzg5Yb/4etx/g/lFdtfmFxaXa6Xl9RKLpnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADltLC4NDtdr9fmFRQUSlf4XwAAAP//TKdMUw==") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x105000, 0x0) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) 1.149762641s ago: executing program 2 (id=3676): openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x1c6) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000600)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x80, 0xfd}]}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8948, &(0x7f0000000200)={'vlan1\x00', @random="0106002010ff"}) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) 1.080998274s ago: executing program 4 (id=3677): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7, 0x13, r0, 0x5ca73000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 508.735023ms ago: executing program 0 (id=3678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 508.399843ms ago: executing program 6 (id=3679): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000027000701010000006c17f08803"], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 508.061373ms ago: executing program 0 (id=3680): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x11, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7, 0x6}, {0x2, 0xa}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20049010}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r3, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2000c080) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 507.880853ms ago: executing program 4 (id=3681): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x1c, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x20000014) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x40) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x2, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, "0100"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821d"}, @local=@item_4={0x3, 0x2, 0xa, "8b923659"}, @local=@item_4={0x3, 0x2, 0x2, "000400"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r5, 0x4b4c, &(0x7f00000000c0)={0x400, 0x5}) r6 = syz_open_dev$evdev(0x0, 0x4, 0x2) ioctl$EVIOCSKEYCODE(r6, 0x40084504, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r8, 0x0, r8, 0x0, 0x6, 0x130) 191.863233ms ago: executing program 2 (id=3682): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x80, 0x2, 0x6}, {0x1, 0x8, 0x2, 0x7}, {0x4, 0xfc, 0x9, 0x5}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@noinit_itable}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$eJzs3M1vFOUfAPDvTLuF/oBfq+ILL2oVjQ1qSwGVgwc1mnjAxEQPGk9NWwhSqKE1EUIUjMGTMSbejUf/BU96MUYvJl71bkiI6QXw4prZnWl3l90tLbtdYD+fZOB55qXP99uZZ/eZeXYbQN8ay/5JIrZHxB8RMVKt1u8wVv3v2vL5mevL52eSKJff+jup7Hd1+fxMsWtx3La8Mp5GpJ8lsadJu4tnz52cnp+fO5PXJ5dOfTC5ePbcsydOTR+fOz53+uCRI4cPTb3w/MHnmgc+tL48s5iu7v54Ye+u19/96o2jX9Tl35BHh4y12/hkudzh5nprR005GexhIKzLQERkp6tU6f8jMRCrJ28kXvu0p8EBXVUul8vbWm++UG6QNq4A7mBJ1Ndv6PLAXap4o8/uf4ulcRDwUveGHz135eXqDVCW97V8qW4ZjDTfp9Rwf9tJYxHxzoV/vsmW6M5zCACAOj9k459nmo3/0nigZr//53NDoxFxT0TcGxH3RcTOiLg/orLvgxHxUOXIWBk7raVxkuTG8U96+ZYSXEM2/nsxn9sazsZ/pZV2i8LoQF7bUcm/lBw7MT93IP+djEdpS1afatPGj6/+/mWrbbXjv2zJ4ijGgnkclwe31B8zO700vfGM6125GLF7sMi1dvybrMwEJBGxKyJ2b7CNE/u/29tq29r5t9GBeabytxFPVc//hViuz7+QtJ+fnNwa83MHJour4ka//HbpzVbtV/Lfv8H8OyA7///Lr/9rzfMfTWrnaxfX38alPz9veU+z0et/KHm7Ui6mgT+aXlo6MxUxlBytBl27/uDqsUW92D/Lf3xfs/zTymtc8ZvYExHZRfxwRDwSEY/msT8WEY9HxL42+f/8yhPvN92Q3uL13wFZ/rPrOv+rhaFoXNO8MHDyp+/rGh1dLeb5X29//g9XSuP5mpt5/buZuDZ2NQMAAMCdJ42I7ZGkEyvlNJ2YqH5efmdEOr+wuPT0sYUPT89WvyMwGqW0eNI1UvM8dCq/ra/WL0ZE9aMFxfZD+XPjrweGK/WJmYX52V4nD31uW4v+n/lroNfRAV3n+1rQv/R/6F/N+v/WHsQBbD7v/9C/mvT/4V7EAWy+Zu//n7Q/5N9uxQJsrob+b9oP+sj67/9/fa8rgQCbrmX/v5v/8g9Q4fk/9KXF4Vj7S/JtC8VP2uDht0shiYiO/sAo3RZ53XqhnDQ9uZFmhdLtEKFCFwq9fV0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADolP8CAAD//3fv18M=") socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0xfe, 0x576, &(0x7f0000001780)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() symlink(&(0x7f0000000180)='./file1\x00', 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_clone3(0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff3, 0x4}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x6, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 20.589449ms ago: executing program 0 (id=3683): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r0, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, 0x0, 0x7}, 0x14, 0x0}}], 0x1, 0x80) 0s ago: executing program 0 (id=3684): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x63953fd0e015314a, 0x8031, 0xffffffffffffffff, 0x2000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x7d9a80, 0x0) socket$igmp6(0xa, 0x3, 0x2) connect$pppl2tp(r3, 0x0, 0x0) r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x404009c) ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0xdf80, &(0x7f0000000080)={0x0, 0x3, 0xd}) r5 = userfaultfd(0x80801) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r6, &(0x7f0000000000)={0xa, 0xb, 0x4, @empty, 0x8}, 0x1c) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) recvmsg(r2, &(0x7f0000000480)={&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/159, 0x9f}], 0x1}, 0x100) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) kernel console output (not intermixed with test programs): F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.862702][ T30] audit: type=1400 audit(1780493919.890:243): avc: denied { unlink } for pid=1164 comm="syz.5.293" name="#5" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 66.256280][ T1196] loop5: detected capacity change from 0 to 128 [ 66.437337][ T1196] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.448001][ T1196] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.518327][ T1205] 9pnet: Insufficient options for proto=fd [ 66.585616][ T30] audit: type=1400 audit(1780493921.630:244): avc: denied { setopt } for pid=1216 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 66.979886][ T30] audit: type=1400 audit(1780493922.030:245): avc: denied { unlink } for pid=1224 comm="syz.2.314" name="#7" dev="tmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.065174][ T1226] loop2: detected capacity change from 0 to 256 [ 67.192163][ T1226] exfat: Deprecated parameter 'utf8' [ 67.269523][ T1226] exfat: Deprecated parameter 'utf8' [ 67.338973][ T1226] exfat: Deprecated parameter 'utf8' [ 67.525453][ T1226] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 67.548233][ T1225] overlayfs: filesystem on './file1' not supported [ 67.937763][ T1245] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.973625][ T1248] 9pnet: Insufficient options for proto=fd [ 68.118783][ T1240] loop2: detected capacity change from 0 to 40427 [ 68.262675][ T30] audit: type=1400 audit(1780493923.310:246): avc: denied { read } for pid=1250 comm="syz.5.322" name="loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 68.556996][ T1258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.322'. [ 68.718504][ T1240] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 68.725138][ T1240] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 68.854814][ T1240] F2FS-fs (loop2): invalid crc value [ 68.861819][ T30] audit: type=1400 audit(1780493923.310:247): avc: denied { open } for pid=1250 comm="syz.5.322" path="/dev/loop-control" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.091297][ T30] audit: type=1400 audit(1780493923.310:248): avc: denied { ioctl } for pid=1250 comm="syz.5.322" path="/dev/loop-control" dev="devtmpfs" ino=115 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.129646][ T1240] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 69.233727][ T1240] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 69.240932][ T1240] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 70.177841][ T1282] 9pnet: Insufficient options for proto=fd [ 70.579196][ T1298] loop5: detected capacity change from 0 to 256 [ 70.617206][ T1298] exfat: Deprecated parameter 'utf8' [ 70.622594][ T1298] exfat: Deprecated parameter 'utf8' [ 70.628316][ T1298] exfat: Deprecated parameter 'utf8' [ 70.664456][ T1305] loop2: detected capacity change from 0 to 128 [ 70.685417][ T1298] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 70.847152][ T30] audit: type=1400 audit(1780493925.850:249): avc: denied { ioctl } for pid=1296 comm="syz.0.339" path="socket:[18959]" dev="sockfs" ino=18959 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.937169][ T1298] overlayfs: filesystem on './file1' not supported [ 70.937395][ T1305] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.954549][ T1305] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.714975][ T1324] 9pnet: Insufficient options for proto=fd [ 73.200936][ T1320] loop5: detected capacity change from 0 to 40427 [ 73.368891][ T1320] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 73.389433][ T1320] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 73.436678][ T1320] F2FS-fs (loop5): invalid crc value [ 73.443935][ T1320] F2FS-fs (loop5): Found nat_bits in checkpoint [ 73.512307][ T1320] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 73.519819][ T1320] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 73.527983][ T1348] overlayfs: failed to clone upperpath [ 75.427506][ T30] audit: type=1400 audit(1780493930.480:250): avc: denied { write } for pid=1372 comm="syz.1.362" name="file2" dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 75.910604][ T30] audit: type=1400 audit(1780493930.670:251): avc: denied { open } for pid=1372 comm="syz.1.362" path="/90/file2" dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.863813][ T1397] 9pnet: p9_fd_create_tcp (1397): problem connecting socket to 127.0.0.1 [ 77.151853][ T1403] overlayfs: failed to clone upperpath [ 77.258582][ T1404] netlink: 192 bytes leftover after parsing attributes in process `syz.4.368'. [ 78.001906][ T1408] 9pnet: Insufficient options for proto=fd [ 79.427849][ T30] audit: type=1400 audit(1780493934.480:252): avc: denied { ioctl } for pid=1431 comm="syz.4.379" path="/91/file2" dev="tmpfs" ino=499 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 79.999431][ T30] audit: type=1400 audit(1780493935.050:253): avc: denied { write } for pid=1441 comm="syz.4.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.389059][ T1457] overlayfs: failed to clone upperpath [ 81.545203][ T1463] loop5: detected capacity change from 0 to 128 [ 81.552427][ T1460] overlayfs: failed to resolve './file1': -2 [ 82.149110][ T1463] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.159787][ T1463] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.623428][ T1510] 9pnet: Insufficient options for proto=fd [ 85.855426][ T1518] 9pnet: Insufficient options for proto=fd [ 85.865492][ T30] audit: type=1400 audit(1780493940.900:254): avc: denied { accept } for pid=1513 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 88.335916][ T1551] 9pnet: Insufficient options for proto=fd [ 88.470448][ T30] audit: type=1400 audit(1780493943.520:255): avc: denied { create } for pid=1567 comm="syz.2.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.817498][ T1550] loop5: detected capacity change from 0 to 131072 [ 89.862227][ T1550] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 89.869067][ T1550] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 89.878111][ T1550] F2FS-fs (loop5): invalid crc value [ 89.903005][ T1550] F2FS-fs (loop5): Found nat_bits in checkpoint [ 89.932287][ T1594] 9pnet: Insufficient options for proto=fd [ 89.969792][ T1550] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 89.976967][ T1550] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 89.994456][ T30] audit: type=1400 audit(1780493945.040:256): avc: denied { setattr } for pid=1548 comm="syz.5.415" name="file1" dev="loop5" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.017617][ T1550] F2FS-fs (loop5): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 92.467599][ T1630] 9pnet: Insufficient options for proto=fd [ 92.603044][ T1634] xt_hashlimit: size too large, truncated to 1048576 [ 92.610412][ T1634] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 93.209070][ T1643] : renamed from bond_slave_0 [ 93.903569][ T1654] overlayfs: failed to clone upperpath [ 94.022411][ T30] audit: type=1400 audit(1780493949.070:257): avc: denied { setopt } for pid=1655 comm="syz.4.451" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.091050][ T1661] overlayfs: failed to resolve './file1': -2 [ 94.797568][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): 30: link becomes ready [ 94.805408][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.815930][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 94.824198][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.845869][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.857706][ T1668] 9pnet: Insufficient options for proto=fd [ 94.864097][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.868798][ T1670] overlayfs: failed to clone upperpath [ 94.882639][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.904179][ T1668] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 94.953647][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.342540][ T1677] loop5: detected capacity change from 0 to 16 [ 95.353221][ T1677] erofs: (device loop5): mounted with root inode @ nid 36. [ 95.475894][ T1684] xt_hashlimit: size too large, truncated to 1048576 [ 95.482943][ T1684] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 95.937727][ T1685] attempt to access beyond end of device [ 95.937727][ T1685] loop5: rw=524288, want=34359738368, limit=16 [ 96.155253][ T49] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -4082 in[4096, 0] out[9000] [ 96.481447][ T1691] overlayfs: failed to clone upperpath [ 96.494599][ T1693] device syz_tun entered promiscuous mode [ 96.508037][ T1695] loop5: detected capacity change from 0 to 256 [ 96.545448][ T1692] device syz_tun left promiscuous mode [ 96.588225][ T1705] 9pnet: Insufficient options for proto=fd [ 96.617017][ T1695] FAT-fs (loop5): Directory bread(block 64) failed [ 96.678939][ T1713] overlayfs: failed to resolve './file1': -2 [ 96.731604][ T1695] FAT-fs (loop5): Directory bread(block 65) failed [ 96.767010][ T1712] overlayfs: failed to clone upperpath [ 96.827830][ T1695] FAT-fs (loop5): Directory bread(block 66) failed [ 96.846199][ T1695] FAT-fs (loop5): Directory bread(block 67) failed [ 96.852856][ T1695] FAT-fs (loop5): Directory bread(block 68) failed [ 96.859529][ T1695] FAT-fs (loop5): Directory bread(block 69) failed [ 96.866207][ T1695] FAT-fs (loop5): Directory bread(block 70) failed [ 96.935888][ T1695] FAT-fs (loop5): Directory bread(block 71) failed [ 96.953555][ T1695] FAT-fs (loop5): Directory bread(block 72) failed [ 96.961249][ T1695] FAT-fs (loop5): Directory bread(block 73) failed [ 97.521127][ T1729] : renamed from bond_slave_0 [ 97.883361][ T1731] xt_hashlimit: size too large, truncated to 1048576 [ 97.890130][ T1731] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 97.939017][ T1739] 9pnet: Insufficient options for proto=fd [ 99.361443][ T1758] overlayfs: failed to clone upperpath [ 99.480400][ T1762] loop5: detected capacity change from 0 to 256 [ 99.533750][ T1762] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 99.596387][ T30] audit: type=1400 audit(1780493954.610:258): avc: denied { read write open } for pid=1744 comm="syz.5.480" path="/34/file0/file1" dev="loop5" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.645240][ T30] audit: type=1400 audit(1780493954.610:259): avc: denied { map } for pid=1744 comm="syz.5.480" path="/34/file0/file1" dev="loop5" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.765713][ T1770] xt_hashlimit: size too large, truncated to 1048576 [ 99.769209][ T1773] 9pnet: Insufficient options for proto=fd [ 99.772754][ T1770] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 100.845532][ T1787] loop5: detected capacity change from 0 to 16 [ 100.873524][ T1787] erofs: (device loop5): mounted with root inode @ nid 36. [ 100.952640][ T1787] attempt to access beyond end of device [ 100.952640][ T1787] loop5: rw=524288, want=32, limit=16 [ 103.340712][ T1824] overlayfs: failed to clone upperpath [ 103.348251][ T1821] xt_hashlimit: size too large, truncated to 1048576 [ 103.354994][ T1821] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 103.401390][ T1805] SELinux: Context system_u:object_r:default_t:s0 is not valid (left unmapped). [ 103.410973][ T30] audit: type=1400 audit(1780493958.460:260): avc: denied { relabelto } for pid=1802 comm="syz.1.504" name="file0" dev="tmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:default_t:s0" [ 103.451677][ T30] audit: type=1400 audit(1780493958.490:261): avc: denied { associate } for pid=1802 comm="syz.1.504" name="file0" dev="tmpfs" ino=658 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:default_t:s0" [ 103.810725][ T1829] overlayfs: failed to resolve './file1': -2 [ 105.363918][ T1863] loop5: detected capacity change from 0 to 512 [ 105.407726][ T1860] xt_hashlimit: size too large, truncated to 1048576 [ 105.414503][ T1860] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 105.459131][ T30] audit: type=1400 audit(1780493960.510:262): avc: denied { connect } for pid=1872 comm="syz.1.527" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.463055][ T1874] 9pnet: Insufficient options for proto=fd [ 105.480612][ T1863] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.524: iget: bad i_size value: 38620345925642 [ 105.498582][ T1863] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.524: couldn't read orphan inode 15 (err -117) [ 105.511258][ T1863] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 105.519818][ T1879] overlayfs: failed to clone upperpath [ 107.470405][ T1885] overlayfs: failed to resolve './file1': -2 [ 108.104052][ T1871] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 108.441805][ T1904] 9pnet: Insufficient options for proto=fd [ 109.274261][ T1918] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.281524][ T1918] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.368681][ T1898] xt_hashlimit: size too large, truncated to 1048576 [ 109.375460][ T1898] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 110.907801][ T1936] 9pnet: Insufficient options for proto=fd [ 111.158464][ T1945] 9pnet: Insufficient options for proto=fd [ 111.365113][ T1962] loop5: detected capacity change from 0 to 512 [ 111.408100][ T1962] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.560: iget: bad i_size value: 38620345925642 [ 111.420956][ T1962] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.560: couldn't read orphan inode 15 (err -117) [ 111.434245][ T1962] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,delalloc,data_err=ignore,journal_ioprio=0x0000000000000002,data_err=ignore,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 112.868673][ T30] audit: type=1400 audit(1780493967.920:263): avc: denied { ioctl } for pid=1968 comm="syz.1.563" path="socket:[21048]" dev="sockfs" ino=21048 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.918524][ T1982] 9pnet: Insufficient options for proto=fd [ 113.855386][ T1966] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 114.181439][ T2018] loop5: detected capacity change from 0 to 512 [ 114.190139][ T30] audit: type=1400 audit(1780493969.240:264): avc: denied { create } for pid=2014 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 114.281154][ T2025] 9pnet: Insufficient options for proto=fd [ 114.317189][ T2018] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 114.419255][ T2018] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 117.011211][ T2018] EXT4-fs (loop5): 1 truncate cleaned up [ 117.099555][ T2018] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsddf,errors=continue,sb=0x000000000000ffff,debug_want_extra_isize=0x0000000000000080,block_validity,noload,,errors=continue. Quota mode: none. [ 117.754295][ T2065] 9pnet: Insufficient options for proto=fd [ 117.995553][ T2076] loop5: detected capacity change from 0 to 256 [ 118.014792][ T2076] exfat: Deprecated parameter 'utf8' [ 118.035892][ T2076] exfat: Deprecated parameter 'utf8' [ 118.041904][ T2076] exfat: Deprecated parameter 'utf8' [ 118.139317][ T2076] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 119.198373][ T2102] loop5: detected capacity change from 0 to 128 [ 119.225302][ T2111] overlayfs: failed to clone upperpath [ 119.294609][ T2102] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.308545][ T2102] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.441964][ T2113] overlayfs: failed to resolve './file1': -2 [ 120.482735][ T30] audit: type=1400 audit(1780493975.530:265): avc: denied { bind } for pid=2118 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 120.626664][ T2130] overlayfs: failed to clone upperpath [ 121.324877][ T2140] overlayfs: failed to resolve './file1': -2 [ 123.404654][ T2160] incfs: Backing dir is not set, filesystem can't be mounted. [ 123.416952][ T2160] incfs: mount failed -2 [ 123.516693][ T30] audit: type=1400 audit(1780493978.570:266): avc: denied { watch } for pid=2173 comm="syz.2.637" path="/114" dev="tmpfs" ino=618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 123.526967][ T2176] overlayfs: failed to clone upperpath [ 124.106385][ T2190] overlayfs: failed to resolve './file1': -2 [ 125.916835][ T2197] 9pnet: Insufficient options for proto=fd [ 126.092075][ T2213] loop5: detected capacity change from 0 to 128 [ 126.203050][ T2213] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 126.213737][ T2213] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 126.678675][ T2232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.656'. [ 126.844044][ T30] audit: type=1400 audit(1780493981.720:267): avc: denied { ioctl } for pid=2229 comm="syz.2.656" path="socket:[21411]" dev="sockfs" ino=21411 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 126.996889][ T2238] 9pnet: Insufficient options for proto=fd [ 127.018301][ T2240] loop5: detected capacity change from 0 to 256 [ 127.038700][ T2240] exfat: Deprecated parameter 'utf8' [ 127.050590][ T2240] exfat: Deprecated parameter 'utf8' [ 127.056105][ T2240] exfat: Deprecated parameter 'utf8' [ 127.124293][ T2240] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 127.682570][ T2255] loop5: detected capacity change from 0 to 256 [ 127.766463][ T2255] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.783914][ T2255] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 127.795015][ T2255] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 127.822748][ T30] audit: type=1400 audit(1780493982.870:268): avc: denied { append } for pid=2253 comm="syz.5.664" path="/58/bus/bus/file1" dev="loop5" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.847308][ T2260] netlink: 192 bytes leftover after parsing attributes in process `syz.2.665'. [ 127.960464][ T2267] xt_TCPMSS: Only works on TCP SYN packets [ 128.493653][ T2282] overlayfs: failed to clone upperpath [ 129.384021][ T2285] overlayfs: failed to resolve './file1': -2 [ 129.461629][ T2292] netlink: 340 bytes leftover after parsing attributes in process `syz.0.677'. [ 129.486224][ T2298] binder: BINDER_SET_CONTEXT_MGR already set [ 129.492335][ T2298] binder: 2297:2298 ioctl 4018620d 200000000040 returned -16 [ 130.533536][ T2329] netlink: 340 bytes leftover after parsing attributes in process `syz.5.692'. [ 130.794889][ T2340] overlayfs: failed to clone upperpath [ 130.969951][ T2348] overlayfs: failed to resolve './file1': -2 [ 133.448496][ T2356] loop5: detected capacity change from 0 to 128 [ 134.252995][ T2379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 134.980836][ T2379] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.988090][ T2379] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.083317][ T2356] EXT4-fs: error -4 creating inode table initialization thread [ 135.091623][ T2356] EXT4-fs (loop5): mount failed [ 135.095487][ T2387] fuse: Bad value for 'fd' [ 135.213734][ T30] audit: type=1400 audit(1780493990.260:269): avc: denied { bind } for pid=2381 comm="syz.2.713" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.903212][ T2401] overlayfs: failed to clone upperpath [ 136.043469][ T2403] netlink: 32 bytes leftover after parsing attributes in process `syz.1.721'. [ 136.062536][ T2403] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 136.139895][ T2413] overlayfs: failed to resolve './file1': -2 [ 136.819066][ T2417] 9pnet: p9_fd_create_unix (2417): problem connecting socket: ./file0: -111 [ 136.854344][ T2417] 9pnet: Insufficient options for proto=fd [ 136.942118][ T30] audit: type=1400 audit(1780493991.990:270): avc: denied { read } for pid=2423 comm="syz.0.727" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.887807][ T2433] loop5: detected capacity change from 0 to 256 [ 137.956926][ T2433] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.976367][ T2433] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 138.007820][ T2433] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 138.092258][ T2433] incfs: ino conflict with backing FS 1 [ 138.156436][ T30] audit: type=1400 audit(1780493993.160:271): avc: denied { remove_name } for pid=926 comm="syz-executor" name=".incomplete" dev="loop5" ino=1048618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.195665][ T926] exFAT-fs (loop5): abnormal access to deleted dentry [ 138.205737][ T2442] overlayfs: failed to clone upperpath [ 138.212701][ T30] audit: type=1400 audit(1780493993.160:272): avc: denied { rmdir } for pid=926 comm="syz-executor" name=".incomplete" dev="loop5" ino=1048618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.239253][ T30] audit: type=1400 audit(1780493993.160:273): avc: denied { unlink } for pid=926 comm="syz-executor" name="file1" dev="loop5" ino=1048619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 138.332766][ T2446] 9pnet: Insufficient options for proto=fd [ 138.356389][ T2449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.738'. [ 138.431042][ T2451] overlayfs: failed to resolve './file1': -2 [ 138.663690][ T2452] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.670944][ T2452] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.678447][ T2452] device bridge_slave_0 entered promiscuous mode [ 138.685570][ T2452] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.692718][ T2452] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.700300][ T2452] device bridge_slave_1 entered promiscuous mode [ 138.751947][ T2452] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.759019][ T2452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.766327][ T2452] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.773351][ T2452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.795073][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.802726][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.810107][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.819073][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.827354][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.834375][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.844791][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.872977][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.880054][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.889186][ T2465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.743'. [ 138.898223][ T2465] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 138.917079][ T362] device bridge_slave_1 left promiscuous mode [ 138.924126][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.932082][ T362] device bridge_slave_0 left promiscuous mode [ 138.938997][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.947414][ T362] device veth1_macvtap left promiscuous mode [ 138.953569][ T362] device veth0_vlan left promiscuous mode [ 139.036718][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.510597][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.528788][ T2452] device veth0_vlan entered promiscuous mode [ 139.552858][ T2452] device veth1_macvtap entered promiscuous mode [ 139.571082][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.580319][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.588620][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.596261][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.604511][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.633551][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.643473][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.653979][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.663412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.682647][ T2483] : renamed from bond_slave_0 [ 139.893499][ T30] audit: type=1400 audit(1780493994.870:274): avc: denied { mounton } for pid=2452 comm="syz-executor" path="/root/syzkaller.gVVLIE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 139.930914][ T2477] xt_hashlimit: size too large, truncated to 1048576 [ 139.938712][ T2477] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 140.945526][ T2503] overlayfs: failed to clone upperpath [ 141.117096][ T2507] overlayfs: failed to resolve './file1': -2 [ 144.438646][ T2562] netlink: 268 bytes leftover after parsing attributes in process `syz.6.776'. [ 144.555963][ T2559] netlink: 192 bytes leftover after parsing attributes in process `syz.0.774'. [ 144.683102][ T2571] overlayfs: failed to clone upperpath [ 144.706175][ T30] audit: type=1400 audit(1780493999.750:275): avc: denied { write } for pid=2572 comm="syz.6.780" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.757377][ T2574] APIC base relocation is unsupported by KVM [ 144.817165][ T2581] loop6: detected capacity change from 0 to 512 [ 144.833334][ T2584] overlayfs: failed to resolve './file1': -2 [ 144.887095][ T2585] 9pnet: Insufficient options for proto=fd [ 145.927115][ T2581] EXT4-fs (loop6): Ignoring removed bh option [ 145.948286][ T2581] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 145.961336][ T2581] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 147.820582][ T2629] overlayfs: failed to clone upperpath [ 147.910175][ T2631] 9pnet: Insufficient options for proto=fd [ 147.936667][ T2632] overlayfs: failed to resolve './file1': -2 [ 148.068840][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 148.124335][ T652] Bluetooth: hci0: sending frame failed (-49) [ 148.698452][ T30] audit: type=1400 audit(1780494003.750:276): avc: denied { unmount } for pid=2649 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 148.737553][ T30] audit: type=1400 audit(1780494003.790:277): avc: denied { name_bind } for pid=2651 comm="syz.1.806" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 148.891179][ T2660] netlink: 192 bytes leftover after parsing attributes in process `syz.1.809'. [ 149.606079][ T2670] 9pnet: Insufficient options for proto=fd [ 149.643577][ T2675] overlayfs: failed to clone upperpath [ 149.818940][ T2675] overlayfs: failed to resolve './file1': -2 [ 150.168393][ T1822] Bluetooth: hci0: command 0x1001 tx timeout [ 150.202218][ T652] Bluetooth: hci0: sending frame failed (-49) [ 150.511127][ T2705] 9pnet: Insufficient options for proto=fd [ 151.582286][ T30] audit: type=1400 audit(1780494006.140:278): avc: denied { execute_no_trans } for pid=2717 comm="syz.1.832" path="/208/file1" dev="tmpfs" ino=1145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.750008][ T2737] 9pnet: Insufficient options for proto=fd [ 151.856721][ T2741] netlink: 192 bytes leftover after parsing attributes in process `syz.0.835'. [ 152.226330][ T1822] Bluetooth: hci0: command 0x1009 tx timeout [ 156.556845][ T2796] overlayfs: failed to clone upperpath [ 157.215674][ T2802] overlayfs: failed to resolve './file1': -2 [ 157.252657][ T2809] netlink: 32 bytes leftover after parsing attributes in process `syz.1.862'. [ 157.430541][ T2815] loop6: detected capacity change from 0 to 256 [ 157.485831][ T2815] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 157.899361][ T2819] xt_TCPMSS: Only works on TCP SYN packets [ 158.238584][ T2826] 9pnet: Insufficient options for proto=fd [ 159.611288][ T2853] netlink: 32 bytes leftover after parsing attributes in process `syz.6.878'. [ 160.206390][ T2861] overlayfs: failed to resolve './file1': -2 [ 160.263995][ T2863] 9pnet: Insufficient options for proto=fd [ 160.503321][ T2881] loop6: detected capacity change from 0 to 256 [ 160.520024][ T2881] FAT-fs (loop6): Directory bread(block 64) failed [ 160.536371][ T2881] FAT-fs (loop6): Directory bread(block 65) failed [ 160.550743][ T2881] FAT-fs (loop6): Directory bread(block 66) failed [ 160.557644][ T2881] FAT-fs (loop6): Directory bread(block 67) failed [ 160.564251][ T2881] FAT-fs (loop6): Directory bread(block 68) failed [ 160.571779][ T2881] FAT-fs (loop6): Directory bread(block 69) failed [ 160.590704][ T2881] FAT-fs (loop6): Directory bread(block 70) failed [ 160.597584][ T2881] FAT-fs (loop6): Directory bread(block 71) failed [ 160.604116][ T2881] FAT-fs (loop6): Directory bread(block 72) failed [ 160.610833][ T2881] FAT-fs (loop6): Directory bread(block 73) failed [ 161.660815][ T2894] 9pnet: Insufficient options for proto=fd [ 161.714566][ T2905] netlink: 32 bytes leftover after parsing attributes in process `syz.0.898'. [ 161.810179][ T2910] overlayfs: failed to clone upperpath [ 162.371234][ T2921] tipc: Failed to remove unknown binding: 66,0,0/0:2843937814/2843937816 [ 162.390489][ T2921] tipc: Failed to remove unknown binding: 66,0,0/0:2843937814/2843937815 [ 162.400282][ T2921] tipc: Failed to remove unknown binding: 66,0,0/0:2843937814/2843937816 [ 162.411039][ T2921] tipc: Failed to remove unknown binding: 66,0,0/0:2843937814/2843937815 [ 162.420359][ T2910] overlayfs: failed to resolve './file1': -2 [ 163.076854][ T2924] loop6: detected capacity change from 0 to 40427 [ 163.161480][ T2924] F2FS-fs (loop6): invalid crc value [ 163.188324][ T2924] F2FS-fs (loop6): Found nat_bits in checkpoint [ 163.911264][ T2947] 9pnet: Insufficient options for proto=fd [ 164.127341][ T2951] overlayfs: failed to clone upperpath [ 164.143777][ T2956] overlayfs: failed to clone upperpath [ 164.146080][ T2924] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 164.226394][ T30] audit: type=1400 audit(1780494019.250:279): avc: denied { ioctl } for pid=2920 comm="syz.6.903" path="/18/file0/file0" dev="loop6" ino=10 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 164.282221][ T2951] overlayfs: failed to resolve './file1': -2 [ 164.322791][ T2452] attempt to access beyond end of device [ 164.322791][ T2452] loop6: rw=2049, want=45104, limit=40427 [ 164.322869][ T2956] overlayfs: failed to resolve './file1': -2 [ 164.441713][ T2972] 9pnet_virtio: no channels available for device ./file0 [ 164.469851][ T30] audit: type=1400 audit(1780494019.520:280): avc: denied { mount } for pid=2978 comm="syz.4.925" name="/" dev="ramfs" ino=23393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 165.469739][ T2987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'. [ 165.478624][ T2987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.927'. [ 165.572251][ T30] audit: type=1400 audit(1780494019.820:281): avc: denied { getopt } for pid=2980 comm="syz.2.927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.632419][ T2993] overlayfs: failed to clone upperpath [ 165.736217][ T2993] overlayfs: failed to resolve './file1': -2 [ 165.801037][ T2990] xt_hashlimit: size too large, truncated to 1048576 [ 165.807778][ T2990] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 165.856931][ T3001] 9pnet: Insufficient options for proto=fd [ 167.693633][ T3031] : renamed from bond_slave_0 [ 168.096292][ C1] hrtimer: interrupt took 24538 ns [ 168.236719][ T3039] 9pnet: Insufficient options for proto=fd [ 168.914294][ T3045] loop6: detected capacity change from 0 to 128 [ 168.956748][ T3045] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.969192][ T3045] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.069867][ T3057] overlayfs: failed to clone upperpath [ 169.175509][ T8] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.902475][ T3074] : renamed from bond_slave_0 [ 169.907983][ T3072] xt_TCPMSS: Only works on TCP SYN packets [ 169.925868][ T3075] overlayfs: failed to resolve './file1': -2 [ 170.116392][ T3077] input: syz1 as /devices/virtual/input/input5 [ 170.131037][ T30] audit: type=1400 audit(1780494025.180:282): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=730 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.190781][ T30] audit: type=1400 audit(1780494025.180:283): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=730 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.257338][ T30] audit: type=1400 audit(1780494025.180:284): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=730 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 170.301021][ T30] audit: type=1400 audit(1780494025.340:285): avc: denied { write } for pid=3092 comm="syz.6.966" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 170.319479][ T3097] capability: warning: `syz.4.967' uses deprecated v2 capabilities in a way that may be insecure [ 170.508614][ T3098] loop6: detected capacity change from 0 to 512 [ 170.781853][ T3107] netlink: 192 bytes leftover after parsing attributes in process `syz.1.970'. [ 171.261860][ T3098] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.274050][ T3098] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.914365][ T3126] loop6: detected capacity change from 0 to 128 [ 171.927117][ T3128] overlayfs: failed to clone upperpath [ 172.157653][ T3126] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.177971][ T3135] overlayfs: failed to resolve './file1': -2 [ 172.198977][ T3126] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.746419][ T30] audit: type=1400 audit(1780494028.760:286): avc: denied { ioctl } for pid=3165 comm="syz.0.988" path="socket:[23933]" dev="sockfs" ino=23933 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.858293][ T3173] overlayfs: failed to clone upperpath [ 173.923191][ T3175] loop6: detected capacity change from 0 to 512 [ 173.947688][ T3175] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 173.968003][ T3175] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,grpjquota=./bus,,errors=continue. Quota mode: writeback. [ 173.982659][ T3175] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.062607][ T3179] overlayfs: failed to resolve './file1': -2 [ 175.499398][ T3195] overlayfs: failed to clone upperpath [ 175.520049][ T3200] loop6: detected capacity change from 0 to 256 [ 175.556217][ T3200] FAT-fs (loop6): Directory bread(block 64) failed [ 175.567039][ T3200] FAT-fs (loop6): Directory bread(block 65) failed [ 175.573782][ T3200] FAT-fs (loop6): Directory bread(block 66) failed [ 175.587315][ T3200] FAT-fs (loop6): Directory bread(block 67) failed [ 175.593975][ T3200] FAT-fs (loop6): Directory bread(block 68) failed [ 175.600929][ T3200] FAT-fs (loop6): Directory bread(block 69) failed [ 175.607572][ T3200] FAT-fs (loop6): Directory bread(block 70) failed [ 175.614132][ T3200] FAT-fs (loop6): Directory bread(block 71) failed [ 175.621085][ T3200] FAT-fs (loop6): Directory bread(block 72) failed [ 175.627793][ T3200] FAT-fs (loop6): Directory bread(block 73) failed [ 175.714137][ T3208] overlayfs: failed to resolve './file1': -2 [ 176.128251][ T3210] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1001'. [ 176.972922][ T3215] overlayfs: failed to clone upperpath [ 177.149318][ T3226] overlayfs: failed to resolve './file1': -2 [ 177.951405][ T3245] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1012'. [ 179.538497][ T3273] overlayfs: failed to clone upperpath [ 179.720258][ T3276] overlayfs: failed to resolve './file1': -2 [ 180.726354][ T3290] xt_TCPMSS: Only works on TCP SYN packets [ 180.740167][ T3290] input: syz1 as /devices/virtual/input/input6 [ 181.197930][ T3294] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1027'. [ 182.340382][ T3314] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1035'. [ 182.481371][ T3321] loop6: detected capacity change from 0 to 256 [ 182.628814][ T3321] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 185.194542][ T3354] loop6: detected capacity change from 0 to 128 [ 185.244442][ T3354] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.255713][ T3354] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.211806][ T3381] overlayfs: failed to clone upperpath [ 186.378392][ T3388] overlayfs: failed to resolve './file1': -2 [ 186.385986][ T3389] 9pnet: Insufficient options for proto=fd [ 186.805337][ T3395] overlayfs: failed to clone upperpath [ 187.336969][ T3406] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1060'. [ 190.225259][ T3455] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.277371][ T3461] netlink: 340 bytes leftover after parsing attributes in process `syz.6.1078'. [ 191.609924][ T3490] loop6: detected capacity change from 0 to 128 [ 191.662930][ T3490] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.689912][ T3490] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.482157][ T30] audit: type=1326 audit(1780494048.530:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1098" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ff46ce59 code=0x7ffc0000 [ 193.507485][ T30] audit: type=1326 audit(1780494048.550:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1098" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ff46ce59 code=0x7ffc0000 [ 193.677096][ T30] audit: type=1326 audit(1780494048.560:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1098" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f47ff46ce59 code=0x7ffc0000 [ 194.427061][ T30] audit: type=1326 audit(1780494048.560:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1098" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ff46ce59 code=0x7ffc0000 [ 194.497800][ T30] audit: type=1326 audit(1780494048.560:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1098" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ff46ce59 code=0x7ffc0000 [ 194.528547][ T30] audit: type=1326 audit(1780494048.560:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1098" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47ff46ce59 code=0x7ffc0000 [ 194.553499][ T30] audit: type=1326 audit(1780494048.560:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1098" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ff46ce59 code=0x7ffc0000 [ 194.582897][ T30] audit: type=1326 audit(1780494048.560:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1098" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ff46ce59 code=0x7ffc0000 [ 194.609687][ T30] audit: type=1326 audit(1780494048.560:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1098" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f47ff46ce59 code=0x7ffc0000 [ 194.635015][ T30] audit: type=1326 audit(1780494048.560:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3523 comm="syz.0.1098" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47ff46ce59 code=0x7ffc0000 [ 194.769311][ T3556] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1103'. [ 194.779410][ T3557] 9pnet: Insufficient options for proto=fd [ 195.220516][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1110'. [ 195.269155][ T3564] 9pnet: Insufficient options for proto=fd [ 195.426132][ T3572] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1113'. [ 196.239159][ T3595] xt_hashlimit: size too large, truncated to 1048576 [ 196.245893][ T3595] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 196.444993][ T3606] mmap: syz.4.1124 (3606) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 196.863838][ T3614] 9pnet: Insufficient options for proto=fd [ 196.889564][ T3616] overlayfs: failed to clone upperpath [ 197.126584][ T3621] overlayfs: failed to resolve './file1': -2 [ 197.471921][ T3630] xt_hashlimit: size too large, truncated to 1048576 [ 197.478841][ T3630] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 198.893003][ T3657] overlayfs: failed to clone upperpath [ 199.476124][ T3671] overlayfs: failed to resolve './file1': -2 [ 199.892069][ T3680] 9pnet: Insufficient options for proto=fd [ 200.742815][ T3693] 9pnet: Insufficient options for proto=fd [ 202.406355][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 202.406372][ T30] audit: type=1400 audit(1780494057.450:329): avc: denied { bind } for pid=3705 comm="syz.0.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.464701][ T30] audit: type=1400 audit(1780494057.450:330): avc: denied { node_bind } for pid=3705 comm="syz.0.1161" saddr=172.20.20.1 src=60964 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 202.492742][ T30] audit: type=1400 audit(1780494057.450:331): avc: denied { name_bind } for pid=3705 comm="syz.0.1161" src=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 202.521194][ T3713] xt_hashlimit: size too large, truncated to 1048576 [ 202.528366][ T3713] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 202.601440][ T3721] 9pnet: Insufficient options for proto=fd [ 203.816486][ T3753] 9pnet: p9_fd_create_tcp (3753): problem connecting socket to 127.0.0.1 [ 203.997689][ T3755] xt_hashlimit: size too large, truncated to 1048576 [ 204.004407][ T3755] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 204.095990][ T3759] 9pnet: Insufficient options for proto=fd [ 204.358261][ T3767] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1183'. [ 204.642369][ T3783] tipc: Failed to remove unknown binding: 66,0,0/0:3422208160/3422208162 [ 204.651013][ T3783] tipc: Failed to remove unknown binding: 66,0,0/0:3422208160/3422208161 [ 204.661170][ T3783] tipc: Failed to remove unknown binding: 66,0,0/0:3422208160/3422208162 [ 204.669666][ T3783] tipc: Failed to remove unknown binding: 66,0,0/0:3422208160/3422208161 [ 204.697232][ T3786] 9pnet: Insufficient options for proto=fd [ 205.638828][ T3800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 205.753334][ T3800] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.760628][ T3800] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.714814][ T30] audit: type=1400 audit(1780494061.760:332): avc: denied { wake_alarm } for pid=3815 comm="syz.6.1200" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 206.734634][ T3818] 9pnet: Insufficient options for proto=fd [ 206.781189][ T30] audit: type=1400 audit(1780494061.790:333): avc: denied { ioctl } for pid=3815 comm="syz.6.1200" path="socket:[25597]" dev="sockfs" ino=25597 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.836313][ T30] audit: type=1400 audit(1780494061.790:334): avc: denied { read } for pid=3815 comm="syz.6.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 206.899030][ T3823] overlayfs: failed to clone upperpath [ 206.990125][ T3825] xt_hashlimit: size too large, truncated to 1048576 [ 207.420566][ T3833] overlayfs: failed to resolve './file1': -2 [ 209.576423][ T3835] mmap: syz.4.1207 (3835): VmData 17715200 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 209.670555][ T3850] 9pnet: Insufficient options for proto=fd [ 210.420512][ T3865] overlayfs: failed to clone upperpath [ 210.442337][ T3859] xt_hashlimit: size too large, truncated to 1048576 [ 210.449095][ T3859] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 210.658181][ T3872] overlayfs: failed to resolve './file1': -2 [ 211.674919][ T3886] overlayfs: failed to clone upperpath [ 211.964429][ T3890] overlayfs: failed to resolve './file1': -2 [ 212.923230][ T3909] overlayfs: failed to clone upperpath [ 212.996339][ T3908] xt_hashlimit: size too large, truncated to 1048576 [ 213.003058][ T3908] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 213.156688][ T3919] overlayfs: failed to resolve './file1': -2 [ 214.237620][ T3930] 9pnet: Insufficient options for proto=fd [ 214.341950][ T3940] overlayfs: failed to clone upperpath [ 215.866703][ T3945] overlayfs: failed to resolve './file1': -2 [ 216.294579][ T3954] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1247'. [ 216.763266][ T3960] syz.0.1248 (3960) used greatest stack depth: 20344 bytes left [ 216.896974][ T3969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 217.177338][ T3976] overlayfs: failed to clone upperpath [ 217.380515][ T3982] overlayfs: failed to resolve './file1': -2 [ 218.293591][ T3991] overlayfs: failed to clone upperpath [ 218.438165][ T4006] overlayfs: failed to clone upperpath [ 220.108849][ T4011] overlayfs: failed to resolve './file1': -2 [ 220.431170][ T4016] 9pnet: Insufficient options for proto=fd [ 220.449392][ T4018] overlayfs: failed to clone upperpath [ 220.467638][ T4020] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4020 comm=syz.1.1270 [ 220.480632][ T4020] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4020 comm=syz.1.1270 [ 220.537208][ T30] audit: type=1400 audit(1780494075.590:335): avc: denied { name_bind } for pid=4023 comm="syz.1.1272" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 220.672263][ T4031] overlayfs: failed to resolve './file1': -2 [ 223.505091][ T4068] overlayfs: failed to clone upperpath [ 223.661538][ T4077] overlayfs: failed to resolve './file1': -2 [ 223.801133][ T4078] futex_wake_op: syz.6.1285 tries to shift op by 144; fix this program [ 223.815703][ T4078] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1285'. [ 223.824718][ T4078] netlink: 'syz.6.1285': attribute type 2 has an invalid length. [ 224.462260][ T4091] tipc: Failed to remove unknown binding: 66,0,0/0:1150852792/1150852793 [ 224.478979][ T4091] tipc: Failed to remove unknown binding: 66,0,0/0:1150852792/1150852793 [ 227.456825][ T4115] overlayfs: failed to clone upperpath [ 227.546330][ T4120] overlayfs: failed to clone upperpath [ 228.031810][ T4121] overlayfs: failed to resolve './file1': -2 [ 228.234056][ T4123] overlayfs: failed to resolve './file1': -2 [ 228.571394][ T4136] overlayfs: failed to clone upperpath [ 232.896693][ T4210] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1334'. [ 232.968278][ T4218] overlayfs: failed to clone upperpath [ 233.367811][ T4224] overlayfs: failed to resolve './file1': -2 [ 235.482895][ T4256] overlayfs: failed to clone upperpath [ 235.703386][ T4260] overlayfs: failed to resolve './file1': -2 [ 236.417556][ T4271] overlayfs: failed to clone upperpath [ 237.610016][ T4276] overlayfs: failed to resolve './file1': -2 [ 238.340484][ T30] audit: type=1400 audit(1780494093.390:336): avc: denied { bind } for pid=4286 comm="syz.2.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 240.421483][ T4325] overlayfs: failed to resolve './file1': -2 [ 240.699953][ T4330] overlayfs: failed to clone upperpath [ 241.364498][ T4335] overlayfs: failed to resolve './file1': -2 [ 244.427023][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 244.589518][ T30] audit: type=1400 audit(1780494099.060:337): avc: denied { setopt } for pid=4344 comm="syz.4.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 244.999460][ T4373] overlayfs: failed to resolve './file1': -2 [ 247.490493][ T30] audit: type=1400 audit(1780494102.100:338): avc: denied { getopt } for pid=4400 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.012241][ T4425] overlayfs: failed to resolve './file1': -2 [ 249.204055][ T4429] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1404'. [ 249.208071][ T4445] fuse: Bad value for 'fd' [ 249.499949][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 250.010367][ T30] audit: type=1400 audit(1780494105.060:339): avc: denied { connect } for pid=4460 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.087510][ T30] audit: type=1400 audit(1780494105.140:340): avc: denied { read } for pid=4460 comm="syz.4.1415" path="socket:[27708]" dev="sockfs" ino=27708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.895070][ T30] audit: type=1400 audit(1780494105.940:341): avc: denied { remount } for pid=4479 comm="syz.4.1421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 251.053701][ T4490] overlayfs: failed to clone upperpath [ 251.501584][ T4496] overlayfs: failed to resolve './file1': -2 [ 253.689337][ T4504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 253.953851][ T4504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1429'. [ 253.990588][ T4508] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1430'. [ 254.010627][ T4508] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.017880][ T4508] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.086297][ T4517] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1433'. [ 254.931430][ T4530] overlayfs: failed to clone upperpath [ 255.061674][ T4528] overlayfs: failed to resolve './file1': -2 [ 256.131894][ T4538] tipc: Started in network mode [ 256.147004][ T4538] tipc: Node identity -, cluster identity 4711 [ 256.186356][ T4542] 9pnet: Insufficient options for proto=fd [ 256.225222][ T30] audit: type=1400 audit(1780494111.270:342): avc: denied { create } for pid=4544 comm="syz.4.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 256.824836][ T30] audit: type=1400 audit(1780494111.850:343): avc: denied { ioctl } for pid=4544 comm="syz.4.1445" path="socket:[27855]" dev="sockfs" ino=27855 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 258.289659][ T4567] overlayfs: failed to clone upperpath [ 258.487421][ T4575] overlayfs: failed to resolve './file1': -2 [ 259.481484][ T4601] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1459'. [ 260.785723][ T4625] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'. [ 262.785108][ T4621] 9pnet: p9_fd_create_tcp (4621): problem connecting socket to 127.0.0.1 [ 262.879761][ T4636] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1008 sclass=netlink_audit_socket pid=4636 comm=syz.0.1470 [ 264.187553][ T4666] overlayfs: failed to clone upperpath [ 264.537243][ T4676] 9pnet: Insufficient options for proto=fd [ 264.548573][ T4678] overlayfs: failed to resolve './file1': -2 [ 264.565366][ T4679] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1483'. [ 264.908533][ T4689] fuse: Unknown parameter 'rootm' [ 265.041661][ T4674] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1485'. [ 265.357632][ T30] audit: type=1400 audit(1780494120.410:344): avc: denied { shutdown } for pid=4696 comm="syz.2.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 265.421614][ T4682] 9pnet: p9_fd_create_tcp (4682): problem connecting socket to 127.0.0.1 [ 266.065625][ T4707] 9pnet: Insufficient options for proto=fd [ 266.448695][ T4716] overlayfs: failed to resolve './file2': -2 [ 266.989572][ T4719] overlayfs: failed to resolve './file1': -2 [ 268.407049][ T4731] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1504'. [ 269.880047][ T4762] fuse: Bad value for 'rootmode' [ 270.940204][ T4783] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1522'. [ 271.008064][ T4781] 9pnet: Insufficient options for proto=fd [ 274.674354][ T4821] netlink: 192 bytes leftover after parsing attributes in process `syz.6.1533'. [ 274.886961][ T4824] 9pnet: Insufficient options for proto=fd [ 276.905250][ T4853] overlayfs: failed to resolve './file1': -2 [ 277.439416][ T4861] device ip6_vti0 entered promiscuous mode [ 277.472023][ T4864] 9pnet: Insufficient options for proto=fd [ 281.245717][ T4904] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=4904 comm=syz.6.1555 [ 284.012116][ T4947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1578'. [ 284.355380][ T4960] fuse: Unknown parameter '00000000000000000003' [ 285.904478][ T4978] overlayfs: failed to resolve './file1': -2 [ 286.744194][ T4991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1592'. [ 286.822719][ T4991] device vti0 entered promiscuous mode [ 287.079480][ T4995] fuse: Unknown parameter '00000000000000000003' [ 287.517856][ T5005] xt_hashlimit: size too large, truncated to 1048576 [ 287.524624][ T5005] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 288.467960][ T5037] xt_hashlimit: size too large, truncated to 1048576 [ 288.474696][ T5037] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 294.677855][ T5162] 9pnet: Insufficient options for proto=fd [ 295.454556][ T30] audit: type=1400 audit(1780494150.500:345): avc: denied { associate } for pid=5183 comm="syz.0.1659" name="cgroup.controllers" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 295.548409][ T5191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1662'. [ 295.621805][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'. [ 296.064288][ T5212] 9pnet: Insufficient options for proto=fd [ 297.511245][ T5227] xt_hashlimit: size too large, truncated to 1048576 [ 297.518484][ T5227] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 298.130416][ T5253] overlayfs: failed to resolve './file1': -2 [ 298.625877][ T30] audit: type=1400 audit(1780494153.670:346): avc: denied { accept } for pid=5258 comm="syz.4.1685" lport=34846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 300.447481][ T5285] overlayfs: failed to resolve './file1': -2 [ 302.251339][ T5302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1700'. [ 304.376584][ T5316] overlayfs: failed to resolve './file1': -2 [ 304.946841][ T5324] overlayfs: failed to resolve './file1': -2 [ 306.548973][ T5361] overlayfs: failed to resolve './file1': -2 [ 309.978866][ T5435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'. [ 310.256926][ T5440] 9pnet_virtio: no channels available for device ./file1 [ 313.284509][ T5507] 9pnet: Insufficient options for proto=fd [ 314.231742][ T5520] 9pnet: p9_fd_create_tcp (5520): problem connecting socket to 127.0.0.1 [ 317.887651][ T5586] xt_hashlimit: size too large, truncated to 1048576 [ 317.894464][ T5586] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 321.218034][ T5664] 9pnet: Insufficient options for proto=fd [ 322.193263][ T5668] xt_hashlimit: size too large, truncated to 1048576 [ 322.200041][ T5668] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 322.331110][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1835'. [ 322.340134][ T5683] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1835'. [ 324.183316][ T30] audit: type=1400 audit(1780494179.230:347): avc: denied { watch watch_reads } for pid=5714 comm="syz.6.1849" path="/203/file1" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.641607][ T5710] xt_hashlimit: size too large, truncated to 1048576 [ 324.648379][ T5710] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 327.337916][ T5778] 9pnet: Insufficient options for proto=fd [ 327.570933][ T5783] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1869'. [ 328.957523][ T5821] 9pnet: Insufficient options for proto=fd [ 332.099540][ T5859] overlayfs: failed to resolve './file1': -2 [ 333.287858][ T5871] 9pnet: Insufficient options for proto=fd [ 339.203923][ T5905] xt_hashlimit: size too large, truncated to 1048576 [ 339.210803][ T5905] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 339.425064][ T5923] overlayfs: failed to resolve './file1': -2 [ 340.370673][ T5936] fuse: Bad value for 'fd' [ 340.847277][ T30] audit: type=1400 audit(1780494195.900:348): avc: denied { bind } for pid=5946 comm="syz.0.1929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 340.944100][ T5956] overlayfs: failed to resolve './file1': -2 [ 340.992276][ T5959] xt_hashlimit: size too large, truncated to 1048576 [ 340.999244][ T5959] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 342.445599][ T5993] overlayfs: failed to resolve './file1': -2 [ 342.573050][ T30] audit: type=1400 audit(1780494197.620:349): avc: denied { ioctl } for pid=6000 comm="syz.4.1950" path="socket:[31331]" dev="sockfs" ino=31331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.898344][ T6025] overlayfs: failed to resolve './file1': -2 [ 344.230927][ T6054] overlayfs: missing 'lowerdir' [ 344.274419][ T6052] xt_hashlimit: size too large, truncated to 1048576 [ 344.281252][ T6052] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 344.419454][ T6059] overlayfs: failed to resolve './file1': -2 [ 344.821313][ T6068] overlayfs: failed to resolve './file1': -2 [ 347.184307][ T6097] xt_hashlimit: size too large, truncated to 1048576 [ 347.191058][ T6097] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 347.257836][ T6104] overlayfs: missing 'lowerdir' [ 347.512829][ T6109] overlayfs: failed to resolve './file1': -2 [ 347.946308][ T6116] overlayfs: failed to resolve './file1': -2 [ 351.403430][ T6141] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 351.425088][ T6141] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 351.620635][ T6146] overlayfs: failed to resolve './file1': -2 [ 352.353057][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2007'. [ 352.362297][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2007'. [ 352.371550][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2007'. [ 353.552868][ T6173] overlayfs: failed to resolve './file1': -2 [ 354.146570][ T6177] 9pnet: Insufficient options for proto=fd [ 354.651093][ T6179] 9pnet: p9_errstr2errno: server reported unknown error  [ 355.752524][ T6206] overlayfs: failed to resolve './file1': -2 [ 355.937894][ T6211] 9pnet: Insufficient options for proto=fd [ 357.536153][ T30] audit: type=1400 audit(1780494212.580:350): avc: denied { write } for pid=6234 comm="syz.2.2033" path="socket:[32126]" dev="sockfs" ino=32126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.581319][ T30] audit: type=1400 audit(1780494212.610:351): avc: denied { accept } for pid=6234 comm="syz.2.2033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.740777][ T6245] 9pnet: Insufficient options for proto=fd [ 358.466017][ T6255] overlayfs: failed to resolve './file1': -2 [ 361.487268][ T6293] 9pnet: Insufficient options for proto=fd [ 361.680877][ T30] audit: type=1400 audit(1780494216.730:352): avc: denied { name_bind } for pid=6295 comm="syz.6.2052" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 361.730703][ T30] audit: type=1400 audit(1780494216.750:353): avc: denied { node_bind } for pid=6295 comm="syz.6.2052" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 361.785969][ T30] audit: type=1400 audit(1780494216.830:354): avc: denied { read } for pid=6301 comm="syz.6.2055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.583237][ T6330] overlayfs: failed to resolve './file1': -2 [ 366.255398][ T6364] overlayfs: failed to resolve './file1': -2 [ 366.533904][ T6371] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2077'. [ 367.332018][ T6377] fuse: Bad value for 'fd' [ 368.421247][ T6409] overlayfs: failed to resolve './file1': -2 [ 368.514620][ T6414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2091'. [ 372.109351][ T30] audit: type=1400 audit(1780494226.040:355): avc: denied { sys_admin } for pid=6446 comm="syz.6.2106" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 372.373762][ T6469] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2113'. [ 373.720182][ T6480] overlayfs: failed to resolve './file1': -2 [ 374.157249][ T6495] fuse: Bad value for 'fd' [ 374.801076][ T6510] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2127'. [ 375.281771][ T6527] overlayfs: failed to resolve './file1': -2 [ 375.827587][ T6491] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2121'. [ 378.673643][ T6562] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2146'. [ 378.916981][ T30] audit: type=1400 audit(1780494240.967:356): avc: denied { read } for pid=6575 comm="syz.0.2151" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=32365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 379.016101][ T6577] overlayfs: failed to resolve './file1': -2 [ 381.860836][ T6617] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2163'. [ 381.870000][ T6617] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2163'. [ 381.879188][ T6617] netlink: 'syz.4.2163': attribute type 6 has an invalid length. [ 381.887193][ T6617] netlink: 'syz.4.2163': attribute type 5 has an invalid length. [ 381.894910][ T6617] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2163'. [ 382.754945][ T6627] overlayfs: failed to resolve './file1': -2 [ 383.399938][ T30] audit: type=1400 audit(1780494245.447:357): avc: denied { setopt } for pid=6638 comm="syz.6.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 383.530127][ T6640] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2170'. [ 391.097341][ T6697] xt_hashlimit: size too large, truncated to 1048576 [ 391.104067][ T6697] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 391.538073][ T30] audit: type=1400 audit(1780494253.587:358): avc: denied { name_bind } for pid=6712 comm="syz.6.2194" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 391.822659][ T6724] overlayfs: failed to resolve './file1': -2 [ 394.697899][ T6764] overlayfs: failed to resolve './file1': -2 [ 399.117141][ T30] audit: type=1400 audit(1780494261.167:359): avc: denied { mounton } for pid=6800 comm="syz.0.2222" path="/449/file0" dev="tmpfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 399.216147][ T6810] xt_hashlimit: size too large, truncated to 1048576 [ 399.222916][ T6810] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 399.543027][ T6811] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2224'. [ 401.799323][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'. [ 403.982660][ T6856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2238'. [ 404.003083][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2238'. [ 405.411861][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2238'. [ 406.863107][ T6875] xt_hashlimit: size too large, truncated to 1048576 [ 406.870291][ T6875] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 406.995046][ T6887] overlayfs: failed to clone upperpath [ 407.071128][ T6887] overlayfs: failed to resolve './file1': -2 [ 409.347727][ T6927] overlayfs: failed to clone upperpath [ 409.441852][ T6927] overlayfs: failed to resolve './file1': -2 [ 409.930828][ T30] audit: type=1400 audit(1780494271.977:360): avc: denied { bind } for pid=6942 comm="syz.1.2269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 411.487431][ T6970] overlayfs: failed to clone upperpath [ 411.557769][ T6970] overlayfs: failed to resolve './file1': -2 [ 418.570033][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 418.576781][ T7091] xt_NFQUEUE: number of queues (10) out of range (got 65542) [ 419.613837][ T7108] xt_TCPMSS: Only works on TCP SYN packets [ 420.778256][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'. [ 421.170290][ T7158] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 422.683661][ T7166] bridge0: port 3(syz_tun) entered blocking state [ 422.699393][ T7166] bridge0: port 3(syz_tun) entered disabled state [ 422.714311][ T7166] device syz_tun entered promiscuous mode [ 423.319339][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2349'. [ 423.709917][ T7189] overlayfs: failed to clone upperpath [ 424.022080][ T7189] overlayfs: failed to resolve './file1': -2 [ 425.198213][ T7223] overlayfs: failed to clone upperpath [ 425.370724][ T7227] overlayfs: failed to resolve './file1': -2 [ 426.187042][ T7237] overlayfs: failed to clone upperpath [ 426.205194][ T7238] bridge0: port 3(syz_tun) entered blocking state [ 426.288797][ T7238] bridge0: port 3(syz_tun) entered disabled state [ 426.364310][ T7237] overlayfs: failed to resolve './file1': -2 [ 426.522425][ T7238] device syz_tun entered promiscuous mode [ 428.574630][ T7267] overlayfs: failed to clone upperpath [ 428.780132][ T7275] overlayfs: failed to resolve './file1': -2 [ 430.770359][ T7296] overlayfs: failed to clone upperpath [ 431.376232][ T7307] overlayfs: failed to clone upperpath [ 431.394760][ T7308] overlayfs: failed to resolve './file1': -2 [ 431.931224][ T7309] overlayfs: failed to resolve './file1': -2 [ 432.790649][ T7328] 9pnet: p9_fd_create_tcp (7328): problem connecting socket to 127.0.0.1 [ 434.145049][ T7354] overlayfs: failed to clone upperpath [ 434.294701][ T7358] overlayfs: failed to resolve './file1': -2 [ 436.661831][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 438.559279][ T7406] overlayfs: failed to clone upperpath [ 438.874263][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2430'. [ 439.575593][ T30] audit: type=1400 audit(2000000016.470:361): avc: denied { map } for pid=7437 comm="syz.4.2434" path="socket:[35042]" dev="sockfs" ino=35042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 440.926640][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2449'. [ 443.245093][ T30] audit: type=1326 audit(2000000020.141:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7522 comm="syz.2.2470" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d2531ee59 code=0x0 [ 443.288066][ T7532] tipc: Enabled bearer , priority 10 [ 444.382483][ T7551] device syz_tun left promiscuous mode [ 444.388153][ T7551] bridge0: port 3(syz_tun) entered disabled state [ 444.395604][ T7551] device bridge_slave_0 left promiscuous mode [ 444.401801][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.412248][ T7551] device bridge_slave_1 left promiscuous mode [ 444.430134][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.443836][ T20] tipc: Node number set to 53346304 [ 444.450185][ T7553] tipc: Enabling of bearer rejected, failed to enable media [ 449.830438][ T7665] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2524'. [ 452.096165][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2536'. [ 452.105563][ T7696] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2536'. [ 453.526323][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2541'. [ 453.535604][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2541'. [ 454.810362][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2550'. [ 457.921077][ T7804] overlayfs: failed to clone upperpath [ 458.197646][ T7805] overlayfs: failed to resolve './file1': -2 [ 460.680347][ T7849] fuse: Bad value for 'fd' [ 460.818995][ T7852] overlayfs: failed to clone upperpath [ 460.939051][ T7853] overlayfs: failed to resolve './file1': -2 [ 460.980756][ T30] audit: type=1400 audit(2000000037.862:363): avc: denied { read } for pid=7854 comm="syz.6.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 462.183505][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2600'. [ 462.619687][ T7901] overlayfs: failed to clone upperpath [ 462.794294][ T7903] overlayfs: failed to resolve './file1': -2 [ 464.102083][ T7916] overlayfs: failed to clone upperpath [ 465.414245][ T7937] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 466.308389][ T7957] overlayfs: failed to clone upperpath [ 466.563605][ T7969] overlayfs: failed to resolve './file1': -2 [ 466.936700][ T7984] 9pnet: p9_fd_create_tcp (7984): problem connecting socket to 127.0.0.1 [ 470.474401][ T8045] overlayfs: missing 'workdir' [ 471.679679][ T8066] bridge0: port 4(vlan2) entered blocking state [ 471.686350][ T8066] bridge0: port 4(vlan2) entered disabled state [ 471.697427][ T8068] overlayfs: failed to clone upperpath [ 471.849185][ T8070] overlayfs: failed to resolve './file1': -2 [ 472.658385][ T8094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2671'. [ 473.913911][ T30] audit: type=1400 audit(2000000050.822:364): avc: denied { bind } for pid=8110 comm="syz.1.2677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 474.228664][ T8126] overlayfs: failed to clone upperpath [ 474.815885][ T8132] overlayfs: failed to resolve './file1': -2 [ 476.274841][ T8133] 9pnet: p9_fd_create_tcp (8133): problem connecting socket to 127.0.0.1 [ 476.284428][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 476.293525][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'. [ 476.350680][ T30] audit: type=1400 audit(2000000053.252:365): avc: denied { search } for pid=8159 comm="syz.0.2694" name="/" dev="configfs" ino=13259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 476.568262][ T8177] overlayfs: failed to clone upperpath [ 477.107108][ T8182] overlayfs: failed to resolve './file1': -2 [ 478.563435][ T8218] overlayfs: failed to clone upperpath [ 479.064958][ T8224] overlayfs: failed to resolve './file1': -2 [ 479.802771][ T8230] device ip6_vti0 left promiscuous mode [ 479.824609][ T8230] bridge0: port 3(syz_tun) entered blocking state [ 479.831069][ T8230] bridge0: port 3(syz_tun) entered forwarding state [ 479.898826][ T8230] device veth0_vlan left promiscuous mode [ 479.905909][ T8230] device veth0_vlan entered promiscuous mode [ 479.918539][ T8230] device veth1_macvtap left promiscuous mode [ 479.926156][ T8230] device veth1_macvtap entered promiscuous mode [ 479.933901][ T8230] device vti0 left promiscuous mode [ 479.939467][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.983327][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.993144][ T8230] syz.0.2710 (8230) used greatest stack depth: 19712 bytes left [ 479.996135][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.036896][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.063221][ T8209] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.070408][ T8209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.090316][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.099120][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.107605][ T8209] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.114750][ T8209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.122303][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.133255][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): 30: link becomes ready [ 482.272617][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.299338][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 482.322692][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.361492][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.371566][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.401939][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.432252][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 482.458052][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.467329][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.483173][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.491514][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.513172][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.533025][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 482.541177][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.563175][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 482.571321][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.593177][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 482.613018][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.627095][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.635075][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.642591][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.650147][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 482.658358][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 482.666649][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.704446][ T760] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 482.924890][ T760] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 485.341311][ T581] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 485.349507][ T581] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 485.359131][ T581] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 485.733918][ T8280] xt_bpf: check failed: parse error [ 487.950482][ T279] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 488.066744][ T8279] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 488.076352][ T8279] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 488.615722][ T8303] syz.6.2739 uses obsolete (PF_INET,SOCK_PACKET) [ 489.514792][ T8317] overlayfs: failed to clone upperpath [ 489.742619][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 489.780233][ T8322] overlayfs: failed to resolve './file1': -2 [ 490.299236][ T8331] tipc: Can't bind to reserved service type 0 [ 491.727543][ T8356] 9pnet: Insufficient options for proto=fd [ 492.036176][ T8366] overlayfs: failed to clone upperpath [ 494.104343][ T30] audit: type=1400 audit(2000000071.013:366): avc: denied { read } for pid=8378 comm="syz.0.2764" path="socket:[36931]" dev="sockfs" ino=36931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 495.122717][ T8401] overlayfs: failed to clone upperpath [ 495.269618][ T8407] 9pnet: Insufficient options for proto=fd [ 495.429540][ T8415] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 496.275034][ T8442] overlayfs: failed to clone upperpath [ 496.280563][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.289477][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.360610][ T8438] netlink: 'syz.4.2784': attribute type 16 has an invalid length. [ 496.368755][ T8438] netlink: 'syz.4.2784': attribute type 17 has an invalid length. [ 496.385045][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.392166][ T8438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.400546][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.407632][ T8438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.470896][ T8448] overlayfs: failed to resolve './file1': -2 [ 496.718690][ T8456] overlayfs: failed to clone upperpath [ 496.724693][ T30] audit: type=1400 audit(2000000073.634:367): avc: denied { remount } for pid=8455 comm="syz.2.2792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 496.727388][ T8456] SELinux: Context system_u:object_r:hald_var_lib_t:s0 is not valid (left unmapped). [ 496.744511][ T30] audit: type=1400 audit(2000000073.634:368): avc: denied { watch_reads } for pid=8455 comm="syz.2.2792" path="/554" dev="tmpfs" ino=2983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 496.777455][ T30] audit: type=1400 audit(2000000073.664:369): avc: denied { relabelto } for pid=8455 comm="syz.2.2792" name="file0" dev="tmpfs" ino=2989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 496.805710][ T30] audit: type=1400 audit(2000000073.664:370): avc: denied { associate } for pid=8455 comm="syz.2.2792" name="file0" dev="tmpfs" ino=2989 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hald_var_lib_t:s0" [ 496.833492][ T30] audit: type=1400 audit(2000000073.664:371): avc: denied { rmdir } for pid=292 comm="syz-executor" name="file0" dev="tmpfs" ino=2989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hald_var_lib_t:s0" [ 496.988298][ T8463] 9pnet: Insufficient options for proto=fd [ 497.264956][ T8469] overlayfs: failed to clone upperpath [ 497.608316][ T8488] overlayfs: failed to clone upperpath [ 497.631310][ T8490] syz.4.2806 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 497.944628][ T8495] overlayfs: failed to resolve './file1': -2 [ 498.277405][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.284844][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.292320][ T8507] device bridge_slave_0 entered promiscuous mode [ 498.299282][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.306378][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.313839][ T8507] device bridge_slave_1 entered promiscuous mode [ 498.354138][ T8507] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.361279][ T8507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.368600][ T8507] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.375646][ T8507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.393831][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.401397][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.409009][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 498.416610][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.426136][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.435125][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.442179][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.476008][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.484675][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.491730][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.503335][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.511465][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.532029][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 498.540820][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 498.549596][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 498.551988][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 498.557732][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 498.568477][ T30] audit: type=1400 audit(2000000075.474:372): avc: denied { mount } for pid=8518 comm="syz.4.2816" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 498.573135][ T8507] device veth0_vlan entered promiscuous mode [ 498.606021][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.616144][ T8507] device veth1_macvtap entered promiscuous mode [ 498.628192][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.643103][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.811958][ T8527] 9pnet: Insufficient options for proto=fd [ 501.743245][ T8542] capability: warning: `syz.6.2821' uses 32-bit capabilities (legacy support in use) [ 501.769832][ T30] audit: type=1400 audit(2000000078.674:373): avc: denied { create } for pid=8531 comm="syz.6.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 502.239550][ T8562] overlayfs: failed to resolve './file1': -2 [ 502.641709][ T8577] 9pnet: Insufficient options for proto=fd [ 502.919601][ T8585] netlink: 'syz.1.2839': attribute type 1 has an invalid length. [ 502.927434][ T8585] netlink: 'syz.1.2839': attribute type 2 has an invalid length. [ 502.935427][ T8585] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2839'. [ 502.945656][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.406148][ T8605] overlayfs: failed to clone upperpath [ 503.618684][ T8619] overlayfs: failed to resolve './file1': -2 [ 504.511637][ T8637] 9pnet: Insufficient options for proto=fd [ 505.514819][ T8664] overlayfs: failed to resolve './file1': -2 [ 506.381782][ T8675] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2873'. [ 506.613543][ T8675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.443168][ T8703] overlayfs: failed to clone upperpath [ 507.627341][ T8706] overlayfs: failed to resolve './file1': -2 [ 508.311049][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2887'. [ 508.320415][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2887'. [ 508.330918][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2887'. [ 510.215974][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2887'. [ 511.810965][ T8772] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 512.515033][ T8794] 9pnet: p9_fd_create_tcp (8794): problem connecting socket to 127.0.0.1 [ 513.252743][ T30] audit: type=1400 audit(2000000090.165:374): avc: denied { read } for pid=8808 comm="syz.1.2919" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 513.320486][ T30] audit: type=1400 audit(2000000090.165:375): avc: denied { open } for pid=8808 comm="syz.1.2919" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 513.421534][ T30] audit: type=1400 audit(2000000090.165:376): avc: denied { ioctl } for pid=8808 comm="syz.1.2919" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 515.610281][ T8868] overlayfs: failed to clone upperpath [ 515.616616][ T30] audit: type=1400 audit(2000000092.525:377): avc: denied { map } for pid=8864 comm="syz.1.2941" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 515.652813][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.660346][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.667970][ T8858] device bridge_slave_0 entered promiscuous mode [ 515.675164][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.682639][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.690213][ T8858] device bridge_slave_1 entered promiscuous mode [ 515.697860][ T10] tipc: Disabling bearer [ 515.756348][ T30] audit: type=1400 audit(2000000092.665:378): avc: denied { write } for pid=8870 comm="syz.1.2943" name="snmp" dev="proc" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 515.821341][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 516.217305][ T10] tipc: Left network mode [ 516.418355][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.425465][ T8858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.432799][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.439837][ T8858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.496876][ T30] audit: type=1400 audit(2000000093.405:379): avc: denied { ioctl } for pid=8881 comm="syz.2.2946" path="socket:[37715]" dev="sockfs" ino=37715 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 516.582823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.593409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.605495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 516.620379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 516.628605][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 516.647601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 516.655845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 516.668789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 516.677923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.690320][ T8858] device veth0_vlan entered promiscuous mode [ 516.698133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 516.706409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.722097][ T8858] device veth1_macvtap entered promiscuous mode [ 516.730247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.738361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.748993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.757821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.766411][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.783889][ T8905] overlayfs: failed to clone upperpath [ 516.790275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.798807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.808484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 516.817114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.110099][ T8913] loop4: detected capacity change from 0 to 128 [ 517.218239][ T8913] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 517.229206][ T8913] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 517.263640][ T30] audit: type=1400 audit(2000000094.165:380): avc: denied { unmount } for pid=8906 comm="syz.4.2934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 517.469718][ T10] device bridge_slave_1 left promiscuous mode [ 517.489930][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.202476][ T10] device bridge_slave_0 left promiscuous mode [ 518.219189][ T30] audit: type=1400 audit(2000000094.985:381): avc: denied { unmount } for pid=8916 comm="syz.6.2956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 518.245383][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.268569][ T10] device veth1_macvtap left promiscuous mode [ 518.276518][ T10] device veth0_vlan left promiscuous mode [ 518.898980][ T8941] xt_hashlimit: size too large, truncated to 1048576 [ 519.743040][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.750180][ T8978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.844059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 519.857052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 519.867098][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 519.875921][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 519.884423][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 519.893406][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 519.902266][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 519.910608][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.317418][ T288] bridge0: port 3(syz_tun) entered disabled state [ 521.334947][ T288] device syz_tun left promiscuous mode [ 521.340455][ T288] bridge0: port 3(syz_tun) entered disabled state [ 521.795017][ T9014] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2995'. [ 522.449119][ T9020] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 522.764651][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.771805][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.779364][ T9015] device bridge_slave_0 entered promiscuous mode [ 522.794141][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.820473][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.841153][ T9015] device bridge_slave_1 entered promiscuous mode [ 522.871207][ T9043] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3005'. [ 522.959888][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.005577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.021155][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.029863][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.039172][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.046254][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.054634][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.154936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.173609][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.180708][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.244261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 523.253341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.273971][ T9055] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 523.279664][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.311052][ T9057] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3009'. [ 523.325668][ T9015] device veth0_vlan entered promiscuous mode [ 523.335599][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.344027][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.352141][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 523.361704][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 523.370136][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 523.378307][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.386513][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.394253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.442107][ T9015] device veth1_macvtap entered promiscuous mode [ 523.450691][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.461795][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.470106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 523.485945][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 524.125851][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.135510][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 524.144629][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 524.161437][ T9072] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3015'. [ 524.731589][ T26] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 524.866832][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.900465][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.907989][ T9090] device bridge_slave_0 entered promiscuous mode [ 524.916930][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.924279][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.932105][ T9090] device bridge_slave_1 entered promiscuous mode [ 525.011477][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.018600][ T9090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.025953][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.033013][ T9090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.057677][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.069113][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.081739][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.095959][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.105876][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.114827][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.121907][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.146545][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.155605][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.162685][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.170177][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.178980][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.206404][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.221325][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.231270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.240877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.249666][ T9090] device veth0_vlan entered promiscuous mode [ 525.280717][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 525.289842][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.305507][ T26] usb 2-1: Product: syz [ 525.309819][ T26] usb 2-1: Manufacturer: syz [ 525.374715][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.414764][ T26] usb 2-1: SerialNumber: syz [ 525.441847][ T9107] tipc: Started in network mode [ 525.446829][ T9107] tipc: Node identity 4, cluster identity 4711 [ 525.453069][ T9107] tipc: Node number set to 4 [ 525.463005][ T9090] device veth1_macvtap entered promiscuous mode [ 525.550268][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.571403][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 525.875465][ T9119] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3028'. [ 525.959142][ T9123] overlayfs: failed to clone upperpath [ 526.711347][ T26] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 526.718008][ T26] cdc_ncm 2-1:1.0: bind() failure [ 527.114350][ T26] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 527.127680][ T9143] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 527.140216][ T26] cdc_ncm 2-1:1.1: bind() failure [ 527.585934][ T26] usb 2-1: USB disconnect, device number 2 [ 527.904937][ T30] audit: type=1400 audit(2000000104.815:382): avc: denied { connect } for pid=9157 comm="syz.2.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 528.135964][ T9171] overlayfs: failed to clone upperpath [ 528.146097][ T30] audit: type=1400 audit(2000000105.055:383): avc: denied { create } for pid=9170 comm="syz.0.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 528.162304][ T9172] tipc: Started in network mode [ 528.172603][ T9172] tipc: Node identity -, cluster identity 4711 [ 528.540069][ T30] audit: type=1400 audit(2000000105.445:384): avc: denied { load_policy } for pid=9181 comm="syz.0.3051" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 528.562020][ T9182] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 528.625260][ T9182] SELinux: failed to load policy [ 528.813739][ T9193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3056'. [ 529.020142][ T9200] overlayfs: failed to clone upperpath [ 529.206065][ T9220] overlayfs: missing 'lowerdir' [ 529.490211][ T1822] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 530.160262][ T1822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.172685][ T1822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.192833][ T1822] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.212484][ T1822] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.221779][ T1822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.231130][ T1822] usb 1-1: config 0 descriptor?? [ 530.770252][ T9250] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 530.941436][ T9254] device ip6gretap1 entered promiscuous mode [ 531.052339][ T1822] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 531.078858][ T1822] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 531.113242][ T9262] 9pnet: p9_fd_create_tcp (9262): problem connecting socket to 127.0.0.1 [ 531.124130][ T9264] overlayfs: failed to clone upperpath [ 531.301671][ T9267] overlayfs: missing 'lowerdir' [ 531.458078][ T8544] usb 1-1: USB disconnect, device number 4 [ 531.903596][ T30] audit: type=1400 audit(2000000108.816:385): avc: denied { write } for pid=9278 comm="syz.1.3086" path="socket:[39902]" dev="sockfs" ino=39902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 538.750277][ T30] audit: type=1400 audit(2000000115.666:386): avc: denied { sys_module } for pid=9349 comm="syz.4.3111" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 538.801983][ T9352] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff0x0000000000000005 [ 538.961207][ T30] audit: type=1400 audit(2000000115.876:387): avc: denied { read write } for pid=9360 comm="syz.1.3115" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 538.986970][ T30] audit: type=1400 audit(2000000115.896:388): avc: denied { open } for pid=9360 comm="syz.1.3115" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 539.006640][ T9365] overlayfs: failed to clone upperpath [ 539.358973][ T9376] overlayfs: missing 'lowerdir' [ 540.182744][ T9401] 9pnet: p9_fd_create_tcp (9401): problem connecting socket to 127.0.0.1 [ 540.952075][ T30] audit: type=1400 audit(2000000117.866:389): avc: denied { read } for pid=9415 comm="syz.6.3136" name="file0" dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 540.990704][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3134'. [ 540.999854][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3134'. [ 541.093443][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3137'. [ 541.104788][ T9431] 9pnet: Insufficient options for proto=fd [ 541.574228][ T9441] overlayfs: failed to clone upperpath [ 542.294356][ T9452] overlayfs: failed to clone upperpath [ 542.855010][ T9453] overlayfs: missing 'workdir' [ 542.903702][ T9448] 9pnet: p9_fd_create_tcp (9448): problem connecting socket to 127.0.0.1 [ 543.519103][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3150'. [ 543.545758][ T9475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3150'. [ 543.805652][ T9479] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 543.848906][ T9487] overlayfs: failed to clone upperpath [ 544.633598][ T9493] overlayfs: failed to clone upperpath [ 544.847014][ T9499] overlayfs: missing 'workdir' [ 545.075640][ T9501] 9pnet: p9_fd_create_tcp (9501): problem connecting socket to 127.0.0.1 [ 545.791513][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3168'. [ 545.801294][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3168'. [ 546.221508][ T9547] overlayfs: missing 'lowerdir' [ 546.840803][ T30] audit: type=1400 audit(2000000123.756:390): avc: denied { read } for pid=9560 comm="syz.0.3184" name="usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 546.865817][ T30] audit: type=1400 audit(2000000123.776:391): avc: denied { open } for pid=9560 comm="syz.0.3184" path="/dev/usbmon0" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 546.953575][ T30] audit: type=1400 audit(2000000123.866:392): avc: denied { ioctl } for pid=9560 comm="syz.0.3184" path="/dev/usbmon0" dev="devtmpfs" ino=155 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 547.599695][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3190'. [ 547.609286][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3190'. [ 547.639382][ T760] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 548.049512][ T760] usb 3-1: config 0 has no interfaces? [ 548.209553][ T760] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.394544][ T760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.447434][ T760] usb 3-1: Product: syz [ 548.469699][ T760] usb 3-1: Manufacturer: syz [ 548.779300][ T760] usb 3-1: SerialNumber: syz [ 548.786978][ T760] usb 3-1: config 0 descriptor?? [ 548.813907][ T30] audit: type=1400 audit(2000000125.727:393): avc: denied { map } for pid=9600 comm="syz.0.3197" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 548.860718][ T9611] netlink: 'syz.4.3199': attribute type 4 has an invalid length. [ 548.870345][ T30] audit: type=1400 audit(2000000125.787:394): avc: denied { call } for pid=9600 comm="syz.0.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 548.870623][ T9602] binder: 9600:9602 unknown command 0 [ 548.894724][ T9602] binder: 9600:9602 ioctl c0306201 200000000480 returned -22 [ 549.053455][ T1822] usb 3-1: USB disconnect, device number 2 [ 549.066273][ T9617] 9pnet: p9_fd_create_tcp (9617): problem connecting socket to 127.0.0.1 [ 549.628563][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'. [ 549.637582][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3203'. [ 549.688028][ T9634] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 549.718557][ T9638] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3212'. [ 549.802112][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'. [ 549.811948][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'. [ 549.834461][ T9657] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 549.911195][ T30] audit: type=1400 audit(2000000126.827:395): avc: denied { getopt } for pid=9666 comm="syz.2.3225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 550.089076][ T1822] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 550.449071][ T1822] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 550.457463][ T1822] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 550.467776][ T1822] usb 1-1: config 220 has no interface number 2 [ 550.474050][ T1822] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 550.487215][ T1822] usb 1-1: config 220 interface 0 has no altsetting 0 [ 550.494004][ T1822] usb 1-1: config 220 interface 76 has no altsetting 0 [ 550.500887][ T1822] usb 1-1: config 220 interface 1 has no altsetting 0 [ 550.679336][ T1822] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 550.739061][ T1822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.739809][ T9678] 9pnet: p9_fd_create_tcp (9678): problem connecting socket to 127.0.0.1 [ 550.748754][ T1822] usb 1-1: Product: syz [ 550.760250][ T1822] usb 1-1: Manufacturer: syz [ 550.764950][ T1822] usb 1-1: SerialNumber: syz [ 550.906421][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'. [ 550.915403][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3232'. [ 551.036775][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3235'. [ 551.079488][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.086746][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.268989][ T8544] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 551.349301][ T1822] uvcvideo 1-1:220.1: Unknown video format 084307ff-0117-0000-0000-000000018000 [ 551.358549][ T1822] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 551.365089][ T1822] usb 1-1: No valid video chain found. [ 551.370767][ T1822] usb 1-1: selecting invalid altsetting 0 [ 551.470677][ T1822] usb 1-1: USB disconnect, device number 5 [ 551.508967][ T8544] usb 3-1: Using ep0 maxpacket: 16 [ 551.639042][ T8544] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 70, changing to 7 [ 551.659191][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 551.809284][ T8544] usb 3-1: New USB device found, idVendor=0582, idProduct=0102, bcdDevice= 0.40 [ 551.818513][ T8544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.826935][ T8544] usb 3-1: Product: syz [ 551.831451][ T8544] usb 3-1: Manufacturer: syz [ 551.836358][ T8544] usb 3-1: SerialNumber: syz [ 552.229026][ T8544] usb 3-1: Can't get UAC3 power state for id 10 [ 552.289000][ T8544] usb 3-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 552.309285][ T8544] usb 3-1: 0:3 : does not exist [ 552.314273][ T8544] usb 3-1: 0:4 : does not exist [ 552.319457][ T8544] usb 3-1: 0:5 : does not exist [ 552.324448][ T8544] usb 3-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 552.332327][ T8544] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 552.341826][ T8544] usb 3-1: USB disconnect, device number 3 [ 552.519833][ T9732] 9pnet: p9_fd_create_tcp (9732): problem connecting socket to 127.0.0.1 [ 553.324040][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'. [ 554.510535][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3268'. [ 554.549861][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.557111][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.725451][ T9791] 9pnet: p9_fd_create_tcp (9791): problem connecting socket to 127.0.0.1 [ 555.434564][ T9827] device bridge_slave_1 left promiscuous mode [ 555.440951][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.449654][ T9827] device bridge_slave_0 left promiscuous mode [ 555.456256][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.622796][ T9830] netlink: 'syz.4.3286': attribute type 4 has an invalid length. [ 555.718731][ T20] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 555.768741][ T1822] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 556.007349][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3289'. [ 556.043602][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.050861][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.204375][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 556.213396][ T9841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 557.666412][ T9849] 9pnet: p9_fd_create_tcp (9849): problem connecting socket to 127.0.0.1 [ 557.698639][ T1822] usb 3-1: Using ep0 maxpacket: 16 [ 557.718707][ T20] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 557.739532][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 557.775027][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 557.823751][ T20] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 557.832990][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.853288][ T20] usb 1-1: config 0 descriptor?? [ 557.868726][ T9826] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 557.878666][ T1822] usb 3-1: unable to get BOS descriptor or descriptor too short [ 558.044184][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3301'. [ 558.053268][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3301'. [ 558.118679][ T1822] usb 3-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 558.134690][ T1822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.143121][ T1822] usb 3-1: Product: syz [ 558.147359][ T1822] usb 3-1: Manufacturer: syz [ 558.152182][ T1822] usb 3-1: SerialNumber: syz [ 558.329533][ T20] dragonrise 0003:0079:0011.0002: unknown main item tag 0x3 [ 558.339999][ T20] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 558.354882][ T20] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 558.370441][ T20] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 558.385349][ T20] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 558.400924][ T20] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 558.415836][ T20] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 558.431403][ T20] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 558.446381][ T20] dragonrise 0003:0079:0011.0002: unknown main item tag 0x0 [ 558.463159][ T20] dragonrise 0003:0079:0011.0002: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0 [ 558.531600][ T20] usb 1-1: USB disconnect, device number 6 [ 558.571069][ T9876] fido_id[9876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 558.626909][ T9878] overlayfs: failed to clone upperpath [ 558.817070][ T9883] overlayfs: missing 'lowerdir' [ 559.171605][ T9884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3304'. [ 559.489935][ T9892] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3308'. [ 559.521108][ T1822] usb 3-1: USB disconnect, device number 4 [ 559.739027][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 559.767166][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 560.058718][ T9920] 9pnet: p9_fd_create_tcp (9920): problem connecting socket to 127.0.0.1 [ 560.385294][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'. [ 560.394912][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3327'. [ 563.995863][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 564.033665][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3355'. [ 566.577764][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3373'. [ 566.697720][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3373'. [ 568.480262][ T30] audit: type=1400 audit(2000000145.398:396): avc: denied { append } for pid=10102 comm="syz.2.3387" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 568.529196][T10115] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3391'. [ 570.786212][T10173] device ip6gretap1 entered promiscuous mode [ 570.800815][ T30] audit: type=1400 audit(2000000147.718:397): avc: denied { create } for pid=10168 comm="syz.1.3412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 570.913934][T10173] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3416'. [ 572.553345][T10214] device gretap1 entered promiscuous mode [ 578.662806][T10361] overlayfs: missing 'lowerdir' [ 579.794375][ T30] audit: type=1326 audit(2000000156.708:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10391 comm="syz.1.3492" exe="/root/ci2-android-5-15/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f50af6e59 code=0x0 [ 581.887327][ T30] audit: type=1400 audit(2000000158.798:399): avc: denied { ioctl } for pid=10444 comm="syz.0.3510" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 583.102034][T10457] netlink: 'syz.0.3513': attribute type 4 has an invalid length. [ 583.119724][T10457] netlink: 'syz.0.3513': attribute type 4 has an invalid length. [ 584.489345][T10488] fuse: Bad value for 'fd' [ 584.903885][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3526'. [ 584.913755][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3526'. [ 586.235030][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3538'. [ 586.245448][T10528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3538'. [ 587.789309][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3549'. [ 587.862732][ T30] audit: type=1400 audit(2000000164.779:400): avc: denied { mount } for pid=10561 comm="syz.0.3550" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 587.890303][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3549'. [ 590.243882][T10593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=286 sclass=netlink_route_socket pid=10593 comm=syz.2.3558 [ 590.257422][T10593] binder: 10585:10593 ioctl 4018620d 0 returned -22 [ 590.397144][T10600] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3562'. [ 590.423053][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3562'. [ 591.151786][T10621] device gretap1 entered promiscuous mode [ 591.808086][T10656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=286 sclass=netlink_route_socket pid=10656 comm=syz.4.3580 [ 594.307577][ T8209] device bridge_slave_1 left promiscuous mode [ 594.314789][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.347050][ T8209] device bridge_slave_0 left promiscuous mode [ 594.353212][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.449051][ T8209] device veth0_vlan left promiscuous mode [ 594.639263][T10701] SELinux: failed to load policy [ 596.023795][ T30] audit: type=1400 audit(2000000172.929:401): avc: denied { accept } for pid=10747 comm="syz.1.3611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 597.513127][T10761] process '/newroot/171/file0' started with executable stack [ 597.824580][T10786] xt_hashlimit: size too large, truncated to 1048576 [ 598.232442][T10791] device vlan2 entered promiscuous mode [ 598.238119][T10791] device syz_tun entered promiscuous mode [ 599.262592][T10820] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 600.604136][T10846] 9pnet: p9_fd_create_tcp (10846): problem connecting socket to 127.0.0.1 [ 601.135019][T10853] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3645'. [ 601.318331][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3647'. [ 601.374670][T10859] device gretap2 entered promiscuous mode [ 602.938309][T10882] netlink: 'syz.6.3652': attribute type 4 has an invalid length. [ 602.985446][ T30] audit: type=1400 audit(2000000179.880:402): avc: denied { mount } for pid=10871 comm="syz.6.3652" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 603.119350][T10886] tipc: Enabling of bearer rejected, failed to enable media [ 603.433282][T10900] overlayfs: failed to clone upperpath [ 605.099599][T10950] xt_hashlimit: size too large, truncated to 1048576 [ 605.195551][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3679'. [ 605.600894][T10960] device gretap1 entered promiscuous mode [ 605.674631][T10964] ================================================================== [ 605.682751][T10964] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 605.691123][T10964] Read of size 8 at addr ffff888128b3a5c0 by task syz.2.3682/10964 [ 605.699109][T10964] [ 605.701518][T10964] CPU: 1 PID: 10964 Comm: syz.2.3682 Not tainted syzkaller #0 [ 605.708971][T10964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.719048][T10964] Call Trace: [ 605.722390][T10964] [ 605.725336][T10964] __dump_stack+0x21/0x30 [ 605.729790][T10964] dump_stack_lvl+0x110/0x170 [ 605.734475][T10964] ? show_regs_print_info+0x20/0x20 [ 605.739691][T10964] ? load_image+0x3e0/0x3e0 [ 605.744210][T10964] print_address_description+0x7f/0x2c0 [ 605.749867][T10964] ? tc_setup_flow_action+0x870/0x3240 [ 605.755335][T10964] kasan_report+0xf1/0x140 [ 605.759823][T10964] ? tc_setup_flow_action+0x870/0x3240 [ 605.765288][T10964] __asan_report_load8_noabort+0x14/0x20 [ 605.770994][T10964] tc_setup_flow_action+0x870/0x3240 [ 605.776294][T10964] mall_replace_hw_filter+0x2cc/0x8b0 [ 605.781753][T10964] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 605.787913][T10964] ? mall_set_parms+0x520/0x520 [ 605.792771][T10964] ? tcf_exts_destroy+0xb0/0xb0 [ 605.797629][T10964] ? pcpu_alloc+0x1170/0x16e0 [ 605.802375][T10964] ? mall_set_parms+0x1e8/0x520 [ 605.807235][T10964] mall_change+0x544/0x760 [ 605.811653][T10964] ? __kasan_check_write+0x14/0x20 [ 605.816772][T10964] ? mall_get+0xa0/0xa0 [ 605.820934][T10964] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 605.826834][T10964] ? mall_get+0xa0/0xa0 [ 605.830992][T10964] tc_new_tfilter+0x142f/0x19b0 [ 605.835856][T10964] ? tcf_gate_entry_destructor+0x20/0x20 [ 605.841554][T10964] ? security_capable+0x87/0xb0 [ 605.846518][T10964] ? ns_capable+0x8c/0xf0 [ 605.850953][T10964] ? netlink_net_capable+0x125/0x160 [ 605.856244][T10964] ? tcf_gate_entry_destructor+0x20/0x20 [ 605.861878][T10964] rtnetlink_rcv_msg+0x871/0xce0 [ 605.866917][T10964] ? rtnetlink_bind+0x80/0x80 [ 605.871608][T10964] ? avc_has_perm_noaudit+0x391/0x490 [ 605.877056][T10964] ? memcpy+0x56/0x70 [ 605.881044][T10964] ? avc_has_perm_noaudit+0x30b/0x490 [ 605.886420][T10964] ? arch_stack_walk+0xee/0x140 [ 605.891369][T10964] ? avc_denied+0x1b0/0x1b0 [ 605.895875][T10964] ? stack_trace_save+0xa6/0xf0 [ 605.900823][T10964] ? avc_has_perm+0x163/0x250 [ 605.905507][T10964] ? avc_has_perm_noaudit+0x490/0x490 [ 605.910879][T10964] ? x64_sys_call+0x4b/0x9a0 [ 605.915513][T10964] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 605.920952][T10964] netlink_rcv_skb+0x1f5/0x440 [ 605.925718][T10964] ? rtnetlink_bind+0x80/0x80 [ 605.930399][T10964] ? netlink_ack+0xb50/0xb50 [ 605.934991][T10964] ? __netlink_lookup+0x387/0x3b0 [ 605.940012][T10964] rtnetlink_rcv+0x1c/0x20 [ 605.944422][T10964] netlink_unicast+0x876/0xa40 [ 605.949193][T10964] netlink_sendmsg+0x879/0xb80 [ 605.953944][T10964] ? netlink_getsockopt+0x530/0x530 [ 605.959138][T10964] ? do_futex+0xde8/0x2800 [ 605.963617][T10964] ? security_socket_sendmsg+0x82/0xa0 [ 605.969064][T10964] ? netlink_getsockopt+0x530/0x530 [ 605.974249][T10964] ____sys_sendmsg+0x5b7/0x8f0 [ 605.979080][T10964] ? __sys_sendmsg_sock+0x40/0x40 [ 605.984090][T10964] ? import_iovec+0x7c/0xb0 [ 605.988606][T10964] ___sys_sendmsg+0x236/0x2e0 [ 605.993268][T10964] ? __sys_sendmsg+0x280/0x280 [ 605.998018][T10964] ? __cond_resched+0xd0/0xd0 [ 606.002758][T10964] ? __fdget+0x1a1/0x230 [ 606.007000][T10964] __x64_sys_sendmsg+0x206/0x2f0 [ 606.011927][T10964] ? ___sys_sendmsg+0x2e0/0x2e0 [ 606.016936][T10964] ? __kasan_check_write+0x14/0x20 [ 606.022036][T10964] ? switch_fpu_return+0x15d/0x2c0 [ 606.027134][T10964] x64_sys_call+0x4b/0x9a0 [ 606.031544][T10964] do_syscall_64+0x4c/0xa0 [ 606.036011][T10964] ? clear_bhb_loop+0x50/0xa0 [ 606.040716][T10964] ? clear_bhb_loop+0x50/0xa0 [ 606.045376][T10964] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 606.051267][T10964] RIP: 0033:0x7fcb8f591e59 [ 606.055722][T10964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.075479][T10964] RSP: 002b:00007fcb8dfaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.084051][T10964] RAX: ffffffffffffffda RBX: 00007fcb8f80b180 RCX: 00007fcb8f591e59 [ 606.092033][T10964] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 606.099998][T10964] RBP: 00007fcb8f627d6f R08: 0000000000000000 R09: 0000000000000000 [ 606.107966][T10964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.115927][T10964] R13: 00007fcb8f80b218 R14: 00007fcb8f80b180 R15: 00007ffe08626e38 [ 606.123892][T10964] [ 606.126906][T10964] [ 606.129219][T10964] Allocated by task 10964: [ 606.133690][T10964] __kasan_kmalloc+0xda/0x110 [ 606.138360][T10964] __kmalloc+0x13d/0x2c0 [ 606.142613][T10964] tcf_idr_create+0x5f/0x790 [ 606.147188][T10964] tcf_idr_create_from_flags+0x61/0x70 [ 606.152634][T10964] tcf_gact_init+0x342/0x570 [ 606.157209][T10964] tcf_action_init_1+0x3ff/0x6b0 [ 606.162132][T10964] tcf_action_init+0x233/0x7a0 [ 606.166965][T10964] tcf_exts_validate+0x24a/0x580 [ 606.171884][T10964] mall_set_parms+0x48/0x520 [ 606.176461][T10964] mall_change+0x478/0x760 [ 606.180863][T10964] tc_new_tfilter+0x142f/0x19b0 [ 606.185706][T10964] rtnetlink_rcv_msg+0x871/0xce0 [ 606.190634][T10964] netlink_rcv_skb+0x1f5/0x440 [ 606.195427][T10964] rtnetlink_rcv+0x1c/0x20 [ 606.199830][T10964] netlink_unicast+0x876/0xa40 [ 606.204580][T10964] netlink_sendmsg+0x879/0xb80 [ 606.209327][T10964] ____sys_sendmsg+0x5b7/0x8f0 [ 606.214077][T10964] ___sys_sendmsg+0x236/0x2e0 [ 606.218737][T10964] __x64_sys_sendmsg+0x206/0x2f0 [ 606.223658][T10964] x64_sys_call+0x4b/0x9a0 [ 606.228059][T10964] do_syscall_64+0x4c/0xa0 [ 606.232458][T10964] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 606.238339][T10964] [ 606.240649][T10964] The buggy address belongs to the object at ffff888128b3a500 [ 606.240649][T10964] which belongs to the cache kmalloc-192 of size 192 [ 606.254860][T10964] The buggy address is located 0 bytes to the right of [ 606.254860][T10964] 192-byte region [ffff888128b3a500, ffff888128b3a5c0) [ 606.268561][T10964] The buggy address belongs to the page: [ 606.274185][T10964] page:ffffea0004a2ce80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128b3a [ 606.284417][T10964] flags: 0x4000000000000200(slab|zone=1) [ 606.290206][T10964] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100042c00 [ 606.298785][T10964] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 606.307365][T10964] page dumped because: kasan: bad access detected [ 606.313757][T10964] page_owner tracks the page as allocated [ 606.319452][T10964] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 10906, ts 604348547899, free_ts 603415194820 [ 606.335676][T10964] post_alloc_hook+0x192/0x1b0 [ 606.340437][T10964] prep_new_page+0x1c/0x110 [ 606.344923][T10964] get_page_from_freelist+0x2d3a/0x2dc0 [ 606.350451][T10964] __alloc_pages+0x1a2/0x460 [ 606.355035][T10964] new_slab+0xa1/0x4d0 [ 606.359105][T10964] ___slab_alloc+0x381/0x810 [ 606.363683][T10964] __slab_alloc+0x49/0x90 [ 606.368003][T10964] kmem_cache_alloc_trace+0x146/0x270 [ 606.373362][T10964] alloc_pipe_info+0xe7/0x4b0 [ 606.378098][T10964] fifo_open+0x11e/0xab0 [ 606.382358][T10964] do_dentry_open+0x834/0x1010 [ 606.387179][T10964] vfs_open+0x73/0x80 [ 606.391153][T10964] path_openat+0x26a6/0x2f20 [ 606.395727][T10964] do_filp_open+0x1e2/0x410 [ 606.400212][T10964] do_sys_openat2+0x15e/0x7f0 [ 606.404893][T10964] __x64_sys_openat2+0x21c/0x290 [ 606.409837][T10964] page last free stack trace: [ 606.414490][T10964] free_unref_page_prepare+0x542/0x550 [ 606.419936][T10964] free_unref_page+0xae/0x540 [ 606.424597][T10964] __free_pages+0x6c/0x100 [ 606.428996][T10964] __vunmap+0x86d/0xa00 [ 606.433144][T10964] vfree+0x8b/0xc0 [ 606.436848][T10964] kcov_mmap+0x8f/0x130 [ 606.441076][T10964] mmap_file+0x60/0xb0 [ 606.445129][T10964] mmap_region+0x1046/0x1710 [ 606.449786][T10964] do_mmap+0x812/0xf10 [ 606.453837][T10964] vm_mmap_pgoff+0x1ec/0x430 [ 606.458407][T10964] ksys_mmap_pgoff+0x161/0x1d0 [ 606.463153][T10964] __x64_sys_mmap+0xfa/0x110 [ 606.467724][T10964] x64_sys_call+0x83/0x9a0 [ 606.472138][T10964] do_syscall_64+0x4c/0xa0 [ 606.476545][T10964] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 606.482431][T10964] [ 606.484742][T10964] Memory state around the buggy address: [ 606.490351][T10964] ffff888128b3a480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 606.498479][T10964] ffff888128b3a500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 606.506520][T10964] >ffff888128b3a580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 606.514560][T10964] ^ [ 606.520698][T10964] ffff888128b3a600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 606.528734][T10964] ffff888128b3a680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 606.536769][T10964] ================================================================== [ 606.544808][T10964] Disabling lock debugging due to kernel taint [ 607.055921][ T30] audit: type=1400 audit(2000000183.940:403): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 607.097795][ T30] audit: type=1400 audit(2000000183.940:404): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.121415][ T30] audit: type=1400 audit(2000000183.940:405): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.143700][ T30] audit: type=1400 audit(2000000183.940:406): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 607.164345][ T30] audit: type=1400 audit(2000000183.940:407): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 607.185127][ T30] audit: type=1400 audit(2000000183.940:408): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 607.208461][ T30] audit: type=1400 audit(2000000183.940:409): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1