last executing test programs: 1m12.251665527s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000008c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000900)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000940)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@local, @random="246fd4839581", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1m12.178276635s ago: executing program 0 (id=9): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x7}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0x100b, 0x3, 0xfffd, 0x6, 0xd, 0x7], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) dup3(r4, r0, 0x0) 1m12.089395694s ago: executing program 0 (id=11): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x0, 0x3c5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2e, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m10.937975202s ago: executing program 0 (id=24): r0 = socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0xe, &(0x7f0000000240)=""/245, &(0x7f0000000040)=0xf5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) mremap(&(0x7f000031d000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00003dc000/0x1000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1m10.1849141s ago: executing program 0 (id=31): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 1m10.118951157s ago: executing program 32 (id=31): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 7.387964224s ago: executing program 5 (id=1022): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1822b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0xc0104d03, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x410c4}, 0x4000020) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 7.305696952s ago: executing program 5 (id=1027): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_clone3(&(0x7f0000000080)={0x104901400, &(0x7f0000000100)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) io_uring_enter(r1, 0x66a8, 0x4000, 0xb, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x0, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pidfd_getfd(r0, r0, 0x0) 6.452696609s ago: executing program 5 (id=1033): socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000980)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2}, &(0x7f0000000a00)=0x20000, &(0x7f0000000a40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000b00)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r3}, &(0x7f0000000b80)=0x2000000, &(0x7f0000000bc0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d40)={r0, &(0x7f0000000d80), 0x0}, 0x20) 6.413903133s ago: executing program 5 (id=1036): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000480), 0xe05, r2}, 0x38) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000009f40)={0x2020}, 0x2020) 6.320301773s ago: executing program 5 (id=1039): r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./bus\x00', 0x22004006, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000740)="$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") madvise(0xffffffffffffffff, 0x2000, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x70, 0x24, 0xe0b, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffe, 0x7, 0x3, 0xffffffff, 0x2}}]}]}}}]}, 0x70}}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4000830, &(0x7f00000002c0)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 5.57357779s ago: executing program 5 (id=1042): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000440)='.\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000000500)="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", 0x2000, &(0x7f0000002500)={&(0x7f00000025c0)={0x50, 0xfffffffffffffffe, 0x4, {0x7, 0x2d, 0x0, 0x10000, 0x40, 0x0, 0x9, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 5.57329159s ago: executing program 33 (id=1042): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000440)='.\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000000500)="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", 0x2000, &(0x7f0000002500)={&(0x7f00000025c0)={0x50, 0xfffffffffffffffe, 0x4, {0x7, 0x2d, 0x0, 0x10000, 0x40, 0x0, 0x9, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 2.683912915s ago: executing program 2 (id=1056): rmdir(0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r0, 0xe29, 0x70bd29, 0x5dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x105fc, &(0x7f0000002140)="$eJzs3E1vG1UXAODr5E3T9i0lQizYdSSElEi1Vacfgl2BVoBEqoiPBStwbMdy648odhJThAisEcv+EVixZ8+fYIdYILFAKiry3JuqSYqSJpETJ88jjc/M9dzjc0eKojNjOQBn1kz215+FcDlcCCFMhhAuhZDvF9KWux3DayGEKyGEiWe2Qhp/OnAuhHAxhHB5mDzmLKS3vn60ufB4sHAxZb16PCsGToI3Qgjtlbi/0Y6x24jxfhqvrDfz2L6xnmJ8o/0gHXdj3Kgv5Rk2KlvnVfJ4vRHP766s9YZxuVWpDmOjuZyPr3TiB/bWG1t58gn3K6v5ca2+tFXuZj7vYTwYpPiw1495ainfl3n60O9vxTheH0zH9aw8yGO100/j3VhfrT4YxvUUe3E4VLutWl7H0gEv8hj4sNlZG2Tr9dVes9vJbpbKb5bKt4rl1W6t3q/fKFbatVs3stlGa3hasV+vtG83ut1Gq16qdttz2WyjWi2Wy9nsnfpSs9LJyuXS9dK14s25tHc1e+/ep1mrls0O4zvNzlq/2eply93VLM6Yy+ZL19+ay14vZx8vLGaLH929u7D4yed3Prv39sIH76aTdpWVzc5fm58vlq8V58tzL7jgf07k+of/okez/h3OH246Z13huAsAGD95/38hjLL//+rnR3/c+a7yq/4fToe/n0QvNGmc+v9masgP3v/X43r0/7uckP53d/8fRtP/xvVPb1v/tydh/fp/xoH+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgzPpt6sf3852ZePz/NP5SGnolHRdCCBMhhCfPMRnObcs5mfJM/cf5Uztq+KUQ8gzDz5hO28UQwu20PX75+bX/70ivBAAAAJxOP21e+SF26/Fl5rgLYpTiTZuJS18cUb5CCGFq5vd9nbe3ieHLq4evKprMbxcNDjb53M6B/AbW+cNXlUs3xb45onR7yC9r/HN/Gs4/EwoxTIymGgAAYJS2dwKeqAMAAJxe3x93ARy9/Ty/y5/Dpu/ip0ec0zGkB4IXth0BAAAAY2h/38MGAAAAxlne/4/z7/8BAAAAe4u//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAv+zcTW7aQBQH8GeDW/qloqrLSr1Kd3CMHqHLLhEH6CU4Ar1CLsAZyC5HiHCExyg4IlIUxkZBv5/kj7HgzzNi82aQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6dFut5/8XP/+dm7Orz5PnbgAAAIBTttV63pxM0/hTe/1Le+lbOy4iooyIU737KN51MkdtTvXM66snNdxENAn7z3jfbh8j4le73X/t+1sAAACA67VZrmapW0+76aULYkhp0qb8/DtTXhER1fQuU1q5333PFNb8vsfxN1NaM4E1yRSWptzGudJeZNQ5TI4ORTqUg5YDAAAMotsJDNuFAAAAMKQ/R+eLC9bBwIo4LGUe1oKbf94/Lgh+6IwAAACAN6i4dAEAAABA75r+3/P/AAAA4Lql5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQp221nm+Wq9m5Obv6FX5M0pvrus5wKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8sD/vKBACYRAGe9d3JnP/w0qDxoYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzrykQAgEQRTMGf876fsfVhJ05QmECGh4VFENAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EW/++X/xNQ4k8ydNpaOR5K1q8bWVWPvQePowXh9DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf79vMaRxUHAPzN7s42qUjXKIF6sWKhothk6y8ELz0IwYPgSTwu6aasblXaHGzJwVw8CP4HXvTaixAQpB78C3rwZI/1UkH2UMGDJ+XNj3baDXVq7Oxu/Hzgzftm8nbm+yYQ8p33AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMzI5G06UcTseenncKs79fHtnM/Y37uujW4Orx2OLcdJs2gunE5/R6qyzAAAA4LBrl/V9COFmurcR+1Yvq/+Tx4rzsebfeTyPy3r+/rq/7MvaP7ZrP3zz7p0b9fL7pCGE73rj4XpzU5xrJ2uOO1ZjTPYuIX9D085+bK23d5+cpNlTT768fv2tbhYeOVjGAMB/4XTZF8FW8ln299HWaDzszzIxABZX55+/XQ6J9f9SLB57TSQGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFuT3fBiGSchhKc7d+Poxu2dzf36W4Orx8t27P2nPq9eM14iDSFsjcbDpQbnMs9O1hx36fKVDwfj8fDiQwXP/KtPCRYkaB/g42mYl1kIDhQ84l9QAAAcKmnRYl1/M93biOeSlRD++vre+v9UJQ416/8fR9dOVe9Vrf/7jc1wvj2o/l+uxGvbFz5Zu3T5ykujC4Pzw/PDj870X+m/vv7Gq/3X1uLzXM+PDWQMAADAIuoWLenerf9bK9Pr/0crcahZ///063u/Ve/VVv9Pefj1/0ecEAAAwP/YEyf++D3Z53zS7YZPB9vbF/v58c7XZ/LjDFJ9sOXpU0eKVl3/b6/MIDcAAACgcZPd5J71/3OVONRc///+hT+/ql6zXbyC2BqNh6c3Px6fa246c2t6/b+377gm/p24gekCAAAwI8tFq67/p9n+/9az5ZhWCOH55/K4U+wXqFP/v9n54mz1XtX9/y83O82501rNn0ed/f/Z2NUQOqsNJAYAAMChtFS0WP//ku5tfPDt0Xe69v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3+zPvW3CQBjH4deXRInbZIT0Fh8z0FAhWAGQkCx5BgZgIRoqWotFYAWQ4FzTGYrnaf6/4op7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7V2fvviIiCJSlynSdPt3/oyIr0i7tp1837PYX07NzyMXh+Ms52/M/8uIKKPo4xwAgN5V3eZYb+rVIO8w7yjvOG9VNvXylZ8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBWAAAA///KU19N") renameat2(0xffffffffffffff9c, &(0x7f0000012740)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000012780)='./file0\x00', 0x2) renameat2(0xffffffffffffff9c, &(0x7f00000127c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000012800)='./file0\x00', 0x2) syz_mount_image$vfat(&(0x7f0000001e80), &(0x7f0000001ec0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x3, 0x0, &(0x7f0000001f40)) openat(0xffffffffffffff9c, &(0x7f0000000940)='./file0/file1\x00', 0x880cc2, 0x20) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000980)='ext2\x00', &(0x7f00000009c0)='./bus\x00', 0x841e, &(0x7f0000000a00)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrjquota}, {@usrquota}, {@bsdgroups}, {@orlov}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0x1, 0x443, &(0x7f0000000a80)="$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") 2.286004866s ago: executing program 3 (id=1059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000001800), &(0x7f0000001840)=0x4) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x5, 0x4, 0x408, 0x110, 0x0, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@CLASSIFY={0x0, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfcd7) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000000)={0xb6, 0x0, 0x3ff}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/wakeup_count', 0xea241, 0x0) write$cgroup_int(r4, &(0x7f0000000180), 0x12) sendmmsg$inet6(r4, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000980)={0xa, 0xc3da, 0x80000001, @empty, 0x6}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000009c0)="35a874af54979edd6afb798e0339a144092f82363f48d4b9524ceef0c2f1c5664a9ada6231edbe50d2cddf92759cc96bf4464e67beec", 0x36}, {&(0x7f0000000a00)="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", 0xfc}], 0x2, &(0x7f0000001880)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts={{0x30, 0x29, 0x37, {0x6, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x4}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2b, 0x2, '\x00', [@enc_lim, @ra, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}}}], 0x78}}, {{&(0x7f0000000cc0)={0xa, 0x4e23, 0xffffffff, @local}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000d00)="6f455b623874192eb4287adb4c73aeaa6b165eafaa80604ae28b8d51c5a4ba72a232c26e1f96de26d5f792d04268a5a2c1f89039293a0f92c9ee0deeb1a5d56f464eab42bee956", 0x47}, {&(0x7f0000000d80)="556849359d225213e80547a524e5aa6c92115abd030e88c47b547c781c7751e00d4b723317f52089d69b5ce1d6e903e086bedc999fc5121aba605255921148f6c02eedbf31aca3e117074f6db77747ae4e2de84db3f4b7ba50bea66c3232739c0354b7b1d7557449191fad12ca53e6b0b1630e5c2747f31b12a13f5c8e6efefdd3069364fde575255cd5ef68c3505385d37c8bb203cd7d56f0c47acdd72fd1a61e7e376434a8dc5c724cafba3030a864297e846cf6579c3e1005ead2f57014d8a46f9ce3d8ebb7c0eec606d90435a0cd148be953ad40d480329d07de0af14becf1865e8dc935e4f4398dcf3579d01201af29b5ae", 0xf4}, {&(0x7f0000000e80)="807eaa982b30bb645206bcb344cfa504f8ccb23ecf332948ff8f3f95607949f58eb79959dafb89a3cd869173d694fef04a67add93333a35d13831af749d9963d37f006bbc9f102d339099d2363d8484b50d9cd03bd2694e7cef5e31827ce43880ce86a67818bf74e194ab2f70d4c0399376d2675e1e289aec5c753c58fa72af667314ba20077", 0x86}, {&(0x7f0000000f40)="13bc0099ccfdf824eb32f408d0cbdce0fba3764e4277b3e29a675b79f121cdb38e8ebae39f5229f5adf538c0078f3634b57c956b483321f68f80afda7be8320ce747fe37deda78c0c70a6dfe44b66e08008f23372acf0c6a4d487e14228c557c8e579e41c4b49a42430a8c9b66b605fd4605b3011594ef819c49c9115098460cc69737bddd438c424a086b122951968f417dd6418b3eea605b052657fee852c3dbdcb3430be460533e", 0xa9}], 0x4, &(0x7f0000001040)=[@rthdr={{0x58, 0x29, 0x39, {0x73, 0x8, 0x2, 0x7, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}]}}}], 0x58}}, {{0x0, 0x0, 0x0}}], 0x4, 0x800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0x1}) 1.937071172s ago: executing program 1 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1.936579452s ago: executing program 3 (id=1061): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.935836962s ago: executing program 2 (id=1062): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x2, 0x8000) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) time(&(0x7f0000000500)) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, "006074333200009bb3c2ce0000000000000000011800f5ff0100fffffffdff00"}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x4a, &(0x7f00000005c0), 0x4) 1.687053257s ago: executing program 6 (id=1052): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000000000000a004e220000000cff01000000000000000000000000000100020000000000000000000000000000000000000000000000000000000000000000000000000000000096cb00000000"], 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='tracefs\x00', &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/trace\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r2, &(0x7f00000003c0), 0x1000) 1.577451039s ago: executing program 1 (id=1063): r0 = socket(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x51, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000300)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.577115729s ago: executing program 2 (id=1064): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.576591989s ago: executing program 3 (id=1065): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./file1\x00', 0x1010801, &(0x7f0000000140)=ANY=[], 0x1, 0x216, &(0x7f00000001c0)="$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") sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x800) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x6, 0x7fffffffeff3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.576387689s ago: executing program 4 (id=1007): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x2, 0x2, 0xffffffff00000001, 0x8000000001, r2}) 1.438562483s ago: executing program 6 (id=1052): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000000000000a004e220000000cff01000000000000000000000000000100020000000000000000000000000000000000000000000000000000000000000000000000000000000096cb00000000"], 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='tracefs\x00', &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/trace\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r2, &(0x7f00000003c0), 0x1000) 1.328891814s ago: executing program 1 (id=1066): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x2000000, &(0x7f0000000300)=ANY=[], 0x1, 0x20f, &(0x7f0000000340)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x2000, 0x28) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x20000850}, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0xffffffff}], 0x1, 0x1, 0x0) sync() sync() 1.328451344s ago: executing program 2 (id=1067): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@bsdgroups}, {@block_validity}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x580, &(0x7f0000000400)="$eJzs3V9rFFcbAPBnNon/39cIIm0vSsCLWqwbk7RqaUF7WVqp0N7bJRmDZONKdiMmFdSLCqU3RQqlVCj9AL33UvoB2k8htIIUCe1Fb1JmM6trks0mcXXX7u8Hk5wzM7tnnj1zzpyzs8sG0LdGsj+FiFcj4pskYn/TtsHIN46s7Lf06NpktiSxvPzpn0kk+brG/kn+f2+eeSUifvky4mhhbbnVhcWZUrmczuX50drs5dHqwuKxi7Ol6XQ6vTQ+MXHqnYnxd0+e6Fisb577+/tP7n146uvDS9/9/ODA7STOxL58W3Mcz+BGc2YkRvLXZCjOrNpxrAOF9ZKk2wfAtgzk7Xwosj5gfwzkrR7477seEctAn0q0f+hTjXFAY27foXnwS+PhBysToLXxD668NxK76nOjPUvJUzOjbL473IHyszLu/nHndrZEm/chrnegPICGGzcj4vjg4Nr+L8n7v+07Xn/zeGOry+i36w90071s/PPWeuOfwuPxT6wz/tm7Ttvdjvbtv/CgA8W0lI3/3l93/Pu46xoeyHP/q4/5hpILF8vp8Yj4f0QciaGdWX6j+zmnlu4vt9rWPP7Llqz8xlgwP44HgzuffsxUqVZ6lpibPbwZ8Vp2HViJPYk1/f+u+lh3df1nr8e5LPHrV23LOJTeeb3VtvbxN+v8CHj5p4g31q3/J3e0ktb3J9+7e/LEaP18GG2cFWv9devQb63K31r8nZfV/56N4x9Omu/XVrdexo+7/klbbdvu+b8j+aye3pGvu1qq1ebGInYkH69dP/7ksY18Y/8s/iOHN+7/1jv/d0fE55uM/9bBWy137YX6n9pS/W89cf+jL35oVf7m6v/teupIvmYz/d9mD/BZXjsAAAAAAADoNYWI2BdJofg4XSgUiyuf7zgYewrlSrV29EJl/tJU1L8rOxxDhcad7v1Nn4cYyz8P28iPr8pPRMSBiPh2YHc9X5yslKe6HTwAAAAAAAAAAAAAAAAAAAD0iL0tvv+f+X2g20cHPHd+8hv6V9v234lfegJ6kus/9C/tH/qX9g/9S/uH/vV0+9/ZteMAXjzXf+hf2j/0L+0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAOurc2bPZsrz06Npklp+6sjA/U7lybCqtzhRn5yeLk5W5y8XpSmW6nBYnK7Ptnq9cqVweG4/5q6O1tFobrS4snp+tzF+qnb84W5pOz6dDLyQqAAAAAAAAAAAAAAAAAAAAeLlUFxZnSuVyOifRMnE6euIwtp1I2tXy6fxk2NIzR54Y7H6AEs8h0eWOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa/BsAAP//ydI0yw==") r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x60000726) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) socket(0x1d, 0x3, 0x1) truncate(0x0, 0x3000000) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000b40)={0x5, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @empty}}}, 0x108) sendfile(r1, r1, 0x0, 0xe3aa6ea) creat(0x0, 0x0) 1.328029994s ago: executing program 3 (id=1068): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26}, 0x28) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000001440)={0x0, 0x0}) write(r0, &(0x7f0000001480)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000600)=[{&(0x7f0000000640)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) 1.327901964s ago: executing program 4 (id=1007): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x2, 0x2, 0xffffffff00000001, 0x8000000001, r2}) 1.013654976s ago: executing program 6 (id=1052): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000000000000a004e220000000cff01000000000000000000000000000100020000000000000000000000000000000000000000000000000000000000000000000000000000000096cb00000000"], 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='tracefs\x00', &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/trace\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r2, &(0x7f00000003c0), 0x1000) 881.98431ms ago: executing program 2 (id=1069): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000380)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa0000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007"], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 881.21633ms ago: executing program 3 (id=1070): r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./bus\x00', 0x22004006, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000740)="$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") madvise(0xffffffffffffffff, 0x2000, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x70, 0x24, 0xe0b, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffffffe, 0x7, 0x3, 0xffffffff, 0x2}}]}]}}}]}, 0x70}}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4000830, &(0x7f00000002c0)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 880.34156ms ago: executing program 4 (id=1007): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x2, 0x2, 0xffffffff00000001, 0x8000000001, r2}) 731.234665ms ago: executing program 1 (id=1071): setns(0xc9, 0x0) socket$inet(0x2, 0x1, 0x0) socket(0x11, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x64800) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffff"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x2, 0x6, @remote}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000100)={'syzkaller0\x00'}) 730.683495ms ago: executing program 6 (id=1052): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000000000000a004e220000000cff01000000000000000000000000000100020000000000000000000000000000000000000000000000000000000000000000000000000000000096cb00000000"], 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='tracefs\x00', &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/trace\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r2, &(0x7f00000003c0), 0x1000) 504.259549ms ago: executing program 2 (id=1072): write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000006c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000700)=0x2, 0x4) connect$inet(r0, &(0x7f0000000740)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000780)=0xfdb, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000900)="ab", 0xfffffffffffffdd8, 0x4008825, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4) tkill(0x0, 0xa) 503.512449ms ago: executing program 4 (id=1007): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x2, 0x2, 0xffffffff00000001, 0x8000000001, r2}) 382.263081ms ago: executing program 6 (id=1052): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000000000000a004e220000000cff01000000000000000000000000000100020000000000000000000000000000000000000000000000000000000000000000000000000000000096cb00000000"], 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='tracefs\x00', &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/trace\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r2, &(0x7f00000003c0), 0x1000) 263.688593ms ago: executing program 1 (id=1073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f0000000f40)=[@rdmsr={0x66, 0x18, {0x4000009c}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 263.471203ms ago: executing program 4 (id=1007): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x2, 0x2, 0xffffffff00000001, 0x8000000001, r2}) 125.690227ms ago: executing program 3 (id=1074): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x9, 0x9, 0x0, 0xffffffffffffffff, 0x1}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a6970000500010007000000050005000a0000000900020073797a3000000000050004000000000014000780080008400000005e050014"], 0x58}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003002e6f00000000000000000000000000002000000010270000050000001000000010000000e80397a98ae17dcf0ea4"], 0x10c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x6}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000) 122.712507ms ago: executing program 6 (id=1052): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000000000000a004e220000000cff01000000000000000000000000000100020000000000000000000000000000000000000000000000000000000000000000000000000000000096cb00000000"], 0x90) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='tracefs\x00', &(0x7f0000000280)='./trace\x00', &(0x7f00000002c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./trace/trace\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read(r2, &(0x7f00000003c0), 0x1000) 528.98µs ago: executing program 1 (id=1075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f00)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x19}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000000dc0), 0x318, 0xfc0, 0x0) 0s ago: executing program 4 (id=1007): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpgid(r1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x2, 0x2, 0xffffffff00000001, 0x8000000001, r2}) kernel console output (not intermixed with test programs): _t" [ 23.071549][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.094037][ T28] audit: type=1400 audit(1793763671.701:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.127572][ T28] audit: type=1400 audit(1793763671.701:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.873358][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.880478][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.888097][ T286] device bridge_slave_0 entered promiscuous mode [ 23.896307][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.903418][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.910980][ T286] device bridge_slave_1 entered promiscuous mode [ 24.040629][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.047785][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.055177][ T287] device bridge_slave_0 entered promiscuous mode [ 24.062275][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.069383][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.077030][ T287] device bridge_slave_1 entered promiscuous mode [ 24.093491][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.100574][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.107915][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.114960][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.179697][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.186862][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.194332][ T289] device bridge_slave_0 entered promiscuous mode [ 24.201597][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.208693][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.216163][ T289] device bridge_slave_1 entered promiscuous mode [ 24.229456][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.236682][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.244161][ T288] device bridge_slave_0 entered promiscuous mode [ 24.252628][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.259741][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.267395][ T288] device bridge_slave_1 entered promiscuous mode [ 24.280553][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.287674][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.295200][ T290] device bridge_slave_0 entered promiscuous mode [ 24.305926][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.313160][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.320710][ T290] device bridge_slave_1 entered promiscuous mode [ 24.469824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.478334][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.487352][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.494820][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.522344][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.530580][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.537656][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.580731][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.599572][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.632146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.649954][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.658277][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.665334][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.673176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.689538][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.697915][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.704969][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.736668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.744750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.753680][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.762361][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.770688][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.777740][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.785712][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.794003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.802300][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.809379][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.816889][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.825076][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.832147][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.839615][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.847872][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.854902][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.862476][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.870438][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.886347][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.895012][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.903411][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.911950][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.919567][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.927859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.940891][ T286] device veth0_vlan entered promiscuous mode [ 24.954613][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.963376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.971707][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.978786][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.986389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.994526][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.002648][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.010997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.019365][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.026395][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.033839][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.042251][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.050816][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.059051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.067153][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.075201][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.083308][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.091099][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.098703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.106128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.113783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.126866][ T290] device veth0_vlan entered promiscuous mode [ 25.144048][ T286] device veth1_macvtap entered promiscuous mode [ 25.150985][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.159268][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.168330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.176395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.184853][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.193109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.201279][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.209347][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.217612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.225751][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.234152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.256066][ T290] device veth1_macvtap entered promiscuous mode [ 25.264255][ T288] device veth0_vlan entered promiscuous mode [ 25.270795][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.279497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.288423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.296330][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.304733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.313094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.321572][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.329441][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.337124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.354199][ T289] device veth0_vlan entered promiscuous mode [ 25.366865][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.375272][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.384066][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.392561][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.401062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.409362][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.417677][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.425520][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.433833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.441473][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.454723][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.463300][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.474536][ T289] device veth1_macvtap entered promiscuous mode [ 25.488846][ T288] device veth1_macvtap entered promiscuous mode [ 25.498902][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.507282][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.515440][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.523445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.531951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.540598][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.549507][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.558028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.566275][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.575074][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.583117][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.591335][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.598841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.609961][ T287] device veth0_vlan entered promiscuous mode [ 25.628947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.637403][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.645879][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.654711][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 25.655802][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.670507][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.679019][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.687626][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.695814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.709375][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.729645][ T287] device veth1_macvtap entered promiscuous mode [ 25.754152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.766237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.799009][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.808620][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.841913][ T321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.895081][ T331] loop1: detected capacity change from 0 to 2048 [ 25.959250][ T332] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 26.056034][ T341] loop0: detected capacity change from 0 to 512 [ 26.072587][ T341] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.099787][ T341] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 26.152974][ T341] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 26.169047][ T353] binder: 351:353 ioctl c0306201 2000000003c0 returned -14 [ 26.199577][ T341] EXT4-fs (loop0): 1 truncate cleaned up [ 26.231912][ T341] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 26.440933][ T377] loop4: detected capacity change from 0 to 512 [ 26.696536][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.877662][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.897810][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 26.923225][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.963246][ T24] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=30.00 [ 26.990013][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.014747][ T24] usb 4-1: Product: syz [ 27.024506][ T24] usb 4-1: Manufacturer: syz [ 27.035975][ T24] usb 4-1: SerialNumber: syz [ 27.184506][ T287] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.235682][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.248064][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 27.283918][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 27.295938][ T377] syz.4.23 (377) used greatest stack depth: 22056 bytes left [ 27.296821][ T24] r8152-cfgselector 4-1: bad CDC descriptors [ 27.330703][ T24] r8152-cfgselector 4-1: Unknown version 0x0000 [ 27.340351][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.355352][ T24] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 27.362894][ T287] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.404449][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.411881][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 27.432160][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.447597][ T287] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.474450][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.481356][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 27.501793][ T386] loop1: detected capacity change from 0 to 16 [ 27.508755][ T386] ======================================================= [ 27.508755][ T386] WARNING: The mand mount option has been deprecated and [ 27.508755][ T386] and is ignored by this kernel. Remove the mand [ 27.508755][ T386] option from the mount to silence this warning. [ 27.508755][ T386] ======================================================= [ 27.545588][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.552475][ T287] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.574385][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.581226][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 27.601824][ T386] erofs: (device loop1): mounted with root inode @ nid 36. [ 27.614200][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.621371][ T287] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /2/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 27.643525][ T287] EXT4-fs (loop0): Remounting filesystem read-only [ 27.650387][ T287] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 27.671657][ T28] kauditd_printk_skb: 395 callbacks suppressed [ 27.671686][ T28] audit: type=1400 audit(1793763676.301:469): avc: denied { unlink } for pid=385 comm="syz.1.27" name="#1" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.818153][ T28] audit: type=1400 audit(1793763676.451:470): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.863566][ T393] loop3: detected capacity change from 0 to 256 [ 27.921959][ T393] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.946608][ T393] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 27.967625][ T393] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf3b6ecda, utbl_chksum : 0xe619d30d) [ 28.095373][ T28] audit: type=1400 audit(1793763676.721:471): avc: denied { ioctl } for pid=398 comm="syz.2.34" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16064 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.198096][ T28] audit: type=1400 audit(1793763676.831:472): avc: denied { create } for pid=398 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.337309][ T318] device bridge_slave_1 left promiscuous mode [ 28.345739][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.368460][ T318] device bridge_slave_0 left promiscuous mode [ 28.382375][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.398514][ T318] device veth1_macvtap left promiscuous mode [ 28.411264][ T318] device veth0_vlan left promiscuous mode [ 28.598876][ T28] audit: type=1400 audit(1793763677.231:473): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.656727][ T28] audit: type=1400 audit(1793763677.261:474): avc: denied { mmap_zero } for pid=416 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 28.679918][ T413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38'. [ 28.708385][ T28] audit: type=1400 audit(1793763677.311:475): avc: denied { write } for pid=412 comm="syz.4.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.765993][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 28.777389][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.859549][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.876503][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.887900][ T427] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 28.905883][ T403] device bridge_slave_0 entered promiscuous mode [ 28.923423][ T403] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.950182][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.967018][ T403] device bridge_slave_1 entered promiscuous mode [ 28.991463][ T438] loop2: detected capacity change from 0 to 2048 [ 29.038080][ T438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 29.038842][ T441] ip_tables: iptables: counters copy to user failed while replacing table [ 29.093759][ T444] loop4: detected capacity change from 0 to 4096 [ 29.101651][ T288] EXT4-fs (loop2): unmounting filesystem. [ 29.124434][ T444] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.153107][ T444] EXT4-fs (loop4): Test dummy encryption mode enabled [ 29.161683][ T444] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.184118][ T28] audit: type=1400 audit(1793763677.811:476): avc: denied { write } for pid=403 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.218137][ T403] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.225251][ T403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.232621][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.239693][ T403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.249071][ T28] audit: type=1400 audit(1793763677.841:477): avc: denied { read } for pid=448 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.276999][ T444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.48'. [ 29.301033][ T444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 29.316616][ T28] audit: type=1400 audit(1793763677.841:478): avc: denied { read } for pid=403 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.356130][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.366801][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.383715][ T290] EXT4-fs (loop4): unmounting filesystem. [ 29.390083][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.401096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.418568][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.432156][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.439260][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.447733][ T462] netlink: 'syz.4.51': attribute type 29 has an invalid length. [ 29.488769][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.501878][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.509011][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.516722][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.524932][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.548115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.572065][ T403] device veth0_vlan entered promiscuous mode [ 29.579005][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.588371][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.597708][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.618518][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.630478][ T403] device veth1_macvtap entered promiscuous mode [ 29.677116][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.688263][ T436] syz.3.44 (436) used greatest stack depth: 21000 bytes left [ 29.696029][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.802443][ T480] netlink: 24 bytes leftover after parsing attributes in process `syz.2.56'. [ 29.818087][ T480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 29.835147][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.851678][ T480] device bridge_slave_1 left promiscuous mode [ 29.868618][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.977754][ T489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 29.985032][ T489] IPv6: NLM_F_CREATE should be set when creating new route [ 29.998255][ T492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 30.011006][ T492] device vlan2 entered promiscuous mode [ 30.016627][ T492] device bridge0 entered promiscuous mode [ 30.045560][ T489] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.052871][ T489] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.124545][ T499] loop5: detected capacity change from 0 to 256 [ 30.154401][ T499] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 30.206904][ T503] loop3: detected capacity change from 0 to 512 [ 30.249741][ T503] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.66: inode has both inline data and extents flags [ 30.295960][ T503] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.66: couldn't read orphan inode 15 (err -117) [ 30.339184][ T503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.508002][ T289] EXT4-fs (loop3): unmounting filesystem. [ 30.565678][ T534] netlink: 100 bytes leftover after parsing attributes in process `syz.1.77'. [ 30.582619][ T534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.77'. [ 30.591759][ T534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 30.600608][ T534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.77'. [ 30.787196][ T550] kvm: pic: non byte write [ 31.017732][ T579] xt_hashlimit: size too large, truncated to 1048576 [ 31.343590][ T575] loop4: detected capacity change from 0 to 40427 [ 31.378397][ T575] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 31.415105][ T575] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 31.446267][ T575] F2FS-fs (loop4): invalid crc value [ 31.472562][ T583] loop1: detected capacity change from 0 to 40427 [ 31.481198][ T575] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 31.496972][ T583] F2FS-fs (loop1): fault_injection options not supported [ 31.520658][ T583] F2FS-fs (loop1): invalid crc value [ 31.547974][ T583] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.566912][ T575] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 31.573993][ T575] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 31.736648][ T583] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 31.789024][ T575] syz.4.95: attempt to access beyond end of device [ 31.789024][ T575] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 31.802913][ T575] syz.4.95: attempt to access beyond end of device [ 31.802913][ T575] loop4: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 31.816713][ T575] syz.4.95: attempt to access beyond end of device [ 31.816713][ T575] loop4: rw=2049, sector=53264, nr_sectors = 8 limit=40427 [ 31.828868][ T612] loop2: detected capacity change from 0 to 512 [ 31.830700][ T575] syz.4.95: attempt to access beyond end of device [ 31.830700][ T575] loop4: rw=2049, sector=53272, nr_sectors = 8 limit=40427 [ 31.850456][ T575] syz.4.95: attempt to access beyond end of device [ 31.850456][ T575] loop4: rw=2049, sector=53280, nr_sectors = 8 limit=40427 [ 31.864186][ T575] syz.4.95: attempt to access beyond end of device [ 31.864186][ T575] loop4: rw=2049, sector=53288, nr_sectors = 8 limit=40427 [ 31.877920][ T575] syz.4.95: attempt to access beyond end of device [ 31.877920][ T575] loop4: rw=2049, sector=53296, nr_sectors = 8 limit=40427 [ 31.891652][ T575] syz.4.95: attempt to access beyond end of device [ 31.891652][ T575] loop4: rw=2049, sector=53304, nr_sectors = 8 limit=40427 [ 31.905373][ T575] syz.4.95: attempt to access beyond end of device [ 31.905373][ T575] loop4: rw=2049, sector=53312, nr_sectors = 8 limit=40427 [ 31.919069][ T575] syz.4.95: attempt to access beyond end of device [ 31.919069][ T575] loop4: rw=2049, sector=53320, nr_sectors = 8 limit=40427 [ 31.930756][ T612] EXT4-fs (loop2): invalid journal inode [ 31.973191][ T612] EXT4-fs (loop2): can't get journal size [ 32.021791][ T612] EXT4-fs (loop2): 1 truncate cleaned up [ 32.028123][ T619] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.035383][ T619] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.048558][ T612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 32.097512][ T621] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.104725][ T621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.112105][ T621] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.119185][ T621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.206746][ T288] EXT4-fs (loop2): unmounting filesystem. [ 32.231791][ T621] device bridge0 entered promiscuous mode [ 32.557234][ T642] xt_hashlimit: size too large, truncated to 1048576 [ 32.649966][ T651] loop1: detected capacity change from 0 to 256 [ 32.684651][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 32.684668][ T28] audit: type=1400 audit(1793763681.311:529): avc: denied { mount } for pid=650 comm="syz.1.112" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.765573][ T28] audit: type=1400 audit(1793763681.381:530): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.948201][ T28] audit: type=1400 audit(1793763681.581:531): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 32.991612][ T28] audit: type=1400 audit(1793763681.621:532): avc: denied { unmount } for pid=664 comm="syz.2.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.073283][ T28] audit: type=1400 audit(1793763681.701:533): avc: denied { read } for pid=671 comm="syz.1.121" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 33.216607][ T596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.267123][ T28] audit: type=1400 audit(1793763681.701:534): avc: denied { open } for pid=671 comm="syz.1.121" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 33.356044][ T670] xt_hashlimit: size too large, truncated to 1048576 [ 33.465275][ T28] audit: type=1400 audit(1793763681.781:535): avc: denied { write } for pid=671 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.592268][ T28] audit: type=1400 audit(1793763681.781:536): avc: denied { nlmsg_write } for pid=671 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.719911][ T28] audit: type=1400 audit(1793763682.341:537): avc: denied { read write } for pid=683 comm="syz.4.125" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.849894][ T28] audit: type=1400 audit(1793763682.341:538): avc: denied { ioctl open } for pid=683 comm="syz.4.125" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.936799][ T693] loop5: detected capacity change from 0 to 1024 [ 33.967225][ T693] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 34.165540][ T702] __nla_validate_parse: 1 callbacks suppressed [ 34.165560][ T702] netlink: 52 bytes leftover after parsing attributes in process `syz.2.132'. [ 34.185257][ T702] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.219062][ T706] netlink: 76 bytes leftover after parsing attributes in process `syz.2.132'. [ 34.240256][ T706] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.247381][ T706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.279647][ T708] loop1: detected capacity change from 0 to 512 [ 34.286760][ T706] netlink: 52 bytes leftover after parsing attributes in process `syz.2.132'. [ 34.296851][ T706] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.358265][ T706] syz.2.132 (706) used greatest stack depth: 20768 bytes left [ 34.381530][ T713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.136'. [ 34.392301][ T713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.136'. [ 36.296453][ C1] sched: RT throttling activated [ 37.349104][ T739] fuse: Bad value for 'fd' [ 37.401604][ T741] loop1: detected capacity change from 0 to 4096 [ 37.408967][ T741] EXT4-fs (loop1): Test dummy encryption mode enabled [ 37.445308][ T741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.490590][ T749] Illegal XDP return value 4291108864 on prog (id 33) dev syz_tun, expect packet loss! [ 37.500728][ T741] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 37.788611][ T286] EXT4-fs (loop1): unmounting filesystem. [ 38.248859][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 38.248874][ T28] audit: type=1400 audit(1793763686.881:548): avc: denied { getopt } for pid=775 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 38.395305][ T28] audit: type=1400 audit(1793763687.021:549): avc: denied { mount } for pid=783 comm="syz.5.163" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.418852][ T28] audit: type=1400 audit(1793763687.021:550): avc: denied { append } for pid=783 comm="syz.5.163" name="sda" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.442636][ T28] audit: type=1400 audit(1793763687.021:551): avc: denied { unmount } for pid=403 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 38.488921][ T28] audit: type=1400 audit(1793763687.121:552): avc: denied { unlink } for pid=787 comm="syz.1.165" name="#5" dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.536375][ T28] audit: type=1400 audit(1793763687.141:553): avc: denied { watch_reads } for pid=787 comm="syz.1.165" path="/41/bus" dev="overlay" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.540156][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 41.316467][ T6] usb 5-1: Using ep0 maxpacket: 8 [ 41.323999][ T6] usb 5-1: device descriptor read/all, error -71 [ 41.425364][ T815] loop1: detected capacity change from 0 to 128 [ 41.562906][ T596] bio_check_eod: 4063 callbacks suppressed [ 41.562922][ T596] kworker/u4:17: attempt to access beyond end of device [ 41.562922][ T596] loop1: rw=1, sector=145, nr_sectors = 472 limit=128 [ 41.637718][ T28] audit: type=1400 audit(1793763690.271:554): avc: denied { getopt } for pid=820 comm="syz.1.177" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.747380][ T833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 42.297387][ T28] audit: type=1400 audit(1793763690.931:555): avc: denied { create } for pid=852 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.350189][ T28] audit: type=1400 audit(1793763690.961:556): avc: denied { write } for pid=852 comm="syz.3.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.932743][ T28] audit: type=1400 audit(1793763691.561:557): avc: denied { create } for pid=884 comm="syz.3.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.952064][ T886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.197'. [ 43.297377][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 43.297393][ T28] audit: type=1400 audit(1793763691.931:560): avc: denied { read write } for pid=925 comm="syz.5.215" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 43.339412][ T28] audit: type=1400 audit(1793763691.931:561): avc: denied { open } for pid=925 comm="syz.5.215" path="/31/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 43.906492][ T308] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 44.086474][ T308] usb 5-1: Using ep0 maxpacket: 8 [ 44.092774][ T308] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 44.105906][ T308] usb 5-1: config 0 interface 0 has no altsetting 0 [ 44.112695][ T308] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 44.129058][ T308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.141631][ T308] usb 5-1: config 0 descriptor?? [ 44.150073][ T961] FAULT_INJECTION: forcing a failure. [ 44.150073][ T961] name failslab, interval 1, probability 0, space 0, times 1 [ 44.164119][ T961] CPU: 0 PID: 961 Comm: syz.5.227 Not tainted syzkaller #0 [ 44.171360][ T961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.181450][ T961] Call Trace: [ 44.184746][ T961] [ 44.187695][ T961] __dump_stack+0x21/0x24 [ 44.192057][ T961] dump_stack_lvl+0x110/0x170 [ 44.196755][ T961] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.201798][ T961] ? kernel_text_address+0xa0/0xd0 [ 44.206936][ T961] dump_stack+0x15/0x24 [ 44.211106][ T961] should_fail_ex+0x3bf/0x510 [ 44.215809][ T961] __should_failslab+0xac/0xf0 [ 44.220592][ T961] should_failslab+0x9/0x20 [ 44.225113][ T961] __kmem_cache_alloc_node+0x3d/0x2d0 [ 44.230535][ T961] ? genl_family_rcv_msg_attrs_parse+0xac/0x2a0 [ 44.236792][ T961] ? genl_family_rcv_msg_attrs_parse+0xac/0x2a0 [ 44.243047][ T961] __kmalloc+0xa4/0x1e0 [ 44.247255][ T961] genl_family_rcv_msg_attrs_parse+0xac/0x2a0 [ 44.253346][ T961] genl_family_rcv_msg_doit+0xe6/0x370 [ 44.258823][ T961] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 44.264760][ T961] ? genl_get_cmd+0xec/0x8d0 [ 44.269376][ T961] ? memcpy+0x56/0x70 [ 44.273390][ T961] genl_rcv_msg+0x618/0x7a0 [ 44.277927][ T961] ? __alloc_skb+0x226/0x4a0 [ 44.282567][ T961] ? netlink_sendmsg+0x635/0xbd0 [ 44.287551][ T961] ? __sys_sendto+0x4ac/0x660 [ 44.292261][ T961] ? __cfi_genl_rcv_msg+0x10/0x10 [ 44.297299][ T961] ? __cfi_ctrl_getfamily+0x10/0x10 [ 44.302528][ T961] ? __cfi_ctrl_dumpfamily+0x10/0x10 [ 44.307847][ T961] netlink_rcv_skb+0x200/0x450 [ 44.312635][ T961] ? __cfi_genl_rcv_msg+0x10/0x10 [ 44.317760][ T961] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 44.323067][ T961] ? __netlink_lookup+0x387/0x3b0 [ 44.328120][ T961] genl_rcv+0x28/0x40 [ 44.332135][ T961] netlink_unicast+0x8c1/0xa60 [ 44.336930][ T961] netlink_sendmsg+0x8b9/0xbd0 [ 44.341715][ T961] ? cgroup_rstat_updated+0xf0/0x360 [ 44.347029][ T961] ? __cfi_netlink_sendmsg+0x10/0x10 [ 44.352346][ T961] ? security_socket_sendmsg+0x93/0xb0 [ 44.357842][ T961] __sys_sendto+0x4ac/0x660 [ 44.362375][ T961] ? __cfi___sys_sendto+0x10/0x10 [ 44.367452][ T961] ? do_user_addr_fault+0x9a5/0x1030 [ 44.372794][ T961] __x64_sys_sendto+0xe5/0x100 [ 44.377588][ T961] x64_sys_call+0x83/0x9a0 [ 44.382028][ T961] do_syscall_64+0x4c/0xa0 [ 44.386468][ T961] ? clear_bhb_loop+0x30/0x80 [ 44.391184][ T961] ? clear_bhb_loop+0x30/0x80 [ 44.395921][ T961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.401863][ T961] RIP: 0033:0x7effe8f6034e [ 44.406341][ T961] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.425968][ T961] RSP: 002b:00007effe9d9ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 44.434422][ T961] RAX: ffffffffffffffda RBX: 00007effe9d9c6c0 RCX: 00007effe8f6034e [ 44.442422][ T961] RDX: 0000000000000020 RSI: 00007effe9d9b000 RDI: 0000000000000004 [ 44.450450][ T961] RBP: 0000000000000000 R08: 00007effe9d9af04 R09: 000000000000000c [ 44.458462][ T961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 44.466453][ T961] R13: 00007effe9d9af58 R14: 00007effe9d9b000 R15: 0000000000000000 [ 44.474461][ T961] [ 44.512328][ T966] loop3: detected capacity change from 0 to 512 [ 44.567331][ T966] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 44.589520][ T976] FAULT_INJECTION: forcing a failure. [ 44.589520][ T976] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.604089][ T976] CPU: 1 PID: 976 Comm: syz.5.232 Not tainted syzkaller #0 [ 44.611337][ T976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 44.621417][ T976] Call Trace: [ 44.624720][ T976] [ 44.627692][ T976] __dump_stack+0x21/0x24 [ 44.632067][ T976] dump_stack_lvl+0x110/0x170 [ 44.636771][ T976] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.641824][ T976] ? __futex_queue+0x175/0x300 [ 44.646619][ T976] ? memcpy+0x56/0x70 [ 44.650645][ T976] dump_stack+0x15/0x24 [ 44.654833][ T976] should_fail_ex+0x3bf/0x510 [ 44.659549][ T976] should_fail+0xb/0x10 [ 44.663737][ T976] should_fail_usercopy+0x1a/0x20 [ 44.668788][ T976] strncpy_from_user+0x24/0x2c0 [ 44.673674][ T976] bpf_prog_load+0x1f1/0x1670 [ 44.678392][ T976] ? map_freeze+0x3a0/0x3a0 [ 44.682930][ T976] ? selinux_bpf+0xc7/0xf0 [ 44.685607][ T308] hid (null): unknown global tag 0xfd [ 44.687374][ T976] ? security_bpf+0x93/0xb0 [ 44.697312][ T976] __sys_bpf+0x57b/0x850 [ 44.701586][ T976] ? bpf_link_show_fdinfo+0x330/0x330 [ 44.706984][ T976] ? fpregs_restore_userregs+0x128/0x260 [ 44.712717][ T976] __x64_sys_bpf+0x7c/0x90 [ 44.717164][ T976] x64_sys_call+0x488/0x9a0 [ 44.719242][ T308] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 44.721706][ T976] do_syscall_64+0x4c/0xa0 [ 44.733585][ T976] ? clear_bhb_loop+0x30/0x80 [ 44.738309][ T976] ? clear_bhb_loop+0x30/0x80 [ 44.743026][ T976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.748951][ T976] RIP: 0033:0x7effe8f9fb19 [ 44.753394][ T976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.773039][ T976] RSP: 002b:00007effe9d9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.781498][ T976] RAX: ffffffffffffffda RBX: 00007effe9225fa0 RCX: 00007effe8f9fb19 [ 44.789506][ T976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 44.797511][ T976] RBP: 00007effe9037b70 R08: 0000000000000000 R09: 0000000000000000 [ 44.805518][ T976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 44.813522][ T976] R13: 00007effe9226038 R14: 00007effe9225fa0 R15: 00007ffec8d71ce8 [ 44.821534][ T976] [ 44.834910][ T28] audit: type=1400 audit(1793763693.461:562): avc: denied { map } for pid=963 comm="syz.3.230" path="/50/file0/file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.858392][ T289] EXT4-fs (loop3): unmounting filesystem. [ 44.893417][ T308] usb 5-1: USB disconnect, device number 4 [ 44.902925][ T967] loop1: detected capacity change from 0 to 16 [ 44.919384][ T967] erofs: (device loop1): mounted with root inode @ nid 36. [ 44.934971][ T967] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 44.944314][ T28] audit: type=1400 audit(1793763693.571:563): avc: denied { append } for pid=984 comm="syz.3.236" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 44.953063][ T967] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 44.976176][ T967] syz.1.228: attempt to access beyond end of device [ 44.976176][ T967] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 44.990473][ T977] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 44.999282][ T967] syz.1.228: attempt to access beyond end of device [ 44.999282][ T967] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 45.000607][ T977] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 45.103749][ T994] loop3: detected capacity change from 0 to 4096 [ 45.113623][ T994] EXT4-fs (loop3): Test dummy encryption mode enabled [ 45.136801][ T28] audit: type=1400 audit(1793763693.771:564): avc: denied { remount } for pid=995 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 45.157761][ T996] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 45.164859][ T28] audit: type=1400 audit(1793763693.791:565): avc: denied { mounton } for pid=995 comm="syz.1.249" path="/53/file0/file0" dev="ramfs" ino=20052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 45.189472][ T994] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.198514][ T996] overlayfs: failed to set xattr on upper [ 45.233221][ T28] audit: type=1400 audit(1793763693.861:566): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 45.285833][ T990] loop5: detected capacity change from 0 to 40427 [ 45.312074][ T289] EXT4-fs (loop3): unmounting filesystem. [ 45.316635][ T990] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 45.325652][ T990] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 45.355727][ T1001] loop3: detected capacity change from 0 to 512 [ 45.362865][ T990] F2FS-fs (loop5): invalid crc value [ 45.387707][ T990] F2FS-fs (loop5): Found nat_bits in checkpoint [ 45.404270][ T1001] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 45.422799][ T1001] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.453324][ T28] audit: type=1400 audit(1793763694.081:567): avc: denied { map } for pid=1000 comm="syz.3.241" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 45.480962][ T1001] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 45.491607][ T28] audit: type=1400 audit(1793763694.111:568): avc: denied { create } for pid=1000 comm="syz.3.241" name="proc_mnt" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.492982][ T990] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 45.520953][ T1001] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 45.532189][ T1001] EXT4-fs error (device loop3): ext4_evict_inode:281: inode #18: comm syz.3.241: mark_inode_dirty error [ 45.543640][ T990] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 45.551648][ T1001] EXT4-fs warning (device loop3): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 45.578160][ T1016] netlink: 180 bytes leftover after parsing attributes in process `syz.4.244'. [ 45.604584][ T289] EXT4-fs (loop3): unmounting filesystem. [ 45.617679][ T1016] netlink: 180 bytes leftover after parsing attributes in process `syz.4.244'. [ 45.647683][ T28] audit: type=1400 audit(1793763694.281:569): avc: denied { mounton } for pid=989 comm="syz.5.237" path="/35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.691648][ T990] overlayfs: failed to resolve './file0': -2 [ 45.698919][ T1016] netlink: 180 bytes leftover after parsing attributes in process `syz.4.244'. [ 46.221937][ T1057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'. [ 46.353843][ T1063] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 48.306933][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 48.306950][ T28] audit: type=1400 audit(1793763696.941:589): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 49.338112][ T1073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 49.374023][ T1077] netlink: 'syz.2.268': attribute type 11 has an invalid length. [ 49.411517][ T28] audit: type=1326 audit(1793763698.041:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1084 comm="syz.4.272" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd512d9fb19 code=0x0 [ 49.468588][ T28] audit: type=1400 audit(1793763698.101:591): avc: denied { unlink } for pid=403 comm="syz-executor" name="file0" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.503408][ T1097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 49.532056][ T1100] loop3: detected capacity change from 0 to 1024 [ 49.538929][ T1100] EXT4-fs: Ignoring removed oldalloc option [ 49.544920][ T1100] EXT4-fs: Ignoring removed oldalloc option [ 49.561329][ T1100] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.580283][ T1103] loop5: detected capacity change from 0 to 128 [ 49.613144][ T1103] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 49.622605][ T1100] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 49.655211][ T1103] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.728326][ T289] EXT4-fs (loop3): unmounting filesystem. [ 49.825303][ T403] EXT4-fs (loop5): unmounting filesystem. [ 49.854376][ T1115] loop3: detected capacity change from 0 to 16 [ 49.879239][ T1115] erofs: (device loop3): mounted with root inode @ nid 36. [ 50.043709][ T289] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 1050 @ nid 46 [ 50.079280][ T289] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 50.094700][ T289] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 50.205003][ T1138] loop3: detected capacity change from 0 to 2048 [ 50.269487][ T1141] ip_tables: iptables: counters copy to user failed while replacing table [ 50.280500][ T1138] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.296390][ T1138] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.369711][ T28] audit: type=1400 audit(1793763699.001:592): avc: denied { remount } for pid=1137 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.406208][ T1138] overlayfs: failed to set xattr on upper [ 50.449033][ T28] audit: type=1400 audit(1793763699.081:593): avc: denied { setattr } for pid=1137 comm="syz.3.287" path="/66/file0/bus" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.490159][ T28] audit: type=1400 audit(1793763699.121:594): avc: denied { unlink } for pid=289 comm="syz-executor" name="file3" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.521515][ T289] EXT4-fs (loop3): unmounting filesystem. [ 50.537735][ T28] audit: type=1400 audit(1793763699.121:595): avc: denied { unlink } for pid=289 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 50.606544][ T28] audit: type=1400 audit(1793763699.151:596): avc: denied { rmdir } for pid=289 comm="syz-executor" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 51.058960][ T1164] netlink: 'syz.1.297': attribute type 4 has an invalid length. [ 51.125477][ T1168] netlink: 'syz.1.297': attribute type 4 has an invalid length. [ 51.296615][ T28] audit: type=1400 audit(1793763699.921:597): avc: denied { sys_module } for pid=1173 comm="syz.2.302" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 51.368421][ T28] audit: type=1400 audit(1793763700.001:598): avc: denied { ioctl } for pid=1185 comm="syz.4.306" path="socket:[20365]" dev="sockfs" ino=20365 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.396710][ T1186] Zero length message leads to an empty skb [ 51.452831][ T1194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.311'. [ 51.547006][ T1209] loop3: detected capacity change from 0 to 512 [ 51.588005][ T1209] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.627388][ T1209] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.667478][ T1209] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 51.687896][ T1220] loop1: detected capacity change from 0 to 512 [ 51.720521][ T1209] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 51.759605][ T1209] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.759605][ T1209] [ 51.777681][ T1209] EXT4-fs (loop3): Total free blocks count 0 [ 51.783810][ T1209] EXT4-fs (loop3): Free/Dirty block details [ 51.789919][ T1209] EXT4-fs (loop3): free_blocks=65281 [ 51.795251][ T1209] EXT4-fs (loop3): dirty_blocks=1 [ 51.800359][ T1209] EXT4-fs (loop3): Block reservation details [ 51.806362][ T1209] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 51.847864][ T289] EXT4-fs (loop3): unmounting filesystem. [ 52.712508][ T1284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 52.864656][ T1299] loop4: detected capacity change from 0 to 128 [ 53.021329][ T1315] netlink: 88 bytes leftover after parsing attributes in process `syz.1.357'. [ 53.068318][ T1322] loop1: detected capacity change from 0 to 1024 [ 53.140361][ T1093] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.407856][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 53.407877][ T28] audit: type=1400 audit(1793763702.041:620): avc: denied { create } for pid=1346 comm="syz.5.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 53.494332][ T28] audit: type=1400 audit(1793763702.071:621): avc: denied { sys_admin } for pid=1346 comm="syz.5.371" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 53.545143][ T1322] loop1: detected capacity change from 0 to 40427 [ 53.554792][ T1353] fuse: Bad value for 'fd' [ 53.562442][ T28] audit: type=1400 audit(1793763702.101:622): avc: denied { block_suspend } for pid=1349 comm="syz.3.372" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 53.593467][ T1322] F2FS-fs (loop1): invalid crc value [ 53.637223][ T1322] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.645115][ T1360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 53.737181][ T1322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 53.805638][ T28] audit: type=1400 audit(1793763702.431:623): avc: denied { setattr } for pid=1321 comm="syz.1.369" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.919627][ T1371] fuse: Bad value for 'fd' [ 53.981589][ T1373] capability: warning: `syz.3.380' uses deprecated v2 capabilities in a way that may be insecure [ 54.129877][ T28] audit: type=1400 audit(1793763702.761:624): avc: denied { create } for pid=1378 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 54.155832][ T1381] loop4: detected capacity change from 0 to 512 [ 54.165235][ T1381] ext3: Unknown parameter 'subj_user' [ 54.346748][ T1392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 54.392276][ T1400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.389'. [ 54.455227][ T1403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 54.494472][ T1403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 54.717364][ T28] audit: type=1400 audit(1793763703.351:625): avc: denied { shutdown } for pid=1416 comm="syz.3.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 54.737096][ T28] audit: type=1400 audit(1793763703.351:626): avc: denied { module_load } for pid=1418 comm="syz.5.397" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 54.844285][ T1429] netlink: 168 bytes leftover after parsing attributes in process `syz.3.401'. [ 55.142920][ T1440] capability: warning: `syz.3.406' uses 32-bit capabilities (legacy support in use) [ 55.292198][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 55.363766][ T1547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.412'. [ 55.532864][ T1566] ------------[ cut here ]------------ [ 55.538412][ T1566] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:853 (size 16) [ 55.550852][ T1566] WARNING: CPU: 0 PID: 1566 at net/sched/cls_u32.c:853 u32_change+0x1c11/0x2300 [ 55.559969][ T1566] Modules linked in: [ 55.563910][ T1566] CPU: 0 PID: 1566 Comm: syz.2.426 Not tainted syzkaller #0 [ 55.571323][ T1566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.581597][ T1566] RIP: 0010:u32_change+0x1c11/0x2300 [ 55.587086][ T1566] Code: fc ff ff e8 01 d2 5d fd c6 05 a1 0e 7c 03 01 b9 10 00 00 00 48 c7 c7 60 19 ff 85 4c 89 e6 48 c7 c2 e0 19 ff 85 e8 9f 51 2e fd <0f> 0b e9 09 f0 ff ff e8 d3 d1 5d fd be 02 00 00 00 eb 0a e8 c7 d1 [ 55.606837][ T1566] RSP: 0018:ffffc9000448ee40 EFLAGS: 00010246 [ 55.613218][ T1566] RAX: 96a2d03a6273cb00 RBX: ffff88812f9a5ac0 RCX: 0000000000080000 [ 55.621352][ T1566] RDX: ffffc900022ad000 RSI: 0000000000002f98 RDI: 0000000000002f99 [ 55.629459][ T1566] RBP: ffffc9000448eff8 R08: ffffc9000448ea27 R09: 1ffff92000891d44 [ 55.637535][ T1566] R10: dffffc0000000000 R11: fffff52000891d45 R12: 0000000000000020 [ 55.645545][ T1566] R13: ffff88812f9a4800 R14: ffff88812f9a48c0 R15: 0000000000000001 [ 55.653586][ T1566] FS: 00007fd0f0f546c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 55.662584][ T1566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.669223][ T1566] CR2: 0000200000006040 CR3: 000000013d3fb000 CR4: 00000000003506b0 [ 55.677267][ T1566] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.685270][ T1566] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.693476][ T1566] Call Trace: [ 55.696933][ T1566] [ 55.699893][ T1566] ? __cfi_u32_change+0x10/0x10 [ 55.704785][ T1566] ? __kasan_check_write+0x14/0x20 [ 55.709990][ T1566] ? mutex_unlock+0x8f/0x230 [ 55.714620][ T1566] ? __cfi_mutex_unlock+0x10/0x10 [ 55.719715][ T1566] ? __cfi_u32_change+0x10/0x10 [ 55.724598][ T1566] tc_new_tfilter+0x1488/0x1a30 [ 55.729519][ T1566] ? __cfi_tc_new_tfilter+0x10/0x10 [ 55.734761][ T1566] ? security_capable+0x99/0xc0 [ 55.739681][ T1566] ? ns_capable+0x8c/0xf0 [ 55.744042][ T1566] ? netlink_net_capable+0x125/0x160 [ 55.749398][ T1566] ? __cfi_tc_new_tfilter+0x10/0x10 [ 55.754661][ T1566] rtnetlink_rcv_msg+0xa9a/0xde0 [ 55.759658][ T1566] ? 0xffffffffa000065c [ 55.763838][ T1566] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 55.769884][ T1566] ? __kernel_text_address+0xd/0x30 [ 55.775135][ T1566] ? avc_has_perm_noaudit+0x390/0x490 [ 55.780585][ T1566] ? memcpy+0x56/0x70 [ 55.784633][ T1566] ? avc_has_perm_noaudit+0x30a/0x490 [ 55.790073][ T1566] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 55.795834][ T1566] ? kasan_save_alloc_info+0x1f/0x30 [ 55.801191][ T1566] ? avc_has_perm+0x163/0x250 [ 55.805929][ T1566] ? __alloc_skb+0x226/0x4a0 [ 55.810590][ T1566] ? netlink_sendmsg+0x635/0xbd0 [ 55.815581][ T1566] ? ____sys_sendmsg+0x5fb/0x9c0 [ 55.820589][ T1566] ? __cfi_avc_has_perm+0x10/0x10 [ 55.825677][ T1566] ? selinux_nlmsg_lookup+0x39d/0x440 [ 55.831125][ T1566] netlink_rcv_skb+0x200/0x450 [ 55.835932][ T1566] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 55.841439][ T1566] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 55.846788][ T1566] ? __netlink_lookup+0x387/0x3b0 [ 55.851864][ T1566] rtnetlink_rcv+0x1c/0x20 [ 55.856283][ T1566] netlink_unicast+0x8c1/0xa60 [ 55.861114][ T1566] netlink_sendmsg+0x8b9/0xbd0 [ 55.865917][ T1566] ? __cfi_pick_next_task_fair+0x10/0x10 [ 55.871602][ T1566] ? __cfi_netlink_sendmsg+0x10/0x10 [ 55.876944][ T1566] ? security_socket_sendmsg+0x93/0xb0 [ 55.882443][ T1566] ? __cfi_netlink_sendmsg+0x10/0x10 [ 55.887805][ T1566] ____sys_sendmsg+0x5fb/0x9c0 [ 55.892613][ T1566] ? __sys_sendmsg_sock+0x40/0x40 [ 55.897703][ T1566] ? import_iovec+0x7c/0xb0 [ 55.902246][ T1566] ___sys_sendmsg+0x2a2/0x360 [ 55.906982][ T1566] ? ttwu_do_wakeup+0x468/0x490 [ 55.911895][ T1566] ? __sys_sendmsg+0x290/0x290 [ 55.916734][ T1566] ? try_to_wake_up+0x6c6/0x1250 [ 55.921735][ T1566] ? __fdget+0x19c/0x220 [ 55.926022][ T1566] __sys_sendmmsg+0x2cc/0x4e0 [ 55.930779][ T1566] ? __cfi___sys_sendmmsg+0x10/0x10 [ 55.933517][ T1577] ip_tables: iptables: counters copy to user failed while replacing table [ 55.936015][ T1566] ? fpregs_restore_userregs+0x128/0x260 [ 55.950263][ T1566] __x64_sys_sendmmsg+0xa0/0xb0 [ 55.950905][ T28] audit: type=1400 audit(1793763704.581:627): avc: denied { name_bind } for pid=1576 comm="syz.4.420" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 55.955176][ T1566] x64_sys_call+0x3f5/0x9a0 [ 55.955207][ T1566] do_syscall_64+0x4c/0xa0 [ 55.985165][ T1566] ? clear_bhb_loop+0x30/0x80 [ 55.989903][ T1566] ? clear_bhb_loop+0x30/0x80 [ 55.994641][ T1566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.000628][ T1566] RIP: 0033:0x7fd0eff9fb19 [ 56.005083][ T1566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.017110][ T28] audit: type=1400 audit(1793763704.611:628): avc: denied { write } for pid=1576 comm="syz.4.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.024755][ T1566] RSP: 002b:00007fd0f0f54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 56.052533][ T1566] RAX: ffffffffffffffda RBX: 00007fd0f0225fa0 RCX: 00007fd0eff9fb19 [ 56.060563][ T1566] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 56.068590][ T1566] RBP: 00007fd0f0037b70 R08: 0000000000000000 R09: 0000000000000000 [ 56.076619][ T1566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.084624][ T1566] R13: 00007fd0f0226038 R14: 00007fd0f0225fa0 R15: 00007ffe394ad3b8 [ 56.092662][ T1566] [ 56.095731][ T1566] ---[ end trace 0000000000000000 ]--- [ 56.104097][ T1566] netlink: 2 bytes leftover after parsing attributes in process `syz.2.426'. [ 56.130308][ T28] audit: type=1400 audit(1793763704.761:629): avc: denied { sqpoll } for pid=1580 comm="syz.3.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.201475][ T1584] loop1: detected capacity change from 0 to 512 [ 56.246849][ T1584] EXT4-fs (loop1): Test dummy encryption mode enabled [ 56.278537][ T1584] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.423: missing EA_INODE flag [ 56.290693][ T1584] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.423: error while reading EA inode 2 err=-117 [ 56.303284][ T1584] EXT4-fs (loop1): 1 orphan inode deleted [ 56.310050][ T1584] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.339931][ T709] kernel write not supported for file /ppp (pid: 709 comm: kworker/0:4) [ 56.518906][ T286] EXT4-fs (loop1): unmounting filesystem. [ 57.208226][ T1616] fuse: Bad value for 'fd' [ 57.511687][ T1641] ip_tables: iptables: counters copy to user failed while replacing table [ 57.537105][ T1644] loop5: detected capacity change from 0 to 128 [ 57.558384][ T1644] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 57.567881][ T1093] udevd[1093]: incorrect ext4 checksum on /dev/loop5 [ 57.570715][ T1644] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.824683][ T403] EXT4-fs (loop5): unmounting filesystem. [ 58.471013][ T1693] ip_tables: iptables: counters copy to user failed while replacing table [ 58.533606][ T1698] loop4: detected capacity change from 0 to 128 [ 58.567329][ T1698] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 58.576830][ T1698] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.597213][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 58.597229][ T28] audit: type=1400 audit(1793763713.216:642): avc: denied { wake_alarm } for pid=1703 comm="syz.2.464" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 58.683427][ T28] audit: type=1400 audit(1793763713.236:643): avc: denied { setattr } for pid=1684 comm="syz.1.456" name="sda" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.837065][ T290] EXT4-fs (loop4): unmounting filesystem. [ 58.880330][ T1729] loop4: detected capacity change from 0 to 1024 [ 58.980313][ T1735] loop5: detected capacity change from 0 to 512 [ 58.986774][ T28] audit: type=1326 audit(1793763713.606:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1732 comm="syz.3.476" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ac99fb19 code=0x7ffc0000 [ 59.014673][ T1735] EXT4-fs: Ignoring removed orlov option [ 59.020507][ T28] audit: type=1326 audit(1793763713.606:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1732 comm="syz.3.476" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ac99fb19 code=0x7ffc0000 [ 59.046598][ T1735] EXT4-fs: Ignoring removed oldalloc option [ 59.057408][ T1735] EXT4-fs: Ignoring removed bh option [ 59.062882][ T28] audit: type=1326 audit(1793763713.646:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1732 comm="syz.3.476" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8ac99fb19 code=0x7ffc0000 [ 59.087813][ T28] audit: type=1326 audit(1793763713.646:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1732 comm="syz.3.476" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ac99fb19 code=0x7ffc0000 [ 59.087873][ T1735] EXT4-fs: Mount option(s) incompatible with ext3 [ 59.119533][ T28] audit: type=1326 audit(1793763713.646:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1732 comm="syz.3.476" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ac99fb19 code=0x7ffc0000 [ 59.145282][ T28] audit: type=1326 audit(1793763713.646:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1732 comm="syz.3.476" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa8ac99fb19 code=0x7ffc0000 [ 59.170322][ T28] audit: type=1326 audit(1793763713.646:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1732 comm="syz.3.476" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ac99fb19 code=0x7ffc0000 [ 59.195321][ T28] audit: type=1326 audit(1793763713.646:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1732 comm="syz.3.476" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8ac99fb19 code=0x7ffc0000 [ 59.243941][ T1729] loop4: detected capacity change from 0 to 40427 [ 59.269172][ T1729] F2FS-fs (loop4): invalid crc value [ 59.295830][ T1729] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.318836][ T1755] netlink: 104 bytes leftover after parsing attributes in process `syz.5.475'. [ 59.349648][ T1729] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 59.623676][ T1764] FAULT_INJECTION: forcing a failure. [ 59.623676][ T1764] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 59.667975][ T1764] CPU: 0 PID: 1764 Comm: syz.4.482 Tainted: G W syzkaller #0 [ 59.676848][ T1764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 59.686980][ T1764] Call Trace: [ 59.690294][ T1764] [ 59.693264][ T1764] __dump_stack+0x21/0x24 [ 59.697688][ T1764] dump_stack_lvl+0x110/0x170 [ 59.702427][ T1764] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.707491][ T1764] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 59.713692][ T1764] dump_stack+0x15/0x24 [ 59.717888][ T1764] should_fail_ex+0x3bf/0x510 [ 59.722600][ T1764] should_fail_alloc_page+0x61/0x90 [ 59.727852][ T1764] prepare_alloc_pages+0x131/0x570 [ 59.733009][ T1764] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 59.738251][ T1764] ? kasan_set_track+0x60/0x70 [ 59.743061][ T1764] ? kasan_save_alloc_info+0x1f/0x30 [ 59.748385][ T1764] ? __kasan_slab_alloc+0x72/0x80 [ 59.753451][ T1764] ? slab_post_alloc_hook+0x4f/0x2d0 [ 59.758780][ T1764] __alloc_pages+0x15b/0x610 [ 59.763426][ T1764] ? __cfi___alloc_pages+0x10/0x10 [ 59.768584][ T1764] ? __kasan_check_write+0x14/0x20 [ 59.773741][ T1764] ? _raw_spin_lock+0x94/0xf0 [ 59.778483][ T1764] ? __cfi__raw_spin_lock+0x10/0x10 [ 59.783728][ T1764] __get_free_pages+0xe/0x30 [ 59.788369][ T1764] kasan_populate_vmalloc_pte+0x29/0x120 [ 59.794035][ T1764] __apply_to_page_range+0x8db/0xc80 [ 59.799367][ T1764] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 59.805652][ T1764] ? __cfi_kasan_populate_vmalloc_pte+0x10/0x10 [ 59.811929][ T1764] apply_to_page_range+0x3b/0x50 [ 59.816917][ T1764] kasan_populate_vmalloc+0x60/0x70 [ 59.822154][ T1764] alloc_vmap_area+0x1789/0x18c0 [ 59.827136][ T1764] ? vm_map_ram+0x930/0x930 [ 59.831680][ T1764] ? __kasan_kmalloc+0x95/0xb0 [ 59.836488][ T1764] ? kmalloc_node_trace+0x3d/0xb0 [ 59.841549][ T1764] __get_vm_area_node+0x160/0x360 [ 59.846614][ T1764] vmap+0xe1/0x2a0 [ 59.850367][ T1764] ? bpf_ringbuf_alloc+0x2f4/0x4c0 [ 59.855525][ T1764] bpf_ringbuf_alloc+0x2f4/0x4c0 [ 59.860508][ T1764] ringbuf_map_alloc+0x1c6/0x2f0 [ 59.865494][ T1764] map_create+0x467/0xcf0 [ 59.869858][ T1764] __sys_bpf+0x34e/0x850 [ 59.874134][ T1764] ? bpf_link_show_fdinfo+0x330/0x330 [ 59.879548][ T1764] ? fpregs_restore_userregs+0x128/0x260 [ 59.885234][ T1764] __x64_sys_bpf+0x7c/0x90 [ 59.889683][ T1764] x64_sys_call+0x488/0x9a0 [ 59.894226][ T1764] do_syscall_64+0x4c/0xa0 [ 59.898677][ T1764] ? clear_bhb_loop+0x30/0x80 [ 59.903392][ T1764] ? clear_bhb_loop+0x30/0x80 [ 59.908116][ T1764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.914062][ T1764] RIP: 0033:0x7fd512d9fb19 [ 59.918503][ T1764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.938145][ T1764] RSP: 002b:00007fd513bd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.946598][ T1764] RAX: ffffffffffffffda RBX: 00007fd513025fa0 RCX: 00007fd512d9fb19 [ 59.954613][ T1764] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 0000000000000000 [ 59.962674][ T1764] RBP: 00007fd512e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 59.970678][ T1764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.978681][ T1764] R13: 00007fd513026038 R14: 00007fd513025fa0 R15: 00007ffd4c66f598 [ 59.986693][ T1764] [ 60.054638][ T1771] overlayfs: failed to clone upperpath [ 60.067429][ T1771] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.086005][ T1771] overlayfs: failed to clone lowerpath [ 60.124568][ T1779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.489'. [ 60.412294][ T1790] loop4: detected capacity change from 0 to 128 [ 60.477510][ T1457] kworker/u4:32: attempt to access beyond end of device [ 60.477510][ T1457] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 60.919409][ T1803] VFS: Mount too revealing [ 60.986684][ T1808] ip_tables: iptables: counters copy to user failed while replacing table [ 61.009514][ T1808] ªªªªªª: renamed from vlan0 [ 61.014507][ T1785] syz.2.490 (1785) used greatest stack depth: 20648 bytes left [ 61.553937][ T1851] loop4: detected capacity change from 0 to 512 [ 61.668085][ T1851] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.687137][ T1851] ext4 filesystem being mounted at /117/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.867956][ T1870] fuse: Bad value for 'fd' [ 61.876620][ T1870] process 'syz.2.521' launched './file0' with NULL argv: empty string added [ 61.885836][ T290] EXT4-fs (loop4): unmounting filesystem. [ 61.961232][ T1886] sch_tbf: burst 1024 is lower than device veth1_virt_wifi mtu (1514) ! [ 62.035151][ T1897] sch_tbf: burst 1024 is lower than device veth1_virt_wifi mtu (1514) ! [ 62.380118][ T1916] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.388547][ T1916] device bridge_slave_0 left promiscuous mode [ 62.394730][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.485123][ T1927] ip_tables: iptables: counters copy to user failed while replacing table [ 62.520148][ T1931] syz.5.546 uses obsolete (PF_INET,SOCK_PACKET) [ 62.527490][ T1931] netlink: 'syz.5.546': attribute type 8 has an invalid length. [ 62.604405][ T1945] loop4: detected capacity change from 0 to 128 [ 62.633898][ T1945] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 62.645917][ T1945] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.804680][ T290] EXT4-fs (loop4): unmounting filesystem. [ 62.812595][ T1953] device gretap1 entered promiscuous mode [ 62.825628][ T1953] loop1: detected capacity change from 0 to 256 [ 62.828963][ T1955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.554'. [ 62.853412][ T1953] FAT-fs (loop1): Directory bread(block 64) failed [ 62.860081][ T1953] FAT-fs (loop1): Directory bread(block 65) failed [ 62.866956][ T1953] FAT-fs (loop1): Directory bread(block 66) failed [ 62.873544][ T1953] FAT-fs (loop1): Directory bread(block 67) failed [ 62.880481][ T1953] FAT-fs (loop1): Directory bread(block 68) failed [ 62.887259][ T1953] FAT-fs (loop1): Directory bread(block 69) failed [ 62.893928][ T1953] FAT-fs (loop1): Directory bread(block 70) failed [ 62.900898][ T1953] FAT-fs (loop1): Directory bread(block 71) failed [ 62.907739][ T1953] FAT-fs (loop1): Directory bread(block 72) failed [ 62.908380][ T1955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.554'. [ 62.914461][ T1953] FAT-fs (loop1): Directory bread(block 73) failed [ 63.429776][ T1997] 9pnet_fd: Insufficient options for proto=fd [ 63.531215][ T2005] fuse: Bad value for 'fd' [ 64.070937][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 64.070953][ T28] audit: type=1400 audit(1793763718.696:719): avc: denied { ioctl } for pid=2042 comm="syz.4.579" path="socket:[23247]" dev="sockfs" ino=23247 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.107417][ T2043] netlink: 'syz.4.579': attribute type 4 has an invalid length. [ 64.134870][ T2043] netlink: 'syz.4.579': attribute type 4 has an invalid length. [ 64.195148][ T2051] device bridge_slave_1 left promiscuous mode [ 64.207741][ T2053] loop5: detected capacity change from 0 to 128 [ 64.226685][ T2051] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.238562][ T2051] device bridge_slave_0 left promiscuous mode [ 64.244782][ T2051] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.467007][ T2067] tipc: Failed to remove unknown binding: 66,0,2/0:435644014/435644015 [ 64.489464][ T2067] tipc: Failed to remove unknown binding: 66,0,2/0:435644014/435644015 [ 64.657012][ T2085] netlink: 8952 bytes leftover after parsing attributes in process `syz.5.597'. [ 64.666178][ T2085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.597'. [ 64.705383][ T2087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.598'. [ 64.827882][ T2093] netlink: 1320 bytes leftover after parsing attributes in process `syz.5.599'. [ 65.084217][ T2104] overlayfs: failed to clone upperpath [ 65.141107][ T28] audit: type=1400 audit(1793763719.766:720): avc: denied { mount } for pid=2111 comm="syz.3.609" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 65.377511][ T28] audit: type=1400 audit(1793763720.006:721): avc: denied { shutdown } for pid=2114 comm="syz.3.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.492890][ T2128] netlink: 'syz.3.616': attribute type 11 has an invalid length. [ 65.500824][ T2128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.616'. [ 65.522774][ T2130] netlink: 64 bytes leftover after parsing attributes in process `syz.2.617'. [ 65.782088][ T28] audit: type=1400 audit(1793763720.406:722): avc: denied { setopt } for pid=2148 comm="syz.5.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.858905][ T2161] sock: sock_set_timeout: `syz.3.630' (pid 2161) tries to set negative timeout [ 66.401072][ T2189] FAULT_INJECTION: forcing a failure. [ 66.401072][ T2189] name failslab, interval 1, probability 0, space 0, times 0 [ 66.414059][ T2189] CPU: 0 PID: 2189 Comm: syz.4.641 Tainted: G W syzkaller #0 [ 66.422874][ T2189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 66.432963][ T2189] Call Trace: [ 66.436267][ T2189] [ 66.439229][ T2189] __dump_stack+0x21/0x24 [ 66.443599][ T2189] dump_stack_lvl+0x110/0x170 [ 66.448315][ T2189] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.453375][ T2189] dump_stack+0x15/0x24 [ 66.457541][ T2189] should_fail_ex+0x3bf/0x510 [ 66.462227][ T2189] __should_failslab+0xac/0xf0 [ 66.467008][ T2189] should_failslab+0x9/0x20 [ 66.471542][ T2189] slab_pre_alloc_hook+0x30/0x1d0 [ 66.476578][ T2189] ? kasan_save_alloc_info+0x1f/0x30 [ 66.481895][ T2189] kmem_cache_alloc_lru+0x49/0x280 [ 66.487052][ T2189] ? __d_alloc+0x34/0x6d0 [ 66.491413][ T2189] __d_alloc+0x34/0x6d0 [ 66.495590][ T2189] d_alloc_parallel+0xe2/0x1280 [ 66.500468][ T2189] ? __kasan_check_write+0x14/0x20 [ 66.505594][ T2189] ? mem_cgroup_from_slab_obj+0xb6/0x2a0 [ 66.511272][ T2189] ? _raw_spin_unlock+0x4c/0x70 [ 66.516152][ T2189] ? __cfi_d_alloc_parallel+0x10/0x10 [ 66.521540][ T2189] ? __kasan_check_read+0x11/0x20 [ 66.526628][ T2189] ? filldir64+0x417/0x640 [ 66.531075][ T2189] ? full_name_hash+0x9d/0xf0 [ 66.535765][ T2189] proc_fill_cache+0x16f/0x3f0 [ 66.540550][ T2189] ? __cfi_proc_pident_instantiate+0x10/0x10 [ 66.546548][ T2189] ? __cfi_proc_fill_cache+0x10/0x10 [ 66.551875][ T2189] ? __kasan_check_read+0x11/0x20 [ 66.556924][ T2189] proc_pident_readdir+0x36b/0x470 [ 66.562052][ T2189] proc_tgid_base_readdir+0x29/0x30 [ 66.567267][ T2189] iterate_dir+0x26d/0x610 [ 66.571688][ T2189] ? __cfi_proc_tgid_base_readdir+0x10/0x10 [ 66.577592][ T2189] __se_sys_getdents64+0xf2/0x250 [ 66.582634][ T2189] ? __x64_sys_getdents64+0x90/0x90 [ 66.587840][ T2189] ? xfd_validate_state+0x70/0x150 [ 66.592961][ T2189] ? __cfi_filldir64+0x10/0x10 [ 66.597742][ T2189] ? fpregs_restore_userregs+0x128/0x260 [ 66.603443][ T2189] __x64_sys_getdents64+0x7b/0x90 [ 66.608540][ T2189] x64_sys_call+0x15c/0x9a0 [ 66.613083][ T2189] do_syscall_64+0x4c/0xa0 [ 66.617532][ T2189] ? clear_bhb_loop+0x30/0x80 [ 66.622254][ T2189] ? clear_bhb_loop+0x30/0x80 [ 66.626982][ T2189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.632916][ T2189] RIP: 0033:0x7fd512d9fb19 [ 66.637345][ T2189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.657037][ T2189] RSP: 002b:00007fd513bd4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 66.665458][ T2189] RAX: ffffffffffffffda RBX: 00007fd513025fa0 RCX: 00007fd512d9fb19 [ 66.673435][ T2189] RDX: 0000000000001000 RSI: 0000200000003900 RDI: 0000000000000004 [ 66.681422][ T2189] RBP: 00007fd512e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 66.689393][ T2189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.697368][ T2189] R13: 00007fd513026038 R14: 00007fd513025fa0 R15: 00007ffd4c66f598 [ 66.705355][ T2189] [ 66.737585][ T2197] loop1: detected capacity change from 0 to 512 [ 66.769234][ T2197] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.795662][ T2197] EXT4-fs (loop1): orphan cleanup on readonly fs [ 66.814116][ T2197] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 66.826650][ T2197] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.644: attempt to clear invalid blocks 2 len 1 [ 66.846337][ T2203] loop4: detected capacity change from 0 to 512 [ 66.849984][ T2197] EXT4-fs (loop1): Remounting filesystem read-only [ 66.871624][ T2203] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 66.891869][ T2197] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 66.906983][ T2203] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 66.910952][ T2197] EXT4-fs (loop1): Remounting filesystem read-only [ 66.916904][ T2203] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 66.934899][ T2197] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.644: invalid indirect mapped block 1819239214 (level 0) [ 66.949031][ T2203] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 66.965517][ T2203] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e041e01c, mo2=0100] [ 66.973380][ T2197] EXT4-fs (loop1): Remounting filesystem read-only [ 66.980557][ T2197] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.644: invalid indirect mapped block 1819239214 (level 1) [ 66.994776][ T2203] EXT4-fs (loop4): failed to initialize system zone (-117) [ 66.997149][ T2197] EXT4-fs (loop1): Remounting filesystem read-only [ 67.003480][ T2203] EXT4-fs (loop4): mount failed [ 67.014386][ T2197] EXT4-fs (loop1): 1 truncate cleaned up [ 67.020317][ T2197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.047707][ T286] EXT4-fs (loop1): unmounting filesystem. [ 67.081235][ T28] audit: type=1400 audit(1793763721.706:723): avc: denied { getattr } for pid=2202 comm="syz.4.646" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 67.103915][ T2203] overlayfs: statfs failed on './file0' [ 67.274410][ T28] audit: type=1400 audit(1793763721.896:724): avc: denied { watch watch_reads } for pid=2217 comm="syz.1.653" path="/103/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 67.333420][ T2229] fuse: Bad value for 'fd' [ 67.413000][ T2240] Disabled LAPIC found during irq injection [ 67.492623][ T28] audit: type=1400 audit(1793763722.116:725): avc: denied { read } for pid=2243 comm="syz.5.658" path="socket:[24650]" dev="sockfs" ino=24650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 68.760328][ T2328] IPv6: NLM_F_CREATE should be specified when creating new route [ 68.776535][ T2328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.783824][ T2328] IPv6: NLM_F_CREATE should be set when creating new route [ 68.792483][ T2328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.016817][ T2330] 9pnet_virtio: no channels available for device 127.0.0.1 [ 69.604457][ T2350] loop5: detected capacity change from 0 to 40427 [ 69.634294][ T2350] F2FS-fs (loop5): invalid crc value [ 69.650760][ T2350] F2FS-fs (loop5): Found nat_bits in checkpoint [ 69.698666][ T2350] F2FS-fs (loop5): Start checkpoint disabled! [ 69.721804][ T2350] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 69.748476][ T2350] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 69.886945][ T2288] kworker/u4:129: attempt to access beyond end of device [ 69.886945][ T2288] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 69.993093][ T28] audit: type=1400 audit(1793763736.615:726): avc: denied { getopt } for pid=2378 comm="syz.5.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.026005][ T28] audit: type=1400 audit(1793763736.645:727): avc: denied { write } for pid=2380 comm="syz.5.704" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 70.049174][ T2381] binder: 2380:2381 ioctl c0306201 200000000480 returned -14 [ 70.071325][ T2381] binder: 2380:2381 ioctl c0306201 200000000700 returned -14 [ 70.079694][ T28] audit: type=1400 audit(1793763736.715:728): avc: denied { transfer } for pid=2380 comm="syz.5.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 70.184957][ T2390] Disabled LAPIC found during irq injection [ 70.474460][ T28] audit: type=1400 audit(1793763737.095:729): avc: denied { create } for pid=2397 comm="syz.5.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 70.622668][ T2403] xt_TCPMSS: Only works on TCP SYN packets [ 70.702557][ T28] audit: type=1400 audit(1793763743.334:730): avc: denied { create } for pid=2407 comm="syz.2.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.129055][ T2419] loop1: detected capacity change from 0 to 40427 [ 71.158743][ T2419] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 71.165248][ T2419] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 71.201347][ T2419] F2FS-fs (loop1): invalid crc value [ 71.212805][ T2419] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 71.254510][ T2419] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 71.261694][ T2419] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 71.329405][ T2432] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.347608][ T2435] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.367664][ T2437] tipc: Started in network mode [ 71.387416][ T2437] tipc: Node identity 4, cluster identity 4711 [ 71.393638][ T2437] tipc: Node number set to 4 [ 71.484710][ T2446] FAULT_INJECTION: forcing a failure. [ 71.484710][ T2446] name failslab, interval 1, probability 0, space 0, times 0 [ 71.497534][ T2446] CPU: 0 PID: 2446 Comm: syz.1.722 Tainted: G W syzkaller #0 [ 71.506343][ T2446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 71.516473][ T2446] Call Trace: [ 71.519790][ T2446] [ 71.522750][ T2446] __dump_stack+0x21/0x24 [ 71.527132][ T2446] dump_stack_lvl+0x110/0x170 [ 71.531844][ T2446] ? __cfi_dump_stack_lvl+0x8/0x8 [ 71.536912][ T2446] dump_stack+0x15/0x24 [ 71.541106][ T2446] should_fail_ex+0x3bf/0x510 [ 71.545826][ T2446] ? radix_tree_node_alloc+0x80/0x380 [ 71.551262][ T2446] __should_failslab+0xac/0xf0 [ 71.556092][ T2446] should_failslab+0x9/0x20 [ 71.560637][ T2446] kmem_cache_alloc+0x3b/0x320 [ 71.565444][ T2446] ? radix_tree_node_alloc+0x80/0x380 [ 71.570870][ T2446] radix_tree_node_alloc+0x80/0x380 [ 71.576115][ T2446] idr_get_free+0x2b1/0xa90 [ 71.580665][ T2446] idr_alloc_cyclic+0x2a4/0x5f0 [ 71.585546][ T2446] ? __cfi_idr_alloc_cyclic+0x10/0x10 [ 71.590954][ T2446] ? __kasan_check_write+0x14/0x20 [ 71.596100][ T2446] ? _raw_spin_lock_bh+0x94/0xf0 [ 71.601089][ T2446] ? debug_smp_processor_id+0x17/0x20 [ 71.606514][ T2446] ? __radix_tree_preload+0x366/0x3e0 [ 71.611940][ T2446] bpf_map_alloc_id+0x44/0x140 [ 71.616748][ T2446] map_create+0x8a9/0xcf0 [ 71.621117][ T2446] __sys_bpf+0x34e/0x850 [ 71.625407][ T2446] ? bpf_link_show_fdinfo+0x330/0x330 [ 71.630824][ T2446] ? fpregs_restore_userregs+0x128/0x260 [ 71.636503][ T2446] __x64_sys_bpf+0x7c/0x90 [ 71.640962][ T2446] x64_sys_call+0x488/0x9a0 [ 71.645508][ T2446] do_syscall_64+0x4c/0xa0 [ 71.649957][ T2446] ? clear_bhb_loop+0x30/0x80 [ 71.654681][ T2446] ? clear_bhb_loop+0x30/0x80 [ 71.659399][ T2446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.665352][ T2446] RIP: 0033:0x7fa50539fb19 [ 71.669807][ T2446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.689477][ T2446] RSP: 002b:00007fa5062a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.697933][ T2446] RAX: ffffffffffffffda RBX: 00007fa505625fa0 RCX: 00007fa50539fb19 [ 71.705944][ T2446] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 71.713956][ T2446] RBP: 00007fa505437b70 R08: 0000000000000000 R09: 0000000000000000 [ 71.721963][ T2446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.729975][ T2446] R13: 00007fa505626038 R14: 00007fa505625fa0 R15: 00007ffdcba597a8 [ 71.737995][ T2446] [ 71.772047][ T2458] netlink: 'syz.3.728': attribute type 11 has an invalid length. [ 71.821566][ T2463] loop1: detected capacity change from 0 to 512 [ 71.837869][ T2466] fuse: Bad value for 'fd' [ 71.856507][ T2463] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 71.915237][ T2463] bpf getsockopt: ignoring program buffer with optlen=809329267 (max_optlen=4096) [ 71.963480][ T2474] cgroup: Setting release_agent not allowed [ 72.195261][ T28] audit: type=1400 audit(1793763744.824:731): avc: denied { mounton } for pid=2486 comm="syz.1.741" path="/114/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 72.281286][ T2495] loop1: detected capacity change from 0 to 128 [ 72.313155][ T2495] FAT-fs (loop1): Unrecognized mount option "shortname=lowefloppy" or missing value [ 72.795604][ T2513] FAULT_INJECTION: forcing a failure. [ 72.795604][ T2513] name failslab, interval 1, probability 0, space 0, times 0 [ 72.822302][ T2516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.749'. [ 72.846526][ T2513] CPU: 1 PID: 2513 Comm: syz.1.748 Tainted: G W syzkaller #0 [ 72.855351][ T2513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.865437][ T2513] Call Trace: [ 72.868741][ T2513] [ 72.871698][ T2513] __dump_stack+0x21/0x24 [ 72.876072][ T2513] dump_stack_lvl+0x110/0x170 [ 72.880781][ T2513] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.885856][ T2513] dump_stack+0x15/0x24 [ 72.890058][ T2513] should_fail_ex+0x3bf/0x510 [ 72.894762][ T2513] ? __alloc_file+0x28/0x2a0 [ 72.899394][ T2513] __should_failslab+0xac/0xf0 [ 72.904203][ T2513] should_failslab+0x9/0x20 [ 72.908736][ T2513] kmem_cache_alloc+0x3b/0x320 [ 72.913537][ T2513] ? __cfi__raw_spin_lock+0x10/0x10 [ 72.918793][ T2513] __alloc_file+0x28/0x2a0 [ 72.923246][ T2513] alloc_empty_file+0x97/0x180 [ 72.928074][ T2513] alloc_file+0x59/0x600 [ 72.932350][ T2513] ? _raw_spin_unlock+0x4c/0x70 [ 72.937232][ T2513] alloc_file_pseudo+0x180/0x200 [ 72.942214][ T2513] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 72.947708][ T2513] ? _raw_spin_unlock+0x4c/0x70 [ 72.952594][ T2513] anon_inode_getfile+0xa6/0x180 [ 72.957585][ T2513] __pidfd_prepare+0x89/0x150 [ 72.962303][ T2513] pidfd_prepare+0x5b/0x80 [ 72.966748][ T2513] __se_sys_pidfd_open+0xd2/0x240 [ 72.971802][ T2513] ? __x64_sys_pidfd_open+0x70/0x70 [ 72.977033][ T2513] ? fpregs_restore_userregs+0x128/0x260 [ 72.982712][ T2513] __x64_sys_pidfd_open+0x5b/0x70 [ 72.987775][ T2513] x64_sys_call+0x426/0x9a0 [ 72.992307][ T2513] do_syscall_64+0x4c/0xa0 [ 72.996762][ T2513] ? clear_bhb_loop+0x30/0x80 [ 73.001470][ T2513] ? clear_bhb_loop+0x30/0x80 [ 73.006179][ T2513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.012105][ T2513] RIP: 0033:0x7fa50539fb19 [ 73.016599][ T2513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.036238][ T2513] RSP: 002b:00007fa5062a6018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 73.044684][ T2513] RAX: ffffffffffffffda RBX: 00007fa505625fa0 RCX: 00007fa50539fb19 [ 73.052694][ T2513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000141 [ 73.060701][ T2513] RBP: 00007fa505437b70 R08: 0000000000000000 R09: 0000000000000000 [ 73.068708][ T2513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.076714][ T2513] R13: 00007fa505626038 R14: 00007fa505625fa0 R15: 00007ffdcba597a8 [ 73.084734][ T2513] [ 73.197226][ T2530] device veth0 entered promiscuous mode [ 73.209680][ T2530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.754'. [ 73.271253][ T2532] loop5: detected capacity change from 0 to 4096 [ 73.286930][ T2532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.316844][ T2532] EXT4-fs (loop5): Test dummy encryption mode enabled [ 73.332236][ T2532] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 73.354826][ T2532] EXT4-fs (loop5): group descriptors corrupted! [ 73.367184][ T2539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.757'. [ 73.718000][ T2555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.759'. [ 73.732241][ T2555] netlink: 60 bytes leftover after parsing attributes in process `syz.2.759'. [ 74.324952][ T2571] sock: sock_set_timeout: `syz.5.765' (pid 2571) tries to set negative timeout [ 74.596504][ T2585] fuse: Bad value for 'fd' [ 74.659194][ T2591] netlink: 'syz.2.772': attribute type 11 has an invalid length. [ 75.269810][ T2631] netlink: 'syz.3.785': attribute type 4 has an invalid length. [ 75.277650][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.303205][ T2631] netlink: 'syz.3.785': attribute type 4 has an invalid length. [ 75.465956][ T2641] binder: 2640:2641 ioctl c0306201 200000000100 returned -14 [ 75.478673][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 75.484908][ T2641] binder: 2640:2641 ioctl c0306201 2000000002c0 returned -14 [ 75.500044][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 75.525195][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 75.553263][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 75.583659][ T24] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 75.611758][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.637814][ T24] usb 2-1: Product: syz [ 75.645585][ T24] usb 2-1: Manufacturer: syz [ 75.656895][ T24] usb 2-1: SerialNumber: syz [ 75.675445][ T24] usb 2-1: config 0 descriptor?? [ 75.681618][ T24] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 75.824352][ T28] audit: type=1400 audit(1793763748.454:732): avc: denied { mounton } for pid=2665 comm="syz.4.800" path="/dev" dev="rootfs" ino=2135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 75.898916][ T28] audit: type=1400 audit(1793763748.504:733): avc: denied { associate } for pid=2667 comm="syz.4.800" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 75.925674][ T24] scsi host1: usb-storage 2-1:0.0 [ 75.942085][ T24] usb 2-1: USB disconnect, device number 2 [ 76.019336][ T2676] fuse: Bad value for 'fd' [ 78.373821][ T28] audit: type=1326 audit(1793763751.004:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0eff9fb19 code=0x7ffc0000 [ 78.407951][ T28] audit: type=1326 audit(1793763751.044:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0eff9fb19 code=0x7ffc0000 [ 78.444543][ T28] audit: type=1326 audit(1793763751.074:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0eff9fb19 code=0x7ffc0000 [ 78.469656][ T28] audit: type=1326 audit(1793763751.074:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0eff9fb19 code=0x7ffc0000 [ 78.494725][ T28] audit: type=1326 audit(1793763751.074:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0eff9fb19 code=0x7ffc0000 [ 78.527105][ T28] audit: type=1326 audit(1793763751.074:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd0eff9fb19 code=0x7ffc0000 [ 78.573844][ T28] audit: type=1326 audit(1793763751.074:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0eff9fb19 code=0x7ffc0000 [ 78.618240][ T28] audit: type=1326 audit(1793763751.074:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0eff9fb19 code=0x7ffc0000 [ 79.116636][ T2749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.828'. [ 79.426245][ T2771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.641445][ T2776] loop1: detected capacity change from 0 to 1024 [ 79.673891][ T2776] EXT4-fs: Ignoring removed oldalloc option [ 79.694934][ T2776] EXT4-fs: Ignoring removed oldalloc option [ 79.703569][ T2776] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.754246][ T2776] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.888049][ T2789] overlayfs: failed to clone upperpath [ 79.898495][ T286] EXT4-fs (loop1): unmounting filesystem. [ 79.949284][ T2791] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.987569][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 80.004690][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.023033][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.045933][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.073555][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.096249][ T1448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.356525][ T295] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.505034][ T2828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.858'. [ 80.549738][ T295] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 80.568158][ T295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.579363][ T295] usb 2-1: Product: syz [ 80.586506][ T295] usb 2-1: Manufacturer: syz [ 80.591949][ T295] usb 2-1: SerialNumber: syz [ 80.602178][ T2828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.858'. [ 80.826469][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 80.826488][ T28] audit: type=1326 audit(1793763753.444:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2790 comm="syz.1.843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50539fb19 code=0x7ffc0000 [ 80.868315][ T295] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 80.877939][ T28] audit: type=1326 audit(1793763753.444:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2790 comm="syz.1.843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50539fb19 code=0x7ffc0000 [ 80.943111][ T28] audit: type=1326 audit(1793763753.494:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2790 comm="syz.1.843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50539fb19 code=0x7ffc0000 [ 80.971592][ T2837] xt_hashlimit: size too large, truncated to 1048576 [ 80.975602][ T295] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 80.997411][ T295] usb 2-1: USB disconnect, device number 3 [ 81.005191][ T28] audit: type=1326 audit(1793763753.494:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2790 comm="syz.1.843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fa50539fb19 code=0x7ffc0000 [ 81.059235][ T28] audit: type=1326 audit(1793763753.494:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2790 comm="syz.1.843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50539fb19 code=0x7ffc0000 [ 81.084325][ T28] audit: type=1326 audit(1793763753.494:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2790 comm="syz.1.843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50539fb19 code=0x7ffc0000 [ 81.115593][ T28] audit: type=1326 audit(1793763753.494:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2790 comm="syz.1.843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50539fb19 code=0x7ffc0000 [ 81.146983][ T28] audit: type=1326 audit(1793763753.494:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2790 comm="syz.1.843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50539fb19 code=0x7ffc0000 [ 81.172081][ T28] audit: type=1326 audit(1793763753.494:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2790 comm="syz.1.843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fa50539fb19 code=0x7ffc0000 [ 81.206883][ T28] audit: type=1326 audit(1793763753.494:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2790 comm="syz.1.843" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa50539fb19 code=0x7ffc0000 [ 81.287058][ T2672] udevd[2672]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.546196][ T2856] tipc: Started in network mode [ 81.558280][ T2856] tipc: Node identity 7f000001, cluster identity 4711 [ 81.576101][ T2856] tipc: New replicast peer: 172.20.20.12 [ 81.591881][ T2856] tipc: Enabled bearer , priority 10 [ 81.824983][ T2873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.875'. [ 82.097068][ T2895] Dead loop on virtual device ip6_vti0, fix it urgently! [ 82.193204][ T2909] tipc: Started in network mode [ 82.198248][ T2909] tipc: Node identity ac14140f, cluster identity 4711 [ 82.205165][ T2909] tipc: New replicast peer: 255.255.255.255 [ 82.211589][ T2909] tipc: Enabled bearer , priority 10 [ 82.235432][ T2912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 82.500372][ T2920] device erspan1 entered promiscuous mode [ 82.706935][ T309] tipc: Node number set to 2130706433 [ 82.781487][ T2933] netlink: 'syz.2.898': attribute type 8 has an invalid length. [ 82.790406][ T2933] sch_fq: defrate 0 ignored. [ 82.841318][ T2937] loop5: detected capacity change from 0 to 2048 [ 82.867253][ T2937] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 83.121765][ T403] EXT4-fs (loop5): unmounting filesystem. [ 83.165599][ T2950] netlink: 24 bytes leftover after parsing attributes in process `syz.5.903'. [ 83.201711][ T2950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.903'. [ 83.346598][ T308] tipc: Node number set to 2886997007 [ 83.502415][ T2962] netlink: 176 bytes leftover after parsing attributes in process `syz.5.905'. [ 83.843211][ T2994] device bridge_slave_0 left promiscuous mode [ 83.854417][ T2994] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.863622][ T2994] device bridge_slave_1 left promiscuous mode [ 83.876768][ T2994] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.122575][ T3002] loop1: detected capacity change from 0 to 40427 [ 84.139728][ T3002] F2FS-fs (loop1): invalid crc value [ 84.167652][ T3002] F2FS-fs (loop1): Found nat_bits in checkpoint [ 84.234368][ T3002] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.252886][ T3007] f2fs_ckpt-7:1: attempt to access beyond end of device [ 84.252886][ T3007] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 84.471957][ T3022] loop1: detected capacity change from 0 to 512 [ 84.501981][ T3022] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.547170][ T3022] EXT4-fs (loop1): 1 truncate cleaned up [ 84.556177][ T3022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.734727][ T286] EXT4-fs (loop1): unmounting filesystem. [ 85.006705][ T3060] loop1: detected capacity change from 0 to 256 [ 85.039349][ T3060] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 85.107694][ T3064] bridge0: port 3(syz_tun) entered blocking state [ 85.120793][ T3064] bridge0: port 3(syz_tun) entered disabled state [ 85.139543][ T3064] device syz_tun entered promiscuous mode [ 85.149694][ T3064] bridge0: port 3(syz_tun) entered blocking state [ 85.156225][ T3064] bridge0: port 3(syz_tun) entered forwarding state [ 85.164120][ T3066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.941'. [ 85.246426][ T3064] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 85.295460][ T3075] fuse: Bad value for 'fd' [ 85.315345][ T3077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'. [ 85.779265][ T3100] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.829630][ T3100] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.836995][ T3100] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.912277][ T3106] netlink: 'syz.5.957': attribute type 4 has an invalid length. [ 85.923317][ T3109] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.959'. [ 85.934572][ T3111] netlink: 'syz.5.957': attribute type 4 has an invalid length. [ 85.980868][ T3116] loop5: detected capacity change from 0 to 512 [ 85.990119][ T3116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.004415][ T3116] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.017915][ T3116] EXT4-fs: Invalid want_extra_isize 5 [ 86.026954][ T3114] overlayfs: failed to clone upperpath [ 86.049478][ T3114] overlayfs: failed to clone upperpath [ 86.059410][ T3118] loop1: detected capacity change from 0 to 512 [ 86.124411][ T3118] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.962: inode #1: comm syz.1.962: iget: illegal inode # [ 86.139610][ T3118] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.962: error while reading EA inode 1 err=-117 [ 86.156530][ T3118] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.962: inode #1: comm syz.1.962: iget: illegal inode # [ 86.187075][ T3118] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.962: error while reading EA inode 1 err=-117 [ 86.206996][ T3118] EXT4-fs (loop1): 1 orphan inode deleted [ 86.216108][ T3118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 86.589990][ T3135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 86.903144][ T28] kauditd_printk_skb: 6184 callbacks suppressed [ 86.903163][ T28] audit: type=1400 audit(1793763759.534:6996): avc: denied { append } for pid=3152 comm="syz.5.973" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.994836][ T286] EXT4-fs (loop1): unmounting filesystem. [ 87.032848][ T3161] binder: 3160:3161 ioctl c0306201 200000000100 returned -14 [ 87.053185][ T3161] binder: 3160:3161 ioctl c0306201 2000000002c0 returned -14 [ 87.995606][ T3217] netlink: 60 bytes leftover after parsing attributes in process `syz.4.996'. [ 88.040400][ T28] audit: type=1400 audit(1793763760.674:6997): avc: denied { nlmsg_write } for pid=3218 comm="syz.1.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 88.507101][ T3233] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 88.744951][ T3243] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 89.019374][ T28] audit: type=1400 audit(1793763761.654:6998): avc: denied { create } for pid=3256 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 89.455314][ T3267] netlink: 'syz.5.1016': attribute type 1 has an invalid length. [ 89.476606][ T3267] netlink: 9016 bytes leftover after parsing attributes in process `syz.5.1016'. [ 90.243969][ T28] audit: type=1400 audit(1793763762.874:6999): avc: denied { execute_no_trans } for pid=3260 comm="syz.3.1014" path="/230/file0" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.732207][ T3291] loop1: detected capacity change from 0 to 128 [ 90.746075][ T2672] udevd[2672]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 90.760054][ T2672] udevd[2672]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 90.934589][ T28] audit: type=1400 audit(1793763763.564:7000): avc: denied { mounton } for pid=3289 comm="syz.1.1023" path="/181/file1/file0" dev="loop1" ino=1048674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 91.473852][ T2672] udevd[2672]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 91.487418][ T2672] udevd[2672]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 91.644568][ T3316] loop1: detected capacity change from 0 to 512 [ 91.681841][ T2672] udevd[2672]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 91.741297][ T3316] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.760139][ T3316] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.812132][ T3335] loop5: detected capacity change from 0 to 512 [ 91.838128][ T286] EXT4-fs (loop1): unmounting filesystem. [ 91.845652][ T2672] udevd[2672]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 91.858740][ T3335] EXT4-fs: Ignoring removed nobh option [ 91.874494][ T2672] udevd[2672]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 91.884468][ T3335] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 91.914094][ T3335] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 91.922508][ T3335] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #13: comm syz.5.1039: inode has both inline data and extents flags [ 91.932728][ T2672] udevd[2672]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 91.936929][ T3335] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1039: couldn't read orphan inode 13 (err -117) [ 91.956830][ T3335] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 91.971590][ T3335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1039'. [ 91.998693][ T403] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 92.315201][ T3344] bridge0: port 3(syz_tun) entered disabled state [ 92.335786][ T3344] device syz_tun left promiscuous mode [ 92.348217][ T3344] bridge0: port 3(syz_tun) entered disabled state [ 92.388301][ T3344] EXT4-fs (loop5): unmounting filesystem. [ 92.398973][ T2672] udevd[2672]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 92.413588][ T2672] udevd[2672]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 92.557967][ T3350] loop1: detected capacity change from 0 to 128 [ 92.656138][ T3354] loop1: detected capacity change from 0 to 512 [ 92.684810][ T3354] ext2: Unknown parameter 'nouid322' [ 92.730623][ T28] audit: type=1400 audit(1793763765.364:7001): avc: denied { write } for pid=3353 comm="syz.1.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.409660][ T3381] tipc: Failed to remove unknown binding: 66,0,0/0:4131304104/4131304106 [ 94.436709][ T3381] tipc: Failed to remove unknown binding: 66,0,0/0:4131304104/4131304105 [ 94.446213][ T3381] tipc: Failed to remove unknown binding: 66,0,0/0:4131304104/4131304105 [ 94.472825][ T3381] tipc: Failed to remove unknown binding: 66,0,0/0:4131304104/4131304106 [ 94.481488][ T3381] tipc: Failed to remove unknown binding: 66,0,0/0:4131304104/4131304105 [ 94.849235][ T3396] FAULT_INJECTION: forcing a failure. [ 94.849235][ T3396] name failslab, interval 1, probability 0, space 0, times 0 [ 94.865355][ T3396] CPU: 1 PID: 3396 Comm: syz.1.1054 Tainted: G W syzkaller #0 [ 94.874285][ T3396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 94.884367][ T3396] Call Trace: [ 94.887667][ T3396] [ 94.890621][ T3396] __dump_stack+0x21/0x24 [ 94.894986][ T3396] dump_stack_lvl+0x110/0x170 [ 94.899699][ T3396] ? __cfi_dump_stack_lvl+0x8/0x8 [ 94.904754][ T3396] ? selinux_kernfs_init_security+0x143/0x450 [ 94.910892][ T3396] dump_stack+0x15/0x24 [ 94.915082][ T3396] should_fail_ex+0x3bf/0x510 [ 94.919811][ T3396] ? __kernfs_new_node+0xe1/0x670 [ 94.924864][ T3396] __should_failslab+0xac/0xf0 [ 94.929662][ T3396] should_failslab+0x9/0x20 [ 94.934190][ T3396] kmem_cache_alloc+0x3b/0x320 [ 94.938992][ T3396] __kernfs_new_node+0xe1/0x670 [ 94.943870][ T3396] ? clear_nonspinnable+0x60/0x60 [ 94.948934][ T3396] ? rwsem_write_trylock+0x136/0x300 [ 94.954262][ T3396] ? kernfs_new_node+0x260/0x260 [ 94.959252][ T3396] ? up_write+0x7b/0x290 [ 94.963563][ T3396] kernfs_new_node+0x150/0x260 [ 94.968367][ T3396] __kernfs_create_file+0x4e/0x270 [ 94.973516][ T3396] sysfs_add_file_mode_ns+0x1ce/0x270 [ 94.978928][ T3396] internal_create_group+0x6b7/0xeb0 [ 94.984250][ T3396] ? sysfs_create_group+0x30/0x30 [ 94.989310][ T3396] ? up_write+0x7b/0x290 [ 94.993590][ T3396] ? kernfs_activate+0x1ea/0x200 [ 94.998559][ T3396] sysfs_create_groups+0x58/0x120 [ 95.003633][ T3396] device_add_attrs+0xdb/0x830 [ 95.008445][ T3396] ? get_device_parent+0x410/0x410 [ 95.013630][ T3396] ? sysfs_do_create_link_sd+0xe9/0x110 [ 95.019222][ T3396] device_add+0x5b0/0xec0 [ 95.023573][ T3396] netdev_register_kobject+0x18e/0x330 [ 95.029049][ T3396] ? raw_notifier_call_chain+0xfa/0x110 [ 95.034613][ T3396] register_netdevice+0xec9/0x1550 [ 95.039728][ T3396] ? __kmalloc_node+0xb2/0x1e0 [ 95.044503][ T3396] ? __cfi_register_netdevice+0x10/0x10 [ 95.050072][ T3396] ? alloc_netdev_mqs+0xb6d/0xfb0 [ 95.055103][ T3396] ? memcpy+0x56/0x70 [ 95.059086][ T3396] ? alloc_netdev_mqs+0xbea/0xfb0 [ 95.064117][ T3396] register_netdev+0x3e/0x50 [ 95.068712][ T3396] loopback_net_init+0x74/0x150 [ 95.073565][ T3396] ops_init+0x2ce/0x470 [ 95.077740][ T3396] setup_net+0x4b4/0xcd0 [ 95.081994][ T3396] ? copy_net_ns+0x5c0/0x5c0 [ 95.086591][ T3396] ? __kasan_kmalloc+0x95/0xb0 [ 95.091365][ T3396] ? copy_net_ns+0x185/0x5c0 [ 95.095960][ T3396] copy_net_ns+0x355/0x5c0 [ 95.100402][ T3396] create_new_namespaces+0x3a8/0x660 [ 95.105719][ T3396] unshare_nsproxy_namespaces+0x120/0x170 [ 95.111456][ T3396] ksys_unshare+0x4d5/0x850 [ 95.115975][ T3396] ? __cfi_ksys_unshare+0x10/0x10 [ 95.121008][ T3396] ? fpregs_restore_userregs+0x128/0x260 [ 95.126648][ T3396] __x64_sys_unshare+0x38/0x40 [ 95.131428][ T3396] x64_sys_call+0x767/0x9a0 [ 95.135939][ T3396] do_syscall_64+0x4c/0xa0 [ 95.140356][ T3396] ? clear_bhb_loop+0x30/0x80 [ 95.145036][ T3396] ? clear_bhb_loop+0x30/0x80 [ 95.149720][ T3396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.155618][ T3396] RIP: 0033:0x7fa50539fb19 [ 95.160120][ T3396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.179728][ T3396] RSP: 002b:00007fa5062a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 95.188144][ T3396] RAX: ffffffffffffffda RBX: 00007fa505625fa0 RCX: 00007fa50539fb19 [ 95.196205][ T3396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 95.204176][ T3396] RBP: 00007fa505437b70 R08: 0000000000000000 R09: 0000000000000000 [ 95.212151][ T3396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.220125][ T3396] R13: 00007fa505626038 R14: 00007fa505625fa0 R15: 00007ffdcba597a8 [ 95.228152][ T3396] [ 95.446274][ T28] audit: type=1400 audit(1793763768.074:7002): avc: denied { read } for pid=3404 comm="syz.1.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.450211][ T3405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 96.802857][ T3445] loop1: detected capacity change from 0 to 16 [ 96.818229][ T3445] erofs: (device loop1): mounted with root inode @ nid 36. [ 96.829099][ T3446] udevd[3446]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 96.838712][ T28] audit: type=1400 audit(1793763769.474:7003): avc: denied { execute } for pid=3441 comm="syz.1.1066" path="/196/file2/file1" dev="loop1" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.868462][ T3445] syz.1.1066: attempt to access beyond end of device [ 96.868462][ T3445] loop1: rw=524288, sector=1342177272, nr_sectors = 256 limit=16 [ 96.883272][ T3445] syz.1.1066: attempt to access beyond end of device [ 96.883272][ T3445] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 96.897268][ T3445] syz.1.1066: attempt to access beyond end of device [ 96.897268][ T3445] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 96.914437][ T3445] syz.1.1066: attempt to access beyond end of device [ 96.914437][ T3445] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 96.929037][ T3445] syz.1.1066: attempt to access beyond end of device [ 96.929037][ T3445] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 96.943358][ T3448] syz.1.1066: attempt to access beyond end of device [ 96.943358][ T3448] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 96.957458][ T3448] syz.1.1066: attempt to access beyond end of device [ 96.957458][ T3448] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 96.971565][ T3448] syz.1.1066: attempt to access beyond end of device [ 96.971565][ T3448] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 96.989025][ T3448] syz.1.1066: attempt to access beyond end of device [ 96.989025][ T3448] loop1: rw=0, sector=1342177272, nr_sectors = 32 limit=16 [ 97.110743][ T3446] udevd[3446]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 97.122082][ T3446] udevd[3446]: inotify_add_watch(7, /dev/loop1, 10) failed: Not a directory [ 97.243360][ T3456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1069'. [ 97.251218][ T3455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'. [ 97.388782][ T28] audit: type=1400 audit(1793763770.024:7004): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 97.411458][ T3461] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1071'. [ 97.421851][ T28] audit: type=1400 audit(1793763770.024:7005): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.449531][ T28] audit: type=1400 audit(1793763770.024:7006): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=1819 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.471351][ T28] audit: type=1400 audit(1793763770.024:7007): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1819 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 97.501043][ T28] audit: type=1400 audit(1793763770.024:7008): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1819 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=1007 state=3 status=67 (errno 32: Broken pipe) [ 98.111186][ T28] audit: type=1400 audit(1793763770.744:7009): avc: denied { write } for pid=278 comm="syz-executor" path="pipe:[13089]" dev="pipefs" ino=13089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 98.144360][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 98.169591][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 98.193812][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'. [ 98.219371][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'.