last executing test programs: 23.438607431s ago: executing program 3 (id=41): syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x27e, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ecff0000000000008100000098150000b19b23ece87aeccc53b12ea490e7024d03589983595f955a88e059e00df91f322cf9fdb129b636ac2791ef4650a2df54dba810e94a77bf58bb2dcbcc9d96ec644b35fd51a8ac9c847e299a1d6b2f16ece8a65582a2b2862d5797d330f685290f3ea77387ece2cfe442f789a5f1623a20b534c253eb3889a7c17414f2c07e5919691fac4b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000085000000070000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000c80)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$exfat(&(0x7f00000008c0), &(0x7f0000000cc0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000d00)={[{}, {@utf8}, {}, {}, {@dmask={'dmask', 0x3d, 0x6}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x1, 0x1533, &(0x7f0000000dc0)="$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") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002380)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000023c0)=0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002400)='wchan\x00') preadv(r3, 0x0, 0x0, 0x5b, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000002440)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) sched_rr_get_interval(r2, &(0x7f00000024c0)) connect$unix(r4, &(0x7f0000002500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000002580), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000025c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80002, 0xa4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r6, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = open(&(0x7f0000002680)='./file0\x00', 0x80ff, 0x88) fcntl$setlease(r7, 0x400, 0x0) r8 = fsopen(&(0x7f00000026c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f0000002700)='ro\x00', 0x0, 0x0) 21.547763264s ago: executing program 3 (id=44): r0 = getpid() process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000080)=""/140, 0x8c}], 0x2, &(0x7f0000000140)=[{&(0x7f0000000300)=""/119, 0x77}], 0x1, 0x0) r1 = fsopen(&(0x7f0000000240)='bpf\x00', 0x0) capset(&(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r3, &(0x7f0000000440)=@qipcrtr, &(0x7f00000004c0)=0x80, 0x100000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0x2020) preadv(r4, &(0x7f0000002580)=[{&(0x7f00000025c0)=""/155, 0x9b}], 0x1, 0x0, 0x3) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x207b) prlimit64(0x0, 0xe, &(0x7f00000046c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004700)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000004740)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000004780)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000047c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000004800)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000004880), 0x651, 0x0) recvmmsg(r6, &(0x7f00000048c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004900), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000049c0)={0x28, r8, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 19.395397543s ago: executing program 3 (id=47): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000580)="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", 0x559, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000b00)='asymmetric\x00', &(0x7f0000000b40)=@keyring={'key_or_keyring:', r4}) add_key(&(0x7f0000000b80)='asymmetric\x00', 0x0, &(0x7f0000000bc0)="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", 0x559, r3) r5 = socket(0x10, 0x803, 0x400) sendto(r5, &(0x7f0000000080)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./proc\x00', 0x80, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r6, &(0x7f0000001140)='6', 0x1) add_key$user(&(0x7f0000001180), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) 18.389549575s ago: executing program 3 (id=52): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file3\x00', 0x4010, &(0x7f0000000140), 0x2, 0xbd8, &(0x7f0000000180)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001080)=[@textreal={0x8, 0x0}], 0x1, 0xea, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000010c0)=@vmx={0x0, 0x0, 0x2080, {0x40000, 0xbcdfeec81c24d25f, {0x2}, 0x0, 0x7fff}, {"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", "735234233c0cd224422b8d23aedfad928e57ba20ca9250269a951f56c8ecc3353c0fb77f276eec2d9c13be21f841e3efc6075467eea52ec20c077deba61fbf29f6963da2bd89425c34523306a5dea558c370c3136de9bb67acaf3239f81e7a923e1b6593e6529cf184627784e1d74e097e8355c70e72c1b62345356201c03c72e1ea8690635fb8143df626c70586e10be10ef6737cbc69f36b3fe5ef262d6c3c56fc5b8d35e265548d43fb69130b9da5250a7668f4ab509b94f4d6ecf13cfc205baabcffbe33f97398c591202b9b93d0954e0f3106f40e98031111fb7bc46ae87a5499a561318b9a1178664c77473aa188d082e0a41fc76d22a75d826a511af3bb19e0632330bf9ad37854c6d0c1fde2679145ec6f8b4f4577c825708d4183b577db44a5e05c044d98de6a3d3c535ba8e227f327cafb7eec25b0fb1d90ce37126d3da818a3f6a3b0aa359c0ae9bf4b91d3f92f75797d2f3a3deb14dc5e8d102f05c56d11ea543d863773aa964977a4ea870c4ecfa1eaff4d14dc2c1a9391ad0e23c49cf3a8f58bc5bdd49a54cf31c3bc6c30fc52db9d794ae3b261db15e124fa7db8468fdd3c4db6f9f6e6c73e800b718c9ecb8c552bb136a31c9d2ef9cd09c2f9bb0456e21b1fe9dbcf0ae662d67f3e3f737eb4562fcdbd6181d43b664688b7224e1ed1d2ebd2f678d60f406a23f3639b7473024c65e1da15a31598471d4e1570ae1de5f78d2ef90bc0d9c5cbb646bf9827b1ddb8ed4eb7192ac88164627fc229700a8b68cd13615702c66cc9415f2aea10cb298b45706d19173abd9e6580673b19024464b91a869e6a6e5938e370fb18f016b3e2963b44b9db26ab05592fbee4081d6b824ba17166ca0ec2bb0b1f9f87bfe637a43b7bd71c56c972820cade0f93e8b763e8d179b61d3fe245b77817316772b8b99d7b898cd3abf41738e5aba52a9d2badc1efaad9d16b906babb39e86b40cbb37899a3fa652b2fdfe5b912498df232b1def21c36981aa07e0547d788464e8212c9a4d1432e11310ba69e496128c504e2130e430bb48748dac2485269c618c29a8d3cdf3e355ec6366dd75f4960f702a9e4b2ba6f1e100d29a3e5c27420e71612904828c2eee1adca02c7d7a16a54276f10b161e77daa4af31cf733141139a2107f7665167268fe41303329da7e83b52c5a17e082e57f64b204d9070938bdfaa7632c273c2dfbedd8aa52d62b15f9543ae3a2300fbd0ea1f76d033c975029f58cf7d290183a8b3a9c033ec0977acc64c694a98813b6879406c6deb59008ed665671bc7a3c4c5df18ef3938aeeb1be8fce813d8762cd6945a800be202eb4821f4c370b593798b1f31794cbeb3eadd852b607b620db6e0fc178578aa39955dcc2d39bdd403113c5343410b356fa4ce3422b07556a8e17c865013c6a5ab5912517df7f8d5926be15635ebbe643d0210ca89fd7dbf2d8341c2504b67848ebe82b8358d495e85d8bbc3f06f6ada8bc2f253df92db0310492f8c810a181061614e8087d9ede6ec26852e6b13aa5ae56632f0b74fb526ddeed82a869642496c54ff28502923cf2f526fb18accf53ee77b856a3f235912633fd06c1b88ff0116e53c7d70c2832594a39858f0659ecc565085ab45d5a0a33e71b01f804de6368aaa845f5f00c0516a22bf144336b4745f0a90b31cb108b4218a7bab72971638fa3dfc7717165bd82413df3154b02307d0436d1eea297d97dbf01a773ae22b46b72fe9410f7f1838e3c3237824485056b9dd8e1520061b279a10511ea90ac91266c71776edc02c0ed37c9d609d8909724ad5f64e0f3fe793bf73d771c1e19f4ceae11edbf21387bd6580464fc0bbdc8c1d5dd1bdc624af1cc80772c3b454ece35ee0bb237079dfef45f16c4046faeeae32fdc18cb1c8ce2e9234ab12ca8fa8d0f756f25c999b1da91a33cb3b81540c46ef6bc519b69b44cac10063325bc9191c70f5ece68343b5d541415abd1c38067927cc37a37e8be8919d7f58479acfd8d01d69faa6a34d4bf21a6501a422838083de72d5e725007ed87fc228fa3480c72507eada4b294f737c86f149492627b488fa49d3402551396cd3f4fdfeb834e3ec8cd2e2b5ee57428f1b74b3c4477ede34be63f625ba4a07a9644c3c63e48223a95738a3e37c4bcdbefc5fff6a0dd233680d72a0146f0198922bba00e7e0a97b1c5d9307fb017ff57b0d4a8308fb0ea05337c8763a3c7d759574468c5dc5395616217b2a0ef783f8a23df46ab604bf8a4c881d14dde3f5c078c0b287bc641d909a07455f4f84aa9e508a838ad0fe78e3d5d318117c5a175a4b3c6bf61b86e8e89b0572240a970ff9ca937cc453a1c69394ef7349cc795e46d62e70cddbb7245877ea664cbf7d6c72d4b8229db36b351ace36406aa1e6687419d0f28f883a74dcfcd8cdab260058dfae3adf83a3b729bfbea08d45196e7261d6bc576d54d21538db6e26b74412a876de006c4dfe5456f14a3d027e388b8f0a7100db9434022da568df32c345267a9b71cc13508faaa90682a3f7fbc09484ffff3977fb61f1240b2da609f9b73abad9bca60afb65a813b14b5fbaa1e2148f17c17b17c1cdfb26555783110985b954a6595897cea0a625801fe3af904a0502bb92c28f0303c0ddd1e113af94029e0ff493e55e2325457d8feb700d935e8f7c3e4dc462055cb29dc5dec6e1e4038fe1c4bfcb72abb6c7637505f8e72ffa2f362cb1d2163088a88ea9f2759a96ca36594d8cd78ac114d6a5d28b65abf2fe883b8b1509533568430416021528ad044d04118e4d9c2e10ec46cbcc689de751c1451390be9e01ef7cd04630a49d73d85d2457b3180704898ce89e509795ca35dffb3a145d68b3d8be3d271eb427a92185c78124d6027fb6c782a183ebb519e855a5531b43f51d850061de0e6d8e33150017f186f072b11189b5acf577794a1f187427bda1a3f9a39a8bf03e1e42609049570e23463eec094cc95b03bb7946c3cfb0fe1aa5950ba332c9dee75897931c85d2b1a7e2c1e910d5f445ef53c3b3f3143692205df64613deb089ed8e7808a4de74e74b98577af05b62e10d974d2c2081057748f657d070f02d79968112e6277e27e85aa63cdc454822db320f9a687acff6c21e4f5f372522673fd9d0b4eb87a9169c0598943433e136e9e91a26a4f71b974f4dfa43b7a509d4e1c13e8ca87e61bb0fb70d82e1b3a6006525a3fe59fd3693fa7623e5d2cbadd55078c6e455379242cff236fb1c1f1dd8fb6d6f1ed99f89f9e15217659aba3ba47f7a5186eb2a3125538deac7a8d4bec0107e9bb297a19771feadde6dd79336b2810b1c3ecd5cc78f523819ff924dfa9bd62d408c7afc2f43d80f0eda62ee26f2323a467ebe7d4e6b32ca2df614a64c394c72df4458379185c1fb1fde33ea34e121ebf95d8afebdfde3483b496bee279ffbe9a8206a1d23e64662635a256626a0ba642ea0c2d575276edfd0b50876a6803d6d46116ceb2a29babae9b9309d231a03fed193ad068ac49ab77c62848c92b252bfe764137af3e76460779de0f6c1a705b0db0e3a34e8e0471ab0a60a8f087edaeaa86e76c7b48e6ce1cd4e0b8a325ff2eab04ab890467420c200f50aa9618060c614b9e2dd731d57d9557c536f2323eb10961c1316939b883efe35767700f770d81838e8ac6f54b6021bfca715a504f0c50c0f8af4c5ff2506b4e2e7547bc51328a0d664ad57f1a3af90ddd8507b11ba8a54e9adf0b3a068be117e913a70c8861def60670422917676cf4b8b25082a47ba011269684f830cc27dd0ffcd9fd1d69965336c9362e5ab94ec24ed067a17de0a2c08c0a37422199c914f53723f81b475dd6564929673420464ec684b4075678604e92de2bdebd19d7cc2da1691690967b29596b14d2ce4e8adb286633d2cafd137e008e1ffeb22fcc7e28e3c59b2b4acfdf72ebb4a50294d6291170aac82155c0d8e95f4ef9cd9131e999343bd1d82028528b5789718827021382a3d10a15a318b00418bf41f22e06d89a034960d1d05473b132ebde2d97282b5ea805be2c8af64b0a74a577f0bc3850da05d260a2a94b365fcb198b07558fc97ae8539dc4dda1d061df6e027f3ea9abcfce639767f19993e8937faa5027013ac38dcdef042d794ca8a9839761f614e681039f52898d37ca8b3f0da4e30eb204574367020ecf2c832903412b51db5847e72e7a240451e96a704efe75c311877043d7a6461bc0ae49be2a30dd94d700a8982b4849cf846ca6d10bf788fe6f17ba0bd0ef7b354f2b53d8454af2065103219a0adf329064801920d3cc8364d9656ed58b4ed0416d35dc0dc93e2a9200a027b17bd8ae9ef6b7d6a79c02e9a57c2dc5f36b66db10c53a6223f403d21cffee2b5b4ccef735141959e7b4573687f9a8e4e7071eb9bbde803717ffc1ef50d9a188d34f2ff36dd611ddb886bd8c450c9118097e2bd28f4eaef6bf64335b982764df74100159a925293ffe3910447f14956fe1c101a14970525ac452cc372d400b59a2339d44fd86b107d66f9fcff883b6df57db54ee5eda4e2f79d89f00f44f5ce07a9e00b93599dd92cdff825c654ae935cdefdf95cca9a0844a7c890500a4297183eae42ea8f9b7b4ba0054474400cbb95be9adecc56f95933c56042755264d27b6e4cd0de4cba3621c0e73a4ab551452f101ac5d1332250d245815ed1d2eed5aa5f8836a179f448c253631724bd94e66ab65832f27ff4449b5d27abf037c485a665c81f6728cef93ce37c6d221a7db16918f1e99f549921ae707b20a665378d1c8aca249048bbdf323cba4c3842602b3f97e1751492daefb3d077f8b1d76f62a4d445003f2b7a1394e48d6bb839a3be782461a16fcc2d62d58bd7a027385ec30722a22d2729de4038daf31facf556b6901a7f2c9cff3d2bc7c7ce68f8c30d490e52a3cf698aa10aefb9264a6558418d7c9cd3cc496d6693f713c01029a0ff6b80430874787663d8917c926d92d02dfecfe51dae95c22465f5e3d98b63e59e74cbdfa3c367afc3a21d24afae836072ba46a1ee7dcdc104ecd655e3ac480049dfc806b25b0aefd9d955b23cdd9ffa59e31324c3f9e2bc6e902b65513c5494c82e792f3ae52b494a51554ac5b792f1b37542a56d7b6469ddfc7d8182acc2424c9752171c2aefd7662b2edb48b17e3cbc24d5c177de3b63967cabd62f637c3244eb42fd22cb647000455973ff124074b3ce995b32060c92c1ac42e521bf3bb71c59733513e502b161bbee1b0f401fc1b6ad43790e4deb0f3d4fb034e9f81d471de3eb9319b5f9fe1d18a4239092c9c1d49dd0f10fccc4546a1cf122eeefccdba638ce8ca27e5eabf16677882808016307ed77905d1d0b8d9c101dbe4015319385c821f9c96d76f0d2a1dcffd0d9039f4383f2711e99b10c82cb3f9724aef3792e8a5436ad81c75baa31ccce8baa00e69396aeb5f00f25a4f81e712e428ce7e2816221b167be798e27ba3030a9d58c61505ddd03fe074c14927e16c58d4b09f7c42ee39f863bb82e900fcd64bbcd6213976ba77cdced5e12283870b03a1a845d0256746df829583fac58d01eed54211118bf919b20253b58c49ba2812fff4a150a5a34517aa92edb8c0e8fcf4253d9a9788562651ea3399bd3103c594ba5a5574ec3381dad9e8696ee6f8c7a81224a8d724d7bcd083e48d4edd0e91c2c426a2934896225f13ee83e680ef18e8ea719608a1e6d203e123a8c0ed6f25f284f4060360f0029bd7446d9ddd4eb10cded1a985a25d29116566ca41c9a699b58d99c10d851d6964088145217627"}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$kvm(0xffffff9c, &(0x7f0000003180), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000031c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000003200)='./debug\x00', &(0x7f0000003240)='debugfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000003280)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0) read$char_usb(r5, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000dc0), 0x7, 0x18e0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000003140)={'/dev/syzrnull', 0x0}, 0x40000, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/power/mem_sleep', 0x20001, 0x18b) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000032c0)='./file0\x00', 0x40, 0x16f) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000003380)=ANY=[@ANYBLOB="340000001e00010026bd7000fedbdf2507000000", @ANYRES32=r8, @ANYBLOB="000000000a00020014001680100001800c00090004"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000f00)={r7, 0x0, {0x0, 0x0, 0x0, 0x20000000007, 0x4010000000000ffd, 0x0, 0x0, 0x1b, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd88f394ea1ee02eb63f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43acfcffffffffffffff9a7e00", [0xfffffffffffffce7, 0x407]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000d80)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000000dc0)) syz_mount_image$ext4(0x0, &(0x7f0000000e00)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000e40)) rename(&(0x7f0000000e80)='./bus/file0\x00', &(0x7f0000000ec0)='./file0\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) 15.552529444s ago: executing program 3 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x184) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) syz_clone3(&(0x7f0000000640)={0x120082900, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000340)=0x0, {0x8}, &(0x7f0000000540)=""/43, 0x2b, &(0x7f0000000580)=""/89, &(0x7f0000000600)=[r0, r0, r0, r0, r0, r0], 0x6}, 0x58) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f00000006c0)=r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000440)={0x18}, 0xfcdc) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x1, 0x5528, &(0x7f0000007b80)="$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") 14.70699014s ago: executing program 3 (id=62): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x8e}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x91, &(0x7f00000000c0)={[{@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@nouid32}, {@nolazytime}]}, 0x9, 0x62f, &(0x7f0000000840)="$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") getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000001e80)={'nat\x00', 0x0, 0x3, 0x1000, [0xe, 0x7, 0x9, 0x8000000000000000, 0xfffffffe00000000, 0xfffffffffffffffa], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000e80)=""/4096}, &(0x7f0000001f00)=0x78) 14.70677761s ago: executing program 32 (id=62): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x8e}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x91, &(0x7f00000000c0)={[{@nodelalloc}, {}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@nouid32}, {@nolazytime}]}, 0x9, 0x62f, &(0x7f0000000840)="$eJzs3ctrXNcZAPDvzozerSWL0tZdtILS2tBasmS7mFKoTaErY9zHotBNp5ZsXI8fSCqtXBfL4GwCIZssAlllEWeR/yExBLLKP5BFNlkFBxOMNgkmmXBHd8Zjaa40kjUzlub3g/F9nNGc71rz+RyfOedOAH1rKv2jEHEkIm4lEZNNZaXICqfWn7f25M6l9JFEtfqXL5O4czdZbX6tJNuORURa8M14JB9FxGRxc71LK7evlSuVhcXseGb5+q2ZpZXbx69eL19ZuLJwY+43c2dOnzp9ZvZE009d/uNOr+9w0/75+//6z/irF/7+zltPk9l3P72QxNlG0Ol17fS1tzMVU1HNNJ8vNf6m9r9i433yTLLxxEZ/6GBA7Ej99zcQET+K8Sg2/TbH45U/9TQ4oKOqSTTaKKDfJPIf+lS9H1D/v/3akzsj2/caBjvcKwG64fG5iF828n8gIurjYKX1scEYro0NjK4lz43zJBFxYg/qT+v4+MML99NHdGgcDmht9d5QNhrdaP+z/EtquTkRw7Wj0bXCc/lfyIZxJ7Lxwz83lbUY3R7Pq39qw3FW/9CLXBPQntV7EfHj5/r/bef/P7Jtev6fu6w/J/8BAAAAAACAXXh4LiJ+3erzv0Jj/s9gi/k/YxFxdg/q3/7zv8KjPagGaOHxuYjfRev8z0wUs6Pv1+YDDCSXr1YWTkTEoYg4FgND6fFs84u+1/TTEXH8tck38+pvnv+XPtL663MBszgelTbMBpovL5f34NKh7z2+F/GTUv78n4jhYtKi/U/z+1abdUz+4sHFvLLt8x/olOrbEUdbtv/PZvEmW9+fY6bWH5ip9wo2++n/Xn8/r375D72Ttv+jW+f/UPLsfj2HFpd29vqDEXFypVTNK99t/38w+WsxmlYi/re8vLw4GzGYnN98fm5nMcN+Mtz+U/8fEbV8qOdLmv/Hfr71+F+j/9+UhyPZPb7a8cNvxz7LK9P+Q++k+T+/dfs/kTTfr28XO3MPJj7Iq/9iW+3/qVqbfiw7Y/wPttZugvY6TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjwoR8b1ICtON/UJhejpiLCJ+EKOFys2l5V9dvvnvG/NpWe37/wv1b/odXz9O6t//P9F0PLfh+GREHI6IN4ojtePpSzcr872+eAAAAAAAAAAAAAAAAAAAAHhJjK1vNq3/T31e7GloQDeUsq18h/5T6nUAQM/If+hf8h/6V37+f/W0WtPVcIAuarf9r97tcCBA1+2y/+/jAjgAkvXNaq/jALptoL2nDXc6DqAXjP8DAAAAAMCBcvhnDz9JImL1tyO1R2owK2t8MDjSq+iATirkFQx1Nw6g+8zhhf5l6g/0rzYn/wIHWNLY+7rlYv/82f9JZwICAAAAAAAAAAAAADY5eqSN9f/AgZS7/h848LZY/99qYY/bBcABYv0/9C+3+QLqnf28b/q3/h8AAAAAAAAAAAAAXgLDt6+VK5WFxaWVtnfu7uTJL77zReQV/b6bYezVzmr5pQhjP+wMRMSGour4+tv2Wrnyt+huPPWM6UZdg12sK2enR/8eAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAm3wXAAD//9ADJ8Y=") getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000001e80)={'nat\x00', 0x0, 0x3, 0x1000, [0xe, 0x7, 0x9, 0x8000000000000000, 0xfffffffe00000000, 0xfffffffffffffffa], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000e80)=""/4096}, &(0x7f0000001f00)=0x78) 5.670522342s ago: executing program 0 (id=89): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000001180)="6e8fc326ff4c", 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x1, 0x3}]}, @enum]}, {0x0, [0x2e, 0x30, 0x61, 0x5f, 0x2e]}}, &(0x7f00000000c0)=""/4089, 0x3f, 0xff9, 0xfffffffd}, 0x28) syz_read_part_table(0x4011, &(0x7f0000004040)="$eJzszC0KQkEYBdA7Lxi0mN2ExawYXYrFJlgsbsXkMgSLC3EdCjJpwDSY3jnp8v3c2eu2TVKWx8P+lMaQ5P1NmyEpSVZ1U9rTEXom63uS6X/q5z/m50sNk5723XXx6PkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEMAAAAgDB/6zzaDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBDAQAA//+lNQn4") mknod$loop(&(0x7f00000010c0)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f0000001100)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$HCIINQUIRY(r2, 0x401070ca, 0x0) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@mcast2, @mcast1}) 4.803350891s ago: executing program 0 (id=93): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x404, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r0, &(0x7f0000000e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002ec0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x39) write$P9_RREADDIR(r5, &(0x7f0000000340)={0xb, 0x29, 0x1, {0xd43}}, 0xb) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000380)=0x10001, 0x4) (async) syz_fuse_handle_req(r0, &(0x7f0000002f40)="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", 0x2000, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005000)={0x90, 0x0, 0x803, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x6, 0x638, 0xfffffffffffffff8, 0x70, 0x3, 0x79, 0xfffffffe, 0x6, 0x1, 0x4000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='./file2\x00', 0x1018ed8, &(0x7f00000001c0)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@usrjquota}, {@grpquota}, {@quota}], [{@subj_type={'subj_type', 0x3d, 'usrjquota='}}, {@dont_hash}, {@dont_measure}, {@flag='posixacl'}, {@euid_lt={'euid<', r2}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, r2}}, {@smackfshat={'smackfshat', 0x3d, '-\n'}}]}, 0x6, 0x659, &(0x7f0000000800)="$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") 4.482950113s ago: executing program 0 (id=97): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)={[{@grpid}, {@noacl}, {@nodioread_nolock}, {@dioread_lock}, {@stripe}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@orlov}, {@nouser_xattr}]}, 0x1, 0xbd0, &(0x7f00000002c0)="$eJzs3M1rHOcZAPBnRqsvW+3KpZS6F6uUYkPbtewiU5tC7eLSSw+F9lqwkFdGaP2BpOJK1mHV/gOlzTmQSyCJSfAhPvuSQK65JM41JoEQExQrARMShdkPeW3t6sNeaYT0+8GreV+9M/s8z47XMy/ecQAH1kj2I404GhGXkohi4/dpRPTVegMR1fp+K8uLE18vL04ksbr6ty+SSCLi0fLiRPO1ksb2cGMwEBHv/zGJH/1nfdzZ+YXp8UqlPNMYn5y7euPk7PzCb6aujl8pXylfO3Xmd2Onx86Mnh3rWq2PPz5/96uf//mT6jevf3v7y/+/msT5GGrMtdbRLSMxsvaetCpExHi3g+Wkp1FPa51JYZOD0h1OCgCAjtKWe7ifRDF64snNWzHe+SDX5AAAAICuWO2JWAUAAAD2ucT6HwAAAPa55vcAHi0vTjRbvt9I2F0PL0TEcL3+lUarzxSiWtsORG9EHHqUROtjrUn9sBc2EhEPPjr7VtZih55D3kh1KSJ+2u78J7X6h2tPca+vP42I0S7EH3lmvNfq/3Vf5/rPdyF+3vUDcDDdu1C/kK2//qVr9z8Rj2v/TtR6/Su0uXY9j5HBp8e7ff1r3v+trLv/e1J/T4f7v79uMcat116+2Wkuew9/f/dPbzZbFj/bvlBR2/BwKeJnhXb1J2v1Jx3qv/TUK/V1jFH87ma501ze9a++EnE82tfflGz8/xOdnJyqlEfrP9vGWHpv7I1O8fOuPzv/hzrUv9n5v7HFGP+4ePFOp7nN608/60v+Xus1/4T9a3xubuZURF/yl/W/P914oL2D5j7N18jqP/GLjT//7erPQlQb70O2FlhqbLPxv5+J+Yfbt97eqP5s7Zfn+b/8nOf/v1uM8ct3/3ei01zr+jdrWfwHSX0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNaUQMRZKW1vppWipFHI6IH8ehtHJ9du5Xk9f/ee1yNhcxHL3p5FSlPBoRxfo4ycanav0n49PPjH8bEUci4qXiYG1cmrheuZx38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw5HBFDkaSliEgjYqWYpqVS3lkBAAAAXTecdwIAAADAjrP+BwAAgP1vg/V/UtjNRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANivjhy7dz+JiOq5wVrL9DXmenPNDNhpad4JALnpyTsBIDeFvBMAcrPNNb7bBdiHkk3mBzrO9Hc9FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2ruNH791PIqJ6brDWMn2Nud62RxzbxeyAnZTmnQCQm56NJgu7lwew+3zE4eBqv8YHDo6eSDbZYyCiuU/16Zn+bcb6/NNtHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHjJUa0laioi01k/TUiniBxExHL3J5FSlPBoRP4yID4u9/dm4P++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LrZ+YXp8UqlPKOjo5NvJ9kbadQ7ef/NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHmbnF6bHK5XyzGzemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5m51fmB6vVMozW+jc2c7OLZ28awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/fBwAA//9VihLz") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x8) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000000f40)=0x20000002) sched_setscheduler(r1, 0x2, &(0x7f0000000f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002040)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000020c0), 0x651, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000002100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3d, &(0x7f0000002140), 0x8) sendmmsg$sock(r4, &(0x7f0000002180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x20000000) recvmmsg(r2, &(0x7f0000002200), 0x10106, 0x2, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000022c0), 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000024c0)={0xd4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}]}, 0xd4}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x3, 0x4) recvmmsg(r0, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4102, 0x1006}, 0x3fc}], 0x1, 0x40002000, 0x0) 4.211112021s ago: executing program 2 (id=99): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x5, 0x288, &(0x7f0000000580)="$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") mmap$IORING_OFF_SQ_RING(0xc00000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) r0 = socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000900)="b790", 0x2, 0x44000, 0xfffffffffffffffd, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x2, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r1, &(0x7f0000000340)="89ba41c97928dec7", 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42c40, 0xa0) finit_module(r2, 0x0, 0x1) 4.177061644s ago: executing program 2 (id=101): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)="04", 0x1) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000180), &(0x7f00000001c0)=0x50) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000580)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d9a", 0x380, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x4, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000002000f04b000000000000000000000000008879e66485311a0015ca837400000000000000000000001c000000000000000000"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) gettid() mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) 4.012702441s ago: executing program 1 (id=102): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1fffffff}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000340)='GPL\x00', 0x2, 0xff99, &(0x7f0000000440)=""/222, 0x0, 0x8}, 0x78) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000220001062abd7000fcff7fff000000ff"], 0x1c}], 0x1, 0x0, 0x0, 0x340088c0}, 0x1000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x101041, 0x0) pwritev2(r1, &(0x7f0000000380)=[{&(0x7f0000000540)="260c94a50124", 0x6}, {0x0}], 0x2, 0x6049, 0xfffffff7, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r2, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) 3.899008803s ago: executing program 1 (id=103): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000440)="$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") bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x0, 0x28, 0xe40, &(0x7f0000000880)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000008c0)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@empty, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x2, 0xfffffffffffffffc, 0x20000000000000, 0x1, 0x3ffffff, 0x401}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x10001, 0x2, 0x2, 0xb7, 0xc4, 0xeffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000440), 0x800001d, 0x1c) 3.882360205s ago: executing program 1 (id=104): syz_usb_connect(0x2, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303"], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000200000000000000000029d767f413ba3aaaa0b9ff961bc84510eeb1df8f21a5cda96dd85eb328e8435f15c9a58841dddc35960b87d362e5ed1841d35f6a07b1631357938dc74a8083"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000840)={r0, &(0x7f0000000880)}, 0x20) syz_usb_connect(0x5, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010002fc82a040490b4f16afbf010203012ea200"/36], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@updpolicy={0xb8, 0x19, 0x13ca78670876f9b3, 0x0, 0x25dfdc01, {{@in=@broadcast, @in=@local, 0x4e22, 0x0, 0x4e25, 0x0, 0x2, 0x20, 0x20, 0xc6}, {0x20000, 0x7, 0x0, 0x0, 0x7, 0x2, 0x7fff}, {0x3, 0x0, 0x2, 0xfffffffffffffffd}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x17a) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r3, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x3, &(0x7f00000008c0)=[{0x34, 0x0, 0x0, 0x2}, {0x3d}, {0x6}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x141241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000d40)=[{&(0x7f0000000600)="a8fac138e3434bc450f4b1f18ce09faa1f16e561117b04f9f9447305e5ed3791a735fe3ab3039c8bb195bb98b493be366658bf79bad3044c4710ea0ecf683f215602d43d", 0x44}, {&(0x7f0000000580)="b4c3127f5ddb45496f999d78db427e2ec3618986827655464ae15d4b5e7a7e319c74f5404107baa6b6674eaf515954fc7cd4fc0a381a0ea541e28bc8db9ec81203126c71922a9225e5075680812287728bff64690dad43c3", 0x58}, {&(0x7f0000000b80)="385fc681f9c13431c2e3833c0855f452c4bdbb0951e9a3d75a44fbbe8e8f947029b386fd5207e34c9bb5b401b52803d14461c3d2f952dc5bc0c4ddae9ca30afc54c040986a90ecf500afd1d7e92221791ca362a701e4b74004f8c37a95249d18301b8aa4eaed35ed80f821834c2fff24f0e88952e8bc1c942ee5a32fc6881b172f5d6ef5b69cb959c59c8f0fb548dcabb17b372607e856dd430abcb59816803b61b6f8b7b08128d61652dcbfcb29f244bf7d4454b47eafc61f1e63c65f4a74024926b44ec84598412cda", 0xca}, {&(0x7f0000000d80)="a591aa89023443907177ca9620e0b5162ccbd3846a4fea64de2b395aa1b848c1890b4711c7375872f1e40ef7939677387f07fa818d0a757867173047c8d7684535aceda56af94084147e14117a4cf0280c56500e183a0199a59053180b4db0dd8b2fdabdcb04329f555b42ec3e7d4b6e913ce2a9bf311637c6f0883be9ceb1806e37213b1b85f1580544e7fed5a6ae160f1d39dfc783fc7813408c25614aaecf8c8b7f69d9cafa3ea3643494bbb85baae2270d33489e1c8e455e720a0d3a3b4e5b7dfc1d75afc81607c10a28afe6a34210262b35f146f88c93c3466b470d520f9f6ea99a61282b00736f2451bcbb047324b47d", 0xf3}], 0x4) r7 = fsopen(&(0x7f0000000280)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x285c8e8, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e73910fe1ae655b68b8ca00513d66642c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',version=9p2000.L,\x00']) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000980), 0x200) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, &(0x7f00000009c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000a00)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000a40)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) io_uring_setup(0x5ba8, &(0x7f0000000400)={0x0, 0x89f4, 0x2, 0x0, 0xc}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000900)) 3.403124093s ago: executing program 0 (id=105): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x1, 0x6, 0x0, 0x0, 0x4, 0x540002}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000780)=0x0) io_submit(r3, 0x2, &(0x7f00000007c0)=[&(0x7f0000000800)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000840)={0x0, 0x0, 0x2000000, 0x1, 0x0, r2, 0x0}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f00000003c0)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_gettime(r6, &(0x7f0000000440)={{0x0, 0x0}}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x25) syz_emit_ethernet(0x7a, &(0x7f0000000880)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x2, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xd}]}]}}}}}}}, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r8, 0x80105873, &(0x7f0000000180)) r9 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r9, 0x16, 0x0, @void}, 0x10) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) preadv(r10, 0x0, 0x0, 0xffffffff, 0x9) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000140)='./file0\x00', 0x23c18e3, &(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r10, @ANYRESOCT], 0x0, 0x286, &(0x7f00000004c0)="$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") 3.254901708s ago: executing program 2 (id=107): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004780), 0x8002, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000047c0)) r1 = open_tree(0xffffffffffffffff, 0x0, 0x89000) waitid(0x1, 0x0, 0x0, 0x8, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_clone(0x108200, &(0x7f0000000000)="eb88331608b5b91d1304361340f07ff85df9f58c228733cd0a8e016909cb5111e3d1d331a0f17e900df2bc359d795be38a7c325631a0e759e6a0c7bd41c2a6520564e3a84687716ef2befca61b59ff0f5a1eef7233a5b3066e9f5062b54222b21ec4e180ac3076f857da485e39491c477c80a4ae17558357bd6cda6ac6002ebb77fb17e8168076eee8a3ada247b33483c41397955f63899b44d986a1769e2ea941165b610c7ea16e4653717d8135e87b0829ab4b78a3e533e61fa087f152e24b99629e92debbede047d7be127f9073239ab7d04314c26aab4ec6127fd476", 0xde, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)="d2268383785a60f300cf7f5080797e1c4788494e21e75fc9994d7ad7be95009156fef170bb567213ae55708a8b0b08d40dce353a4893ecb8c7b6e0e8164b4f3b6d79c9a44071c3680855b0289120b2ed21a47ff6ca7c1b1b3704cbae90940ba957c630ab8ee1d3ea3392a31c5978276fc18db1338b37964332e977a8b1453eac0be7cefd59204ff0924d854dfcad7896c4628a11e162f38ac9b7d4bfb192ff69895f193a2d48e7582472d4c397d8396271409099e64ba1939709823de0ab7f2e05bf993ea43832a70f8c1a1bafba8fcc0c056da0eec17d656405af") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x80, &(0x7f0000000500)=ANY=[@ANYBLOB="ff23bd", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f0000000580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f00000025c0)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r4, &(0x7f0000002680)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004740)={0x20, 0x0, 0x4, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000004900)={'sit0\x00', &(0x7f0000004a80)={'sit0\x00', 0x0, 0x0, 0x8000, 0x9, 0x0, {{0x31, 0x4, 0x0, 0x6, 0xc4, 0x65, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0x14, 0x1d, 0x1, 0x4, [{@empty, 0x1}, {@empty, 0x7}]}, @timestamp_addr={0x44, 0x3c, 0x5b, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x8}, 0x8}, {@private=0xa010102, 0x98d9}, {@multicast1, 0x6}, {@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x5f}, {@rand_addr=0x64010100, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfff}]}, @timestamp_addr={0x44, 0x24, 0xa0, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x25}, 0xc3}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1c00000}, {@rand_addr=0x64010102, 0xffffffff}, {@local, 0x200}]}, @ssrr={0x89, 0x17, 0x5c, [@dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}]}, @lsrr={0x83, 0x13, 0xcb, [@loopback, @loopback, @multicast1, @multicast2]}, @generic={0x82, 0x11, "00b2592bd775177e7e81280d688843"}]}}}}}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000004a40)=0xfffffffffffffffa, 0x8) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000004940)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @empty, 0xcab, 0x8, 0x5, 0x400, 0x3, 0x2900046, r7}) getdents64(r6, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) lseek(r8, 0x0, 0x4) close_range(r2, 0xffffffffffffffff, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = syz_create_resource$futex(&(0x7f0000000180)=0xfffffffe) futex(0x0, 0x85, 0x0, 0x0, r11, 0xa20901d9) r12 = syz_create_resource$futex(&(0x7f0000000380)=0x1) futex(r11, 0x5, 0x0, &(0x7f00000001c0)={0x77359400}, r12, 0x1) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) 3.147118089s ago: executing program 5 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000001000000080000000001"], 0x50) (async) close(0x3) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000004000000850000000200000095f26556d0b12ad268e9b3fa6f3cbb85b785c009111e1246a205771d4c9e09216271bbbd8f8aeecb2b182b683c590761c75f1db29ea9e9e682c2f6fd97a6e4b4305a25577c5bbccdea8049df7118be13d771b5f06b5b1bc28ccdafeb87d458331057a2fffd5a043897c2a7cd239e024222233fb485810260b44aec521d0160ce9eb0e341aa172176d4e09ecb8d28b5e9c2c2641bb5de20f73dcd95a7121224566e50f7d63c25570141913d4f63fae2d61d"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) 3.146039909s ago: executing program 5 (id=112): r0 = geteuid() openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_tables_targets\x00') creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe(&(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file2\x00', 0x8, &(0x7f0000000240)={[], [{@uid_eq={'uid', 0x3d, r0}}, {@permit_directio}, {@fowner_lt={'fowner<', r4}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r5}}, {@pcr={'pcr', 0x3d, 0x25}}]}, 0x4, 0x52e, &(0x7f0000000740)="$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") mkdir(&(0x7f00000005c0)='./bus\x00', 0x0) rename(&(0x7f0000000600)='./bus\x00', &(0x7f0000000700)='./file0\x00') r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x64010102, @loopback, r7}, 0xc) geteuid() (async) openat$kvm(0x0, &(0x7f0000000300), 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_tables_targets\x00') (async) creat(&(0x7f00000003c0)='./file0\x00', 0x0) (async) pipe(&(0x7f0000000400)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@local, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)) (async) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file2\x00', 0x8, &(0x7f0000000240)={[], [{@uid_eq={'uid', 0x3d, r0}}, {@permit_directio}, {@fowner_lt={'fowner<', r4}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r5}}, {@pcr={'pcr', 0x3d, 0x25}}]}, 0x4, 0x52e, &(0x7f0000000740)="$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") (async) mkdir(&(0x7f00000005c0)='./bus\x00', 0x0) (async) rename(&(0x7f0000000600)='./bus\x00', &(0x7f0000000700)='./file0\x00') (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x64010102, @loopback, r7}, 0xc) (async) 3.061150978s ago: executing program 4 (id=113): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000007980), 0x10800, 0x0) pipe2(&(0x7f00000079c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1123102, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000000280)=ANY=[], 0xffffff6a) splice(r4, 0x0, r3, 0x0, 0x40010000, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1b) write$P9_RGETLOCK(r2, &(0x7f0000007a00)=ANY=[], 0xffffff6a) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)=0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000280)={0x40000000, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000, 0x0, 0x15}, 0x23f58e5b666a3f02) bind$inet(r7, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0xb7, 0x6, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000000540), 0x800001d, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r11, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random='0,\'qQ{'}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d894eb6d07dd"}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x51) splice(r1, 0x0, r0, 0x0, 0x40010000, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000007a40)=0x1b) 3.060923778s ago: executing program 0 (id=114): setpriority(0x0, 0x0, 0x3a14b58) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (rerun: 64) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x108) (async, rerun: 32) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) (async) syz_ublk_setup_io_uring(0x15a7, &(0x7f0000000600)={0x0, 0xa52b, 0x40400, 0x3, 0x3df, 0x0, r1}, &(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f00000005c0)=0xffffffffffffffff) write$P9_RLERRORu(r3, &(0x7f0000000440)=ANY=[@ANYBLOB='S'], 0x53) (async) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2004000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='\x00\x00']) (async) setitimer(0x0, &(0x7f0000000540)={{0x0, 0xea60}, {0x0, 0xea60}}, &(0x7f0000000580)) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) futex(0xfffffffffffffffc, 0x4, 0x2, 0x0, 0x0, 0xfffffffc) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000002080)='./file0\x00', 0x2808080, &(0x7f0000000380)=ANY=[@ANYRES16=r0], 0x81, 0x2ae, &(0x7f0000001980)="$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") (async, rerun: 64) r5 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64) close(r5) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x12, &(0x7f0000000100)=0xce, 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) (async, rerun: 64) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x14, &(0x7f00000001c0)=[{&(0x7f0000000200)=' ', 0x100120}], 0x1}, 0x0) (async, rerun: 64) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000240)=0xc, 0x4) (async, rerun: 64) recvmsg(r6, &(0x7f0000000280)={0x0, 0x2, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) (rerun: 64) recvmmsg(r5, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000083, 0x0) 2.992291625s ago: executing program 2 (id=115): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x5, 0x288, &(0x7f0000000580)="$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") mmap$IORING_OFF_SQ_RING(0xc00000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) r0 = socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000900)="b790", 0x2, 0x44000, 0xfffffffffffffffd, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x2, @mcast1, 0x2}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42c40, 0xa0) finit_module(r2, 0x0, 0x1) 2.935076681s ago: executing program 5 (id=116): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000788000/0x4000)=nil, 0x4000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil) syz_clone(0x8200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x6000a400, &(0x7f0000000000)="9a0b6946fa8630e88324bdf34f2418a09ebfd94212c4c71ca536db390769dec75a6a2d4f050bae044abee1bb39eeac7d213ba03b35aff8232d1db748c3ca27a20ea4a99bcd145843f6db8e16d43244a404f838018f6868219b3941e495c1a256fe8292e2164526db56989091ae37a68ed04eb2f6f1d948903919df309a17a51ca86d577cc5954f687dfc4111ff3332a0ffe8c215086a8a9d89739a3e696d1fd60446791201244228cf47001eb97a81ed0b0e268e673b4365c973b7a27849a9614f7371f513ddcad8bb96da8b2617", 0xce, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="0695788c583dd94c6e42a41aa3caeee8bf90232ddb9b5dec6de18cfc8a735f8cfeb24cffeaa3935ea2dfee1fe9c94bbe2650c5b82476b0a467f1e59c3fee3aed8be30d839f25627a67a4af25d6f45c5e8b2b8c36070d2fc4d9bf30e6a4beb1bdedce191d0ff86abb177c4006503120b5f73b4bbc613f9cf2d4559864469f101f18281c2c8a3bf4c2d3445715347ae55661da639fa1b2d4f90b4f58f26e9708d81e24b824941a54e74c5c7ac24c51064b1359fc3bfbf183aa8417fcc5ca29c1036ee83cb33d133f60f838f8") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 2.853530459s ago: executing program 4 (id=117): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) (async) timer_create(0x0, &(0x7f0000000180)={0x0, 0xa, 0x2}, &(0x7f00000001c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000207010200000000ed00000005000004"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x91) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000380)={0x1f, @none}, 0x8) listen(r3, 0x1) shutdown(r3, 0x0) (async) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x8880c0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYBLOB="f7ebbb527a160009ff2d92da82723dc806e0da981eae491c492e3acd217a74af8a5a29d657902fa3f18134d03a0cd9c26fcd601b689944ae1690bdaa28769f31ba0db54a1f4bd9296d51", @ANYRES64=r3, @ANYBLOB="627ef88f84b37d94914f805c13f59c984dd316af0b52c61e7d4da1b204000000000000004397ebea8ef0a8be70ab1644d8c509000000a51300d0f2eccfa0b5e400000000000000800a61cf1bbbb538981059c78b5c1a0500079e09a16e4bcbd350bbb59e5a3e0a17f7db5e1451b6f3992c772154bc459c7bfa835fba56c3cfa97223ce577f7ee97be39c6277e04cc8efb6a698c089dce3870b266db219edeeb14662c9f6aa321149d50e276218ec8d8a0cfddffaa04f3c336d3d2bb598e07611eeec00"/221, @ANYRES8=r1, @ANYRES8=r1, @ANYRES8=r2], 0x1, 0x5505, &(0x7f0000001f00)="$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") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000007440)='./file0\x00', 0x8ad41, 0x1b) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000007480)=0xfffffff9) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000074c0)={0x0, 0x0, 0x7318, 0x2000000}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000007500)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000007540)=ANY=[], 0x10448) (async) syz_open_dev$MSR(0x0, 0x5, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000007580)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000075c0)={{r6}, &(0x7f0000007600), &(0x7f0000007640)}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000007680)={r6, &(0x7f00000076c0)}, 0x20) (async) unshare(0x22020600) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (async) listen(r2, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x802468, 0x0) mkdirat(r4, &(0x7f0000001d40)='./mnt\x00', 0x2) 2.822342153s ago: executing program 4 (id=118): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000a00000000000000100000026b110e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.74701684s ago: executing program 4 (id=119): prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r1, &(0x7f00000006c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x41, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000100), 0x2, 0x4da, &(0x7f0000000f40)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000014c0), 0x0, 0x8080c61) pwrite64(r4, 0x0, 0x0, 0x47ecf) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r8}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r8}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x321002, 0x0) syz_io_uring_setup(0x73ba, &(0x7f0000000000)={0x0, 0x45dd, 0x80, 0xffffffff, 0x282, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000300), &(0x7f0000000340)) ioctl$TCSETS(r3, 0x40045431, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000001000000026c00004100000000000000", @ANYRES32, @ANYBLOB="000000000000000000e3736afc38283fd7d348", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28, @ANYBLOB="31c0f21fe1b55f020af78b20c572125d21bb765207bb4533ef110f7cb4029d8e05529f817c043d2ffb3213946c1050da0e21dfcdf28a8711b809a10adf5aa68ccc4b238d6ab680791326eb52bb0329fca73bc534170f9fe311bafb4f12461bc9213448a09685a8253c35116e88ae677996e2e0a1346394ad4284df4ac087650fb74950b04aa6ffcd32668ac6b31ca4c60c25ba50f60f7fd68d155dcba0cd88b265aab7590a2f6b33e8b55617390ed7322f9eda399d669db804d62a7edc2004ddb78e2ae7314df5c7d1454b387065bdcb25e17fd27b71a91cf75949e3ee36a5a1e6c91c74bdb861f2fb161ecc"], 0x50) 2.698774655s ago: executing program 2 (id=120): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000600)="$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") r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f00000009c0)='.\x00', 0x1000401) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='.\x00', 0xa880, 0x85) lseek(r3, 0x104, 0x1) getdents64(r3, 0x0, 0x4f) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000400)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000000480), 0x800001d, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x5, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x2100000000000000) 2.697784465s ago: executing program 5 (id=121): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='01:80:c2:00:00:00', 0x11) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x810}, 0x24000001) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000e80)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x4, 0x20000000000, 0x3, 0x8, 0x6, 0x6, 0x20f, 0xf64, 0xfffffffd}) io_setup(0x6, &(0x7f0000000100)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000180)={0x180a, 0x0, 0x3, 0x1, 0x4, r2, 0x0}, 0x0]) r3 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='.\x00', 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) fchown(r3, 0xee00, 0xee01) 2.201515776s ago: executing program 0 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000005e00)={0x0, 0x0, &(0x7f0000005e40)={&(0x7f0000006100)=ANY=[@ANYBLOB="fc0000001900010027bd70000000000000000000000000000000000000000001fc02000000000000000000000000000000010000000000000a00000000000000bc8e7fc15f8250c796ff754a408894747183ef9e8811ec4421e519ff11cc8ef90f70fd41c657faee2655c55ffcd21c1290be2c57cdf55a07c8214f443af3baf4508b81f73b1f158cac0f88bd2c3d9573ab47ab5a9985dbaef922b57df0fbe1a3c20014a78189217a8175132bd5097dd484b91c5263861ede1397db72bfe1f95c06a8bca0eb2d409d7074b130ca2bfde56c49fa0bc964eb38165d2c55003c66775f79ec5243139787a389938138c11bdb9e3b184291d6dc003e27a6d234b2f06ffa8058bc5f0e18a450a0482afdcca6301b2aa50cd91c6ec3ae01cf6b270c9e7989", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000fcffffffffffffff00000000002000000000000000000000abcd0000000000002f0000000000000005000000000000000200000000000008010000000000000001000000000000004400050000000000000000000000000000000000000004d33c00000002000000fc01000000000000000000000000000106000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004048, &(0x7f0000005f80)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000005fc0)=0x3) syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000480)="$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") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000059c0)={r1, &(0x7f0000005a00), 0x0}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000005b40)=ANY=[@ANYRES16=0x0, @ANYBLOB="08002abd7000fcdbdf255100000005008a00020000000a000600ffffffffffff00000a000600080211000000000005008a00040000000a000600080211000001000005008a000300000005008a000200000005008a0004000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) rt_sigprocmask(0x2, &(0x7f0000005a00)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000005a40)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000006080)=ANY=[@ANYBLOB="12010000090024206d040ee240000000a0000904ca312300001dbb010100092100080001220100099dbe1db5b553e4d48595bd6805207b0c4b6eeaaed32052cb9963d233d805f3eff9ad75c4cf10b2"], 0x0) mkdir(0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000005d00)={0x24, &(0x7f0000005d40)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000005d80)={0x24, 0x0, 0x0, &(0x7f0000005dc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000005bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000005c00)={0x0, 0x0, &(0x7f0000005c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01012dbd7000fcdbdf2518a8000020000180140002006261c14a5d746164765f73646176655f31000008000100", @ANYRES32=r9, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4040841}, 0x4000) ioctl$VHOST_SET_VRING_NUM(r5, 0x4008af10, 0x0) setitimer(0x0, &(0x7f0000005ac0)={{0x0, 0xea60}, {0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000005b00)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) 2.106945605s ago: executing program 1 (id=123): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x410, &(0x7f0000000200)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x1060f, &(0x7f0000000ec0)="$eJzs3EuLW2UYB/AnE6c3ax2kF93oAREmYEIzvaAgMmqLFmwpXhauNJOkIW2SM0zS6di1rupHcCuIuPMzuPEbuC4uBHEhuKtUcs5J6diLtk2bceb3g/R/zpv3PHnfQzZP0kkAO9ZC8ucfpTgQeyOiHBH7I7Lj+YgoTSYt5/F8RLwUEXO3PUrF+K2BXRGxLyIOjIvnNUvFUyf/un7jmxfOvHHtu+uV+q/ffj27XQOz9kpE9Ffz4yv9PNNOnheL8cZ6N8v+8fUi8yf6l4rzNM8r7ZWswpXGZF4jy2OdfH66enk4zgu9RnOcne6FbHx1kL/gcL0zqZNdcLGxlp232itZdodplp2r+bo2irw6HOV1WkW9z7PyMRpNMh9vb7Tz/axeyrI5GBXjed201d4Y53qRxctFM+21snWsPPRt3vLe7w4ubyTr7bVhNx0kJ2r112r1k9X6Wtpqj9rHq41+6+TxZLHTG0+rjtqN/nInTTu9dq2Z9ivJYqfZrNbryeKp9kq3MUjq9dqx2tHqiUpx9Gry7rmPk14rWRzn293B5VG3N0wupGtJfkUlWaode72SvFxPPjx7Pjm/HKfPnv/o01OfnHvr7Jl3ikl3LCtZXDq6tFStH60u1Stbc/+7ivoPuP8PTt97/+V4DPsvPdrl7HTeQAAP7F79f0n/DzxGs+7/F2bc/8/9e/8/aeGitZLccf9ulh/kbm9dW6z/v1//e7/+//drO3v/D037xiPxBgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2LF+mf/hvexgIT9/uhh/phh6LiKORMThiDgUETfvohy7NtU8GBGl4vhu8+f/sYYfS5FVGF+zu3jsi4jl4nHj2cd9FwAAAGD7+v6nL76MKI8Ps3/enPWCeJKKD232TKte9pHPU9OqdjArtjGlaocmJaficETML/w2pWpHImJu/2dTqvaflDfFntuilMfck1wNAADwZGzuBKbWvQEAALDlfDXrBTAb2fe1xf/FL74L3p1H8YXg3k1nAAAAwP/Niz/f+hN9AAAAYPvK+n+//wcAAADbW/77fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/s3MvOWrDcByA/5SmQB8qqnhchVXVJQsO0SN02QO0t+mOM1RCnIPZzRFGMMLxIGCYzcQIxHyflNiO4JcEiYXtxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnNNdNZ/+W/752zRnvWmmzN0AAAAAp6yq+TRV+nX7Uz7+JR/6FhHjiBhFxDAiTvXd2/FhL7EVg7Svnfp8dXQN/yNSwvY7nbx9jIgfeXv4ev7fAQAAAG7VcjGZRbS31bT7vqvxBuRBm26pvDTk875U2iCF/S6UNnyKLGIUEVX/vlDaOCLeff6ZWy/+/3qFTrd3klx094pWdHdjdwAAwG057AkU670BAABwdX5d+gK4jDTNl5/Fz3PBnbrIE4K9gxYAAABwvY7ftt/xmC8AAADcvtT/f7b+Xx4VeP36f2H9PwAAALgi9fp/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnNOqmk+Xi8msac5600yZuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR/bnHQVCIAzCYO/6vtPg/Y8lDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/tzdwIhEARhsO/8z2kx/7CkQWMQoQoWPmaYhwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsL+3NsmDIRxHH7tJErcJiOkt/iYgYYKwQh8SEiWPAMDsBANFa3FIrACCDho6UzB8zT/n05X3AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB7Oj298RER2ecj88iHq7/D5eAr8nXTDL6vmW2O+/rnlpPtbpTyN8b/RUQUkbXwGwCA9pX3TbFYVvNO2m7aXtp+2nJaV7NXPhoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMzt38BLFFwcA/O3qrD9/nTqqEEGHuuSmZhl46SB4D4K6iW4irRW6BxUv/gVRp732L+St/oX+gaBDCR46eCjoEkSxu7P6llRWgplBPx/4znx1d9+8twvDfue9WQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiTg51wqZuXQgijg0d5y8dv24vH7d+//DTaja/3312J22w1kYQQnqzUa7cyHEvRrW9uPV2o12trfSTl9DV9PVlSxGQo/QiL0h9JYZP4LFHK/sQEAMC5k6TR+nb5Jdmdb/2vNBvC7ze99f/1KA+n1P/7zZEkNEfG9psjY782PjTiY8X1/0RmIyyMoZMeqDZWX1TXN7durqwuLNeWa8+mpian70zfvnd3stq+VlJ1xQQAAIB/U0kjrv/Ls3/P//8f5eH0+n+sGw/nHj+KjzVwsev/Ex1N+uXdEwAAgIvt8tUf349bfVmqVMLGQqOxNtHZHv492dnm0NUzG0ojrv8HZvPuFQAAAJCFg51Sz/z/UpSHPuf/x99u78VtDoQQhtP5//HF5/Wl7IZTaFncTpz3GAEAAMjXcBrx/H/SXv9fPlzyUA4h3LjWydOfAeyr/v/8+kHPTevx+v+p7IZYSOWZzvvR3s+EMDiTd48AAAA4z/5Lo1Xs7yW782s/X81VrP8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjDjh2jRA9EAQDOZjb/X4kLVmrlBUQvsGIhiI2HEBcETyCCeACxtfQOlt5hawUbC8stvIHMJKPLWqRZEmS/DybvkQyZl0mTFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFazw588xMOozsvm3Mvn9VmMrwsx+njY3I4j5oMui/4b5rbk4PfVstNaAAAAWBEh9/dFUbxXT8cxluPU/1d5TmxJH9fqPDevi31/js/3b1u5/7853bn6XmhUrxNvOrm4PN/r7Al7NgmtU9ZbZwzTzqdfAyG9kPLkdmNWpf0c3E2nR/9S+n85JQMAy7ebY5Pk76EY9/ssDICVMWxGMdf/h3G/NQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB04SsAAP//keBapg==") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="100f00002400010500000000000000000000000001000000000001"], 0xf10}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000012140)='./file1\x00', 0xa0242, 0x33) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000000)=0x1) write$P9_RREADDIR(r1, 0x0, 0x5f) 2.040927862s ago: executing program 4 (id=124): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7e}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfc}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES64=r0, @ANYBLOB="10001d800c"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f00000003c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000440)={[{0x2b, 'rlimit'}]}, 0x8) write$binfmt_script(r5, &(0x7f0000000480), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x15, 0xff, 0x7, 0x6, 0x2022, r4, 0x6b818410, '\x00', 0x0, r5, 0x3, 0x2, 0x4}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES64=r7], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r0, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x8000) 1.907664516s ago: executing program 5 (id=125): r0 = getpid() process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000080)=""/140, 0x8c}], 0x2, &(0x7f0000000140)=[{&(0x7f0000000300)=""/119, 0x77}], 0x1, 0x0) r1 = fsopen(&(0x7f0000000240)='bpf\x00', 0x0) capset(&(0x7f00000001c0), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0xc800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r3, &(0x7f0000000440)=@qipcrtr, &(0x7f00000004c0)=0x80, 0x100000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0x2020) preadv(r4, &(0x7f0000002580)=[{&(0x7f00000025c0)=""/155, 0x9b}], 0x1, 0x0, 0x3) read$FUSE(r4, &(0x7f0000002680)={0x2020}, 0x207b) prlimit64(0x0, 0xe, &(0x7f00000046c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000004700)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000004740)=0x2) sched_setscheduler(r5, 0x1, &(0x7f0000004780)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000047c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000004800)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000004880), 0x651, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) recvmmsg(r6, &(0x7f00000048c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004900), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004980)={&(0x7f00000049c0)={0x28, r8, 0x321, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c811}, 0x20040884) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 632.138215ms ago: executing program 2 (id=126): open_tree(0xffffffffffffffff, 0x0, 0x89000) waitid(0x1, 0x0, 0x0, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080), 0xfe, 0x259, &(0x7f0000000280)="$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") unshare(0x44040000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x1, &(0x7f00000008c0)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x22002, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000940)='./file0\x00', 0x10008, &(0x7f0000000980)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xff, 0x4a7, &(0x7f00000009c0)="$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") lseek(0xffffffffffffffff, 0x5, 0x3) fsopen(&(0x7f0000000e80)='sysfs\x00', 0x1) setns(0xc9, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000002000850000000200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000800)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x101e42, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000580)='\f', 0x1, 0x8000c61) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) close_range(r6, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c0) 591.894639ms ago: executing program 5 (id=127): keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4103, 0x796b432e8a2b01a6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() setns(0xc9, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000001100)='net/tcp\x00') pread64(r1, &(0x7f0000001140)=""/102369, 0x18fe1, 0x2) syz_usb_connect$uac3(0x0, 0xa7, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x5, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x31, 0x7}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x403, 0x3, 0x8, 0x7, 0x3, 0x4, 0x1000, 0xf800}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x301, 0x6, 0xd, 0x1, 0x6, 0x5, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x41, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xdd, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0) 538.954015ms ago: executing program 4 (id=128): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000c80)="$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") keyctl$join(0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000480)={@broadcast, @link_local, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x0, 0x54, 0x66, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010101, @remote}, {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0xc, 0x71, 0x0, 0x9, {[@exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0xc9f}, @mptcp=@synack={0x1e, 0x10, 0x2, 0x2, 0xa0, 0xb, 0x7c77951c}, @timestamp={0x8, 0xa, 0x3, 0x2}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000000c0)) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000006c0)='.\x00', 0x40001a2) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) r7 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000280), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x1c0, 0xb, 0x108, 0x108, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @remote, 0x0, 0x0, 'ip6erspan0\x00', '\x00', {}, {0xff}, 0x32}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @unspec=@CT1={0x20, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @empty, 0xffffff00, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000100)=0x4, 0x8112) 122.506078ms ago: executing program 1 (id=129): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xf, 0x9, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') writev(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500000000000000000000000000000000010800150095720d02040012000500160001"], 0x60}}, 0x0) 0s ago: executing program 1 (id=130): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80000001}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f0000000280)='GPL\x00', 0x4, 0x9b, &(0x7f00000002c0)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYRES16=r2], 0x50}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) sendmmsg(r2, &(0x7f00000019c0), 0x4000000000001f2, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r4, &(0x7f0000001700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3460, 0x4}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000380)="b0f4e05ce2371d21c6c9f5a649a51c14f5156429d7eaf410277112e18818a0fc00175c23ebcd392a47f9335731e44e4fd7fb863daaee03fa1154734ca22574f0ed35a478fd6861e7b99eafe533268b7b590986c601a3a265593bce48f22962fdafd34da57e604f5768b483be44b91e948356ec91fb53ab8b0c3da047359e48808efe827ba3eb30670f99dac39f04a113b6c5", 0x92}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)="988b939488b179c9ed574f7e6f1019b6727b59cad01a32a276dc2a223f0ada7f02733e2b3c84b86952812b549c360572fb0e09b6f635199353dd0901dd19c9908e2b", 0x42}, {&(0x7f0000001500)="a7a4e1fb03a84062241929e876fdf33e08b959f009433fb06b684dc4da9f27948af398e5354e2fdc2367cb25c0597403d9201fce3d1e7d3daaab1dbf88e46fd218bf7f40aea0131d81bd3d0bd6f3711d49604f277fff458f518998ac8140b73d3be3ba5dffa21fe0a14549b9694d5e0d79a26592c51582cfb3140331e697779eb27d6254421e45169d1a199b7c883414b8e0b6e2cfa38f7ab75a13ca4ebba27ae988ea95f34ea571dc3d5933aee60207f7bbe954657459675bb616299da60888280618023342966b69724d1d469c0b0e2a795a7248efdc87325f25450f5cc47774e2db4bbb", 0xe5}, {&(0x7f0000001600)="70ff40fa6be8249ca9fcbea49ab914333a87093d7200e9342ae0fd24287439794cd92c75274b4dca40aec6d5c8b79ef110fa4900823659f6ac8ec24281957208fcdd3227886f6907d53026e0ac63a11edf8d98f5cbe2555e21e728278c33555b77b2191419e5ce1205e7d6f0b4b4d126e6f7b755ec7c822b726a", 0x7a}], 0x6}, 0x20004801) prctl$PR_SET_MM(0x23, 0x4, &(0x7f000004c000/0x1000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x80000001}) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f0000000280)='GPL\x00', 0x4, 0x9b, &(0x7f00000002c0)=""/155, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYRES16=r2], 0x50}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) (async) sendmmsg(r2, &(0x7f00000019c0), 0x4000000000001f2, 0x0) (async) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) sendmsg(r4, &(0x7f0000001700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3460, 0x4}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000380)="b0f4e05ce2371d21c6c9f5a649a51c14f5156429d7eaf410277112e18818a0fc00175c23ebcd392a47f9335731e44e4fd7fb863daaee03fa1154734ca22574f0ed35a478fd6861e7b99eafe533268b7b590986c601a3a265593bce48f22962fdafd34da57e604f5768b483be44b91e948356ec91fb53ab8b0c3da047359e48808efe827ba3eb30670f99dac39f04a113b6c5", 0x92}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)}, {&(0x7f0000001480)="988b939488b179c9ed574f7e6f1019b6727b59cad01a32a276dc2a223f0ada7f02733e2b3c84b86952812b549c360572fb0e09b6f635199353dd0901dd19c9908e2b", 0x42}, {&(0x7f0000001500)="a7a4e1fb03a84062241929e876fdf33e08b959f009433fb06b684dc4da9f27948af398e5354e2fdc2367cb25c0597403d9201fce3d1e7d3daaab1dbf88e46fd218bf7f40aea0131d81bd3d0bd6f3711d49604f277fff458f518998ac8140b73d3be3ba5dffa21fe0a14549b9694d5e0d79a26592c51582cfb3140331e697779eb27d6254421e45169d1a199b7c883414b8e0b6e2cfa38f7ab75a13ca4ebba27ae988ea95f34ea571dc3d5933aee60207f7bbe954657459675bb616299da60888280618023342966b69724d1d469c0b0e2a795a7248efdc87325f25450f5cc47774e2db4bbb", 0xe5}, {&(0x7f0000001600)="70ff40fa6be8249ca9fcbea49ab914333a87093d7200e9342ae0fd24287439794cd92c75274b4dca40aec6d5c8b79ef110fa4900823659f6ac8ec24281957208fcdd3227886f6907d53026e0ac63a11edf8d98f5cbe2555e21e728278c33555b77b2191419e5ce1205e7d6f0b4b4d126e6f7b755ec7c822b726a", 0x7a}], 0x6}, 0x20004801) (async) prctl$PR_SET_MM(0x23, 0x4, &(0x7f000004c000/0x1000)=nil) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 18.368581][ T30] audit: type=1400 audit(1793680322.874:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.370256][ T277] cgroup: Unknown subsys name 'net' [ 18.391207][ T30] audit: type=1400 audit(1793680322.874:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.418476][ T30] audit: type=1400 audit(1793680322.904:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.418562][ T277] cgroup: Unknown subsys name 'devices' [ 18.540553][ T277] cgroup: Unknown subsys name 'hugetlb' [ 18.546117][ T277] cgroup: Unknown subsys name 'rlimit' [ 18.681864][ T30] audit: type=1400 audit(1793680323.194:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.705111][ T30] audit: type=1400 audit(1793680323.194:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.710275][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.729946][ T30] audit: type=1400 audit(1793680323.194:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.761435][ T30] audit: type=1400 audit(1793680323.244:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.766332][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.787168][ T30] audit: type=1400 audit(1793680323.244:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.821270][ T30] audit: type=1400 audit(1793680323.274:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.846909][ T30] audit: type=1400 audit(1793680323.274:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.585545][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.592630][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.599993][ T285] device bridge_slave_0 entered promiscuous mode [ 19.607589][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.614643][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.621934][ T285] device bridge_slave_1 entered promiscuous mode [ 19.658357][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.665408][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.672761][ T286] device bridge_slave_0 entered promiscuous mode [ 19.680453][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.687467][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.694978][ T286] device bridge_slave_1 entered promiscuous mode [ 19.761874][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.768895][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.776226][ T288] device bridge_slave_0 entered promiscuous mode [ 19.782979][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.790022][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.797365][ T288] device bridge_slave_1 entered promiscuous mode [ 19.855962][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.863132][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.870440][ T290] device bridge_slave_0 entered promiscuous mode [ 19.877105][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.884166][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.891429][ T290] device bridge_slave_1 entered promiscuous mode [ 19.958479][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.965513][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.972785][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.979800][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.987561][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.994675][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.002016][ T291] device bridge_slave_0 entered promiscuous mode [ 20.008853][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.016071][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.023296][ T291] device bridge_slave_1 entered promiscuous mode [ 20.060741][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.067759][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.075007][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.082021][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.101179][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.108196][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.115459][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.122480][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.138622][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.145653][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.152905][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.159918][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.205033][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.212440][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.219677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.227158][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.234434][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.241552][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.248629][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.255979][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.263240][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.271869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.279284][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.302146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.309883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.317921][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.324931][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.332314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.340478][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.347479][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.373457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.381344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.390093][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.397101][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.404473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.412775][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.419804][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.427075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.434958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.442837][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.450734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.458548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.466684][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.473693][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.481072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.489119][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.496158][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.513065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.521335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.529182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.536679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.553743][ T286] device veth0_vlan entered promiscuous mode [ 20.564779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.573126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.581348][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.588360][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.595817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 20.604114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.612349][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.619368][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.626646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.634949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.643026][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.650037][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.657327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 20.665589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.673679][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.680685][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.687947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.695881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.703769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.711714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.719623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.727519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.735584][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 20.743184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.750527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.764627][ T286] device veth1_macvtap entered promiscuous mode [ 20.776600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.784823][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.793827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.801430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.809464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.817278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.825358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.844229][ T290] device veth0_vlan entered promiscuous mode [ 20.857641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.865965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.874329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.882623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.890938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.899108][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.907334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.915518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.923876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.931686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.939534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.947710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.956037][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.964370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.972707][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.980558][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.988374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.995790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.003187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.010565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.019871][ T291] device veth0_vlan entered promiscuous mode [ 21.030794][ T290] device veth1_macvtap entered promiscuous mode [ 21.038965][ T288] device veth0_vlan entered promiscuous mode [ 21.048759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.057291][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 21.057899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.073032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.080581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.088292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.096317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.104243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.112092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.119467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.126758][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.134265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.145449][ T285] device veth0_vlan entered promiscuous mode [ 21.156261][ T291] device veth1_macvtap entered promiscuous mode [ 21.163008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.171232][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.179803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.194818][ T288] device veth1_macvtap entered promiscuous mode [ 21.201473][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.209753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.217993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.226286][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.234500][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.242163][ T308] netlink: 'syz.1.2': attribute type 8 has an invalid length. [ 21.264595][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.266314][ T312] loop2: detected capacity change from 0 to 128 [ 21.272882][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.287153][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.293956][ T312] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 21.296406][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.308330][ T312] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 21.316694][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.334604][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.343078][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.351410][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.393895][ T285] device veth1_macvtap entered promiscuous mode [ 21.410331][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.423081][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.431295][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.451958][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.452945][ T318] loop4: detected capacity change from 0 to 8192 [ 21.462204][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.482691][ T318] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 22.417449][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.431692][ T316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.505817][ T306] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.408468][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 23.408480][ T30] audit: type=1400 audit(1793680327.914:118): avc: denied { mount } for pid=326 comm="syz.3.4" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 23.475124][ T30] audit: type=1400 audit(1793680327.984:119): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 23.540270][ T30] audit: type=1400 audit(1793680328.044:120): avc: denied { map } for pid=330 comm="syz.2.6" path="socket:[16592]" dev="sockfs" ino=16592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 23.547652][ T331] loop2: detected capacity change from 0 to 4096 [ 23.671068][ T335] FAULT_INJECTION: forcing a failure. [ 23.671068][ T335] name failslab, interval 1, probability 0, space 0, times 1 [ 23.683716][ T335] CPU: 1 PID: 335 Comm: syz.0.1 Not tainted syzkaller #0 [ 23.690732][ T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 23.700792][ T335] Call Trace: [ 23.704073][ T335] [ 23.706999][ T335] __dump_stack+0x21/0x30 [ 23.711333][ T335] dump_stack_lvl+0x110/0x170 [ 23.716002][ T335] ? show_regs_print_info+0x20/0x20 [ 23.721191][ T335] dump_stack+0x15/0x20 [ 23.725336][ T335] should_fail+0x3ab/0x500 [ 23.729751][ T335] __should_failslab+0xa4/0xe0 [ 23.734511][ T335] should_failslab+0x9/0x20 [ 23.739012][ T335] slab_pre_alloc_hook+0x39/0xd0 [ 23.743939][ T335] ? key_alloc+0x2c1/0xef0 [ 23.748347][ T335] kmem_cache_alloc+0x44/0x260 [ 23.753104][ T335] key_alloc+0x2c1/0xef0 [ 23.757337][ T335] keyring_alloc+0x47/0xb0 [ 23.761736][ T335] lookup_user_key+0x448/0x11b0 [ 23.766565][ T335] ? lookup_user_key_possessed+0x40/0x40 [ 23.772175][ T335] ? search_process_keyrings_rcu+0x280/0x280 [ 23.778138][ T335] __se_sys_add_key+0x311/0x410 [ 23.782964][ T335] ? irqentry_exit+0x37/0x40 [ 23.787539][ T335] ? __x64_sys_add_key+0xd0/0xd0 [ 23.792456][ T335] ? __x64_sys_add_key+0x20/0xd0 [ 23.797370][ T335] __x64_sys_add_key+0xbf/0xd0 [ 23.802111][ T335] x64_sys_call+0x713/0x9a0 [ 23.806595][ T335] do_syscall_64+0x4c/0xa0 [ 23.810989][ T335] ? clear_bhb_loop+0x50/0xa0 [ 23.815646][ T335] ? clear_bhb_loop+0x50/0xa0 [ 23.820301][ T335] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 23.826174][ T335] RIP: 0033:0x7f85b5b9eb19 [ 23.830565][ T335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.850150][ T335] RSP: 002b:00007f85b45b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 23.858550][ T335] RAX: ffffffffffffffda RBX: 00007f85b5e25180 RCX: 00007f85b5b9eb19 [ 23.866502][ T335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 23.874452][ T335] RBP: 00007f85b5c36af8 R08: ffffffffffffffff R09: 0000000000000000 [ 23.882404][ T335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.890357][ T335] R13: 00007f85b5e25218 R14: 00007f85b5e25180 R15: 00007ffefc903118 [ 23.898312][ T335] [ 23.959838][ T331] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 23.959838][ T331] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 23.959838][ T331] [ 23.977887][ T331] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 23.987363][ T331] EXT4-fs (loop2): Ignoring removed orlov option [ 23.993820][ T331] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 23.993820][ T331] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 23.993820][ T331] [ 24.014211][ T331] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 24.041602][ T306] usb 2-1: config 0 interface 0 has no altsetting 0 [ 24.048243][ T306] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 24.057377][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.069707][ T306] usb 2-1: config 0 descriptor?? [ 24.130730][ T30] audit: type=1400 audit(1793680328.644:121): avc: denied { read write } for pid=338 comm="syz.4.8" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 24.134804][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.174966][ T30] audit: type=1400 audit(1793680328.684:122): avc: denied { open } for pid=338 comm="syz.4.8" path="/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 24.209571][ T341] loop1: detected capacity change from 0 to 4096 [ 24.701446][ T344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6'. [ 25.971300][ T342] sched: RT throttling activated [ 25.979296][ T30] audit: type=1400 audit(1793680328.974:123): avc: denied { connect } for pid=330 comm="syz.2.6" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.004639][ T30] audit: type=1400 audit(1793680328.974:124): avc: denied { setopt } for pid=330 comm="syz.2.6" laddr=fe80::a8aa:aaff:feaa:aaaa lport=58 faddr=ff03::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.980370][ T306] usbhid 2-1:0.0: can't add hid device: -71 [ 26.986534][ T306] usbhid: probe of 2-1:0.0 failed with error -71 [ 26.994196][ T30] audit: type=1400 audit(1793680329.214:125): avc: denied { create } for pid=330 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.014472][ T30] audit: type=1400 audit(1793680329.214:126): avc: denied { write } for pid=330 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.014654][ T306] usb 2-1: USB disconnect, device number 2 [ 27.035088][ T30] audit: type=1400 audit(1793680329.224:127): avc: denied { create } for pid=338 comm="syz.4.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.368305][ T353] FAULT_INJECTION: forcing a failure. [ 27.368305][ T353] name failslab, interval 1, probability 0, space 0, times 0 [ 27.381141][ T353] CPU: 0 PID: 353 Comm: syz.3.11 Not tainted syzkaller #0 [ 27.388254][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 27.398297][ T353] Call Trace: [ 27.401568][ T353] [ 27.404487][ T353] __dump_stack+0x21/0x30 [ 27.408815][ T353] dump_stack_lvl+0x110/0x170 [ 27.413484][ T353] ? show_regs_print_info+0x20/0x20 [ 27.418681][ T353] dump_stack+0x15/0x20 [ 27.422834][ T353] should_fail+0x3ab/0x500 [ 27.427241][ T353] __should_failslab+0xa4/0xe0 [ 27.431999][ T353] should_failslab+0x9/0x20 [ 27.436492][ T353] slab_pre_alloc_hook+0x39/0xd0 [ 27.441427][ T353] ? key_alloc+0x2c1/0xef0 [ 27.445836][ T353] kmem_cache_alloc+0x44/0x260 [ 27.450595][ T353] key_alloc+0x2c1/0xef0 [ 27.454832][ T353] keyring_alloc+0x47/0xb0 [ 27.459244][ T353] lookup_user_key+0x448/0x11b0 [ 27.464090][ T353] ? lookup_user_key_possessed+0x40/0x40 [ 27.469720][ T353] ? search_process_keyrings_rcu+0x280/0x280 [ 27.475695][ T353] __se_sys_add_key+0x311/0x410 [ 27.480543][ T353] ? __x64_sys_add_key+0xd0/0xd0 [ 27.485472][ T353] ? ksys_write+0x1fa/0x260 [ 27.489967][ T353] ? __kasan_check_write+0x14/0x20 [ 27.495075][ T353] __x64_sys_add_key+0xbf/0xd0 [ 27.499828][ T353] x64_sys_call+0x713/0x9a0 [ 27.504321][ T353] do_syscall_64+0x4c/0xa0 [ 27.508727][ T353] ? clear_bhb_loop+0x50/0xa0 [ 27.513399][ T353] ? clear_bhb_loop+0x50/0xa0 [ 27.518070][ T353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.523957][ T353] RIP: 0033:0x7f39e6adfb19 [ 27.528364][ T353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.547959][ T353] RSP: 002b:00007f39e54f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 27.556366][ T353] RAX: ffffffffffffffda RBX: 00007f39e6d66180 RCX: 00007f39e6adfb19 [ 27.564330][ T353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 27.572295][ T353] RBP: 00007f39e6b77af8 R08: ffffffffffffffff R09: 0000000000000000 [ 27.580259][ T353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.588221][ T353] R13: 00007f39e6d66218 R14: 00007f39e6d66180 R15: 00007fffac42ecc8 [ 27.596188][ T353] [ 27.821998][ T357] loop4: detected capacity change from 0 to 8192 [ 27.868978][ T357] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.945743][ T365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14'. [ 28.971852][ T26] usb 4-1: device not accepting address 2, error -71 [ 28.978871][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 28.978883][ T30] audit: type=1400 audit(1793680332.724:144): avc: denied { create } for pid=360 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.005092][ T30] audit: type=1400 audit(1793680332.724:145): avc: denied { write } for pid=360 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.010104][ T367] loop0: detected capacity change from 0 to 256 [ 29.702114][ T372] loop3: detected capacity change from 0 to 256 [ 29.708558][ T30] audit: type=1400 audit(1793680332.734:146): avc: denied { read } for pid=360 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.730875][ T30] audit: type=1400 audit(1793680332.744:147): avc: denied { create } for pid=360 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 29.798060][ T372] ======================================================= [ 29.798060][ T372] WARNING: The mand mount option has been deprecated and [ 29.798060][ T372] and is ignored by this kernel. Remove the mand [ 29.798060][ T372] option from the mount to silence this warning. [ 29.798060][ T372] ======================================================= [ 29.864092][ T374] FAULT_INJECTION: forcing a failure. [ 29.864092][ T374] name failslab, interval 1, probability 0, space 0, times 0 [ 29.876723][ T374] CPU: 1 PID: 374 Comm: syz.2.17 Not tainted syzkaller #0 [ 29.883828][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.893869][ T374] Call Trace: [ 29.897134][ T374] [ 29.900057][ T374] __dump_stack+0x21/0x30 [ 29.904384][ T374] dump_stack_lvl+0x110/0x170 [ 29.909053][ T374] ? show_regs_print_info+0x20/0x20 [ 29.911511][ T306] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.914242][ T374] ? __kasan_check_read+0x11/0x20 [ 29.921947][ T30] audit: type=1400 audit(1793680332.764:148): avc: denied { mount } for pid=360 comm="syz.2.12" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 29.926672][ T374] ? preempt_schedule_irq+0xca/0x120 [ 29.953074][ T374] ? __cond_resched+0xd0/0xd0 [ 29.957728][ T374] dump_stack+0x15/0x20 [ 29.961855][ T374] should_fail+0x3ab/0x500 [ 29.966245][ T374] __should_failslab+0xa4/0xe0 [ 29.970979][ T374] should_failslab+0x9/0x20 [ 29.975452][ T374] slab_pre_alloc_hook+0x39/0xd0 [ 29.980362][ T374] ? key_alloc+0x2c1/0xef0 [ 29.984750][ T374] kmem_cache_alloc+0x44/0x260 [ 29.989483][ T374] key_alloc+0x2c1/0xef0 [ 29.993699][ T374] keyring_alloc+0x47/0xb0 [ 29.998088][ T374] lookup_user_key+0x448/0x11b0 [ 30.002908][ T374] ? lookup_user_key_possessed+0x40/0x40 [ 30.008513][ T374] ? search_process_keyrings_rcu+0x280/0x280 [ 30.014463][ T374] __se_sys_add_key+0x311/0x410 [ 30.019287][ T374] ? __x64_sys_add_key+0xd0/0xd0 [ 30.024198][ T374] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 30.029801][ T374] __x64_sys_add_key+0xbf/0xd0 [ 30.034534][ T374] x64_sys_call+0x713/0x9a0 [ 30.039008][ T374] do_syscall_64+0x4c/0xa0 [ 30.043402][ T374] ? clear_bhb_loop+0x50/0xa0 [ 30.048056][ T374] ? clear_bhb_loop+0x50/0xa0 [ 30.052703][ T374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 30.058571][ T374] RIP: 0033:0x7f7903a5bb19 [ 30.062959][ T374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.082535][ T374] RSP: 002b:00007f7902471028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 30.090919][ T374] RAX: ffffffffffffffda RBX: 00007f7903ce2180 RCX: 00007f7903a5bb19 [ 30.098865][ T374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 30.106805][ T374] RBP: 00007f7903af3af8 R08: ffffffffffffffff R09: 0000000000000000 [ 30.114750][ T374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.122691][ T374] R13: 00007f7903ce2218 R14: 00007f7903ce2180 R15: 00007ffdf698bda8 [ 30.130639][ T374] [ 30.137371][ T367] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 30.189394][ T372] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 30.192216][ T30] audit: type=1400 audit(1793680334.674:149): avc: denied { write } for pid=366 comm="syz.0.15" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.211825][ T372] attempt to access beyond end of device [ 30.211825][ T372] loop3: rw=524288, want=34359738496, limit=256 [ 30.225164][ T30] audit: type=1400 audit(1793680334.674:150): avc: denied { add_name } for pid=366 comm="syz.0.15" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.272825][ T376] loop4: detected capacity change from 0 to 4096 [ 30.346004][ T372] attempt to access beyond end of device [ 30.346004][ T372] loop3: rw=0, want=34359738496, limit=256 [ 30.357764][ T372] attempt to access beyond end of device [ 30.357764][ T372] loop3: rw=0, want=34359738496, limit=256 [ 30.369586][ T30] audit: type=1400 audit(1793680334.674:151): avc: denied { associate } for pid=366 comm="syz.0.15" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 30.370533][ T370] attempt to access beyond end of device [ 30.370533][ T370] loop3: rw=0, want=34359738496, limit=256 [ 30.393350][ T30] audit: type=1400 audit(1793680334.674:152): avc: denied { read open } for pid=366 comm="syz.0.15" path="/2/file1/bus" dev="loop0" ino=1048642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.402281][ T306] usb 2-1: unable to get BOS descriptor or descriptor too short [ 30.428762][ T30] audit: type=1400 audit(1793680334.674:153): avc: denied { write } for pid=366 comm="syz.0.15" name="bus" dev="loop0" ino=1048642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.455644][ T372] attempt to access beyond end of device [ 30.455644][ T372] loop3: rw=0, want=34359738496, limit=256 [ 30.488251][ T376] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 30.488251][ T376] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 30.488251][ T376] [ 30.700345][ T370] attempt to access beyond end of device [ 30.700345][ T370] loop3: rw=0, want=34359738496, limit=256 [ 31.131335][ T386] attempt to access beyond end of device [ 31.131335][ T386] loop3: rw=0, want=34359738496, limit=256 [ 31.142744][ T386] attempt to access beyond end of device [ 31.142744][ T386] loop3: rw=0, want=34359738496, limit=256 [ 31.154235][ T376] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 31.173816][ T386] attempt to access beyond end of device [ 31.173816][ T386] loop3: rw=0, want=34359738496, limit=256 [ 31.189239][ T376] EXT4-fs (loop4): Ignoring removed orlov option [ 31.199342][ T376] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 31.199342][ T376] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 31.199342][ T376] [ 31.227914][ T370] attempt to access beyond end of device [ 31.227914][ T370] loop3: rw=0, want=34359738496, limit=256 [ 31.271157][ T376] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 31.339273][ T306] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 31.350117][ T306] usb 2-1: can't read configurations, error -71 [ 31.455967][ T394] IPv6: addrconf: prefix option has invalid lifetime [ 31.514314][ T395] FAULT_INJECTION: forcing a failure. [ 31.514314][ T395] name failslab, interval 1, probability 0, space 0, times 0 [ 31.526955][ T395] CPU: 1 PID: 395 Comm: syz.1.20 Not tainted syzkaller #0 [ 31.534058][ T395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.544103][ T395] Call Trace: [ 31.547372][ T395] [ 31.550290][ T395] __dump_stack+0x21/0x30 [ 31.554618][ T395] dump_stack_lvl+0x110/0x170 [ 31.559285][ T395] ? show_regs_print_info+0x20/0x20 [ 31.564474][ T395] ? sysvec_reschedule_ipi+0x78/0x80 [ 31.569754][ T395] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 31.575384][ T395] dump_stack+0x15/0x20 [ 31.579532][ T395] should_fail+0x3ab/0x500 [ 31.583943][ T395] __should_failslab+0xa4/0xe0 [ 31.588699][ T395] should_failslab+0x9/0x20 [ 31.593195][ T395] slab_pre_alloc_hook+0x39/0xd0 [ 31.598131][ T395] ? key_alloc+0x2c1/0xef0 [ 31.602546][ T395] kmem_cache_alloc+0x44/0x260 [ 31.607310][ T395] key_alloc+0x2c1/0xef0 [ 31.611556][ T395] keyring_alloc+0x47/0xb0 [ 31.615973][ T395] lookup_user_key+0x448/0x11b0 [ 31.620824][ T395] ? lookup_user_key_possessed+0x40/0x40 [ 31.626460][ T395] ? search_process_keyrings_rcu+0x280/0x280 [ 31.628264][ T392] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18'. [ 31.632444][ T395] __se_sys_add_key+0x311/0x410 [ 31.632465][ T395] ? __x64_sys_add_key+0xd0/0xd0 [ 31.650941][ T395] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 31.656576][ T395] __x64_sys_add_key+0xbf/0xd0 [ 31.658625][ T391] loop0: detected capacity change from 0 to 8192 [ 31.661332][ T395] x64_sys_call+0x713/0x9a0 [ 31.661353][ T395] do_syscall_64+0x4c/0xa0 [ 31.661370][ T395] ? clear_bhb_loop+0x50/0xa0 [ 31.681194][ T395] ? clear_bhb_loop+0x50/0xa0 [ 31.685868][ T395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 31.691757][ T395] RIP: 0033:0x7f5c42ad7b19 [ 31.696165][ T395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.715766][ T395] RSP: 002b:00007f5c410ca028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 31.724178][ T395] RAX: ffffffffffffffda RBX: 00007f5c42d5e270 RCX: 00007f5c42ad7b19 [ 31.732142][ T395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 31.740111][ T395] RBP: 00007f5c42b6faf8 R08: ffffffffffffffff R09: 0000000000000000 [ 31.748076][ T395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 31.756042][ T395] R13: 00007f5c42d5e308 R14: 00007f5c42d5e270 R15: 00007ffe0f904658 [ 31.764016][ T395] [ 31.796164][ T397] loop2: detected capacity change from 0 to 512 [ 31.843966][ T391] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.896268][ T403] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.941350][ T397] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.22: Failed to acquire dquot type 1 [ 32.019854][ T397] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.22: Failed to acquire dquot type 1 [ 32.044850][ T397] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.22: bg 0: block 248: padding at end of block bitmap is not set [ 32.072482][ T397] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 32.135671][ T397] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.22: Failed to acquire dquot type 1 [ 32.680832][ T397] EXT4-fs (loop2): 1 orphan inode deleted [ 32.701260][ T406] loop4: detected capacity change from 0 to 8192 [ 32.707704][ T397] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 32.743660][ T397] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.780281][ T406] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.933558][ T410] loop1: detected capacity change from 0 to 512 [ 32.951247][ T410] FAT-fs (loop1): bogus logical sector size 0 [ 32.957342][ T410] FAT-fs (loop1): Can't find a valid FAT filesystem [ 33.840483][ T419] FAULT_INJECTION: forcing a failure. [ 33.840483][ T419] name failslab, interval 1, probability 0, space 0, times 0 [ 33.853313][ T419] CPU: 1 PID: 419 Comm: syz.0.26 Not tainted syzkaller #0 [ 33.860427][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.870472][ T419] Call Trace: [ 33.873741][ T419] [ 33.876661][ T419] __dump_stack+0x21/0x30 [ 33.880986][ T419] dump_stack_lvl+0x110/0x170 [ 33.885655][ T419] ? show_regs_print_info+0x20/0x20 [ 33.890845][ T419] dump_stack+0x15/0x20 [ 33.894990][ T419] should_fail+0x3ab/0x500 [ 33.899398][ T419] __should_failslab+0xa4/0xe0 [ 33.904154][ T419] should_failslab+0x9/0x20 [ 33.908650][ T419] slab_pre_alloc_hook+0x39/0xd0 [ 33.913577][ T419] ? key_alloc+0x2c1/0xef0 [ 33.917984][ T419] kmem_cache_alloc+0x44/0x260 [ 33.922739][ T419] key_alloc+0x2c1/0xef0 [ 33.926984][ T419] keyring_alloc+0x47/0xb0 [ 33.931408][ T419] lookup_user_key+0x448/0x11b0 [ 33.936263][ T419] ? lookup_user_key_possessed+0x40/0x40 [ 33.941900][ T419] ? search_process_keyrings_rcu+0x280/0x280 [ 33.947886][ T419] __se_sys_add_key+0x311/0x410 [ 33.952736][ T419] ? irqentry_exit_cond_resched+0x29/0x30 [ 33.958462][ T419] ? __x64_sys_add_key+0xd0/0xd0 [ 33.963399][ T419] __x64_sys_add_key+0xbf/0xd0 [ 33.968163][ T419] x64_sys_call+0x713/0x9a0 [ 33.972667][ T419] do_syscall_64+0x4c/0xa0 [ 33.977082][ T419] ? clear_bhb_loop+0x50/0xa0 [ 33.981756][ T419] ? clear_bhb_loop+0x50/0xa0 [ 33.986441][ T419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.992334][ T419] RIP: 0033:0x7f85b5b9eb19 [ 33.996749][ T419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 34.016357][ T419] RSP: 002b:00007f85b45b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 34.024772][ T419] RAX: ffffffffffffffda RBX: 00007f85b5e25180 RCX: 00007f85b5b9eb19 [ 34.032743][ T419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 34.040717][ T419] RBP: 00007f85b5c36af8 R08: ffffffffffffffff R09: 0000000000000000 [ 34.048687][ T419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 34.056653][ T419] R13: 00007f85b5e25218 R14: 00007f85b5e25180 R15: 00007ffefc903118 [ 34.064626][ T419] [ 34.129231][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.144351][ T423] loop1: detected capacity change from 0 to 8192 [ 34.161123][ T423] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.209241][ T329] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.236498][ T425] loop4: detected capacity change from 0 to 40427 [ 34.450978][ T425] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 35.247175][ T425] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 35.290193][ T425] F2FS-fs (loop4): invalid crc value [ 35.299026][ T425] F2FS-fs (loop4): Found nat_bits in checkpoint [ 35.303565][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 35.303576][ T30] audit: type=1400 audit(1793680339.814:178): avc: denied { execute } for pid=429 comm="syz.0.31" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 35.332302][ T425] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 35.341552][ T425] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 35.376572][ T30] audit: type=1400 audit(1793680339.884:179): avc: denied { append } for pid=424 comm="syz.4.29" path="/7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events.local" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.391118][ T39] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 35.429389][ T39] usb 3-1: config 0 has no interface number 0 [ 35.435462][ T39] usb 3-1: config 0 interface 33 altsetting 152 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 35.446853][ T39] usb 3-1: config 0 interface 33 has no altsetting 0 [ 35.453569][ T39] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 35.479184][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.494621][ T30] audit: type=1400 audit(1793680340.004:180): avc: denied { read write } for pid=435 comm="syz.1.32" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.499523][ T39] usb 3-1: config 0 descriptor?? [ 35.524191][ T30] audit: type=1400 audit(1793680340.004:181): avc: denied { open } for pid=435 comm="syz.1.32" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 35.551297][ T439] fuse: root generation should be zero [ 35.602989][ T440] FAULT_INJECTION: forcing a failure. [ 35.602989][ T440] name failslab, interval 1, probability 0, space 0, times 0 [ 35.615650][ T440] CPU: 1 PID: 440 Comm: syz.0.31 Not tainted syzkaller #0 [ 35.622763][ T440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.632807][ T440] Call Trace: [ 35.636076][ T440] [ 35.639007][ T440] __dump_stack+0x21/0x30 [ 35.643341][ T440] dump_stack_lvl+0x110/0x170 [ 35.648011][ T440] ? show_regs_print_info+0x20/0x20 [ 35.653204][ T440] ? __kasan_check_read+0x11/0x20 [ 35.658227][ T440] ? preempt_schedule_irq+0xca/0x120 [ 35.663517][ T440] ? __cond_resched+0xd0/0xd0 [ 35.668195][ T440] dump_stack+0x15/0x20 [ 35.672347][ T440] should_fail+0x3ab/0x500 [ 35.676763][ T440] __should_failslab+0xa4/0xe0 [ 35.681529][ T440] should_failslab+0x9/0x20 [ 35.686030][ T440] slab_pre_alloc_hook+0x39/0xd0 [ 35.690968][ T440] ? key_alloc+0x2c1/0xef0 [ 35.695385][ T440] kmem_cache_alloc+0x44/0x260 [ 35.700148][ T440] key_alloc+0x2c1/0xef0 [ 35.704393][ T440] keyring_alloc+0x47/0xb0 [ 35.708813][ T440] lookup_user_key+0x448/0x11b0 [ 35.709307][ T329] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 35.713658][ T440] ? lookup_user_key_possessed+0x40/0x40 [ 35.713688][ T440] ? search_process_keyrings_rcu+0x280/0x280 [ 35.731376][ T329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 35.734240][ T440] __se_sys_add_key+0x311/0x410 [ 35.734262][ T440] ? __x64_sys_add_key+0xd0/0xd0 [ 35.752994][ T440] ? ksys_write+0x1fa/0x260 [ 35.757486][ T440] ? __kasan_check_write+0x14/0x20 [ 35.762577][ T440] __x64_sys_add_key+0xbf/0xd0 [ 35.767323][ T440] x64_sys_call+0x713/0x9a0 [ 35.771807][ T440] do_syscall_64+0x4c/0xa0 [ 35.776204][ T440] ? clear_bhb_loop+0x50/0xa0 [ 35.780860][ T440] ? clear_bhb_loop+0x50/0xa0 [ 35.785517][ T440] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 35.791385][ T440] RIP: 0033:0x7f85b5b9eb19 [ 35.795776][ T440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.815357][ T440] RSP: 002b:00007f85b45b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 35.823748][ T440] RAX: ffffffffffffffda RBX: 00007f85b5e25180 RCX: 00007f85b5b9eb19 [ 35.831695][ T440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 35.839649][ T440] RBP: 00007f85b5c36af8 R08: ffffffffffffffff R09: 0000000000000000 [ 35.847596][ T440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.855543][ T440] R13: 00007f85b5e25218 R14: 00007f85b5e25180 R15: 00007ffefc903118 [ 35.863495][ T440] [ 35.918660][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.962181][ T30] audit: type=1400 audit(1793680340.474:182): avc: denied { mmap_zero } for pid=424 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 36.022346][ T291] handle_bad_sector: 5252 callbacks suppressed [ 36.022359][ T291] attempt to access beyond end of device [ 36.022359][ T291] loop4: rw=2049, want=40968, limit=40427 [ 36.070393][ T30] audit: type=1400 audit(1793680340.584:183): avc: denied { name_bind } for pid=415 comm="syz.2.27" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 36.191305][ T444] loop4: detected capacity change from 0 to 4096 [ 36.196808][ T446] loop0: detected capacity change from 0 to 4096 [ 36.204516][ T329] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 36.212442][ T446] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 36.212442][ T446] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 36.212442][ T446] [ 36.231829][ T446] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 36.240740][ T444] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 36.240740][ T444] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 36.240740][ T444] [ 36.241218][ T446] EXT4-fs (loop0): Ignoring removed orlov option [ 36.259990][ T444] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 36.265414][ T446] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 36.265414][ T446] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 36.265414][ T446] [ 36.274901][ T444] EXT4-fs (loop4): Ignoring removed orlov option [ 36.298974][ T444] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 36.298974][ T444] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 36.298974][ T444] [ 36.301576][ T446] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 36.346117][ T444] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 36.373402][ T30] audit: type=1400 audit(1793680340.874:184): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 36.438891][ T39] usb 3-1: string descriptor 0 read error: -71 [ 36.478643][ T329] usb 4-1: USB disconnect, device number 4 [ 36.569380][ T39] usbhid 3-1:0.33: can't add hid device: -71 [ 36.575763][ T39] usbhid: probe of 3-1:0.33 failed with error -71 [ 36.588093][ T39] usb 3-1: USB disconnect, device number 2 [ 36.599091][ T455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.35'. [ 36.643628][ T456] netlink: 20 bytes leftover after parsing attributes in process `syz.4.33'. [ 36.819239][ T306] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 37.061220][ T458] ip_tables: iptables: counters copy to user failed while replacing table [ 37.127745][ T458] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.134968][ T458] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.142894][ T460] loop4: detected capacity change from 0 to 8192 [ 37.199271][ T306] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 37.210649][ T306] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 37.216077][ T460] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.219868][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.333190][ T458] syz.2.37 (458) used greatest stack depth: 22024 bytes left [ 37.345404][ T470] loop3: detected capacity change from 0 to 128 [ 37.389806][ T470] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 38.272344][ T478] FAULT_INJECTION: forcing a failure. [ 38.272344][ T478] name failslab, interval 1, probability 0, space 0, times 0 [ 38.284983][ T478] CPU: 0 PID: 478 Comm: syz.0.39 Not tainted syzkaller #0 [ 38.292090][ T478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 38.302142][ T478] Call Trace: [ 38.305411][ T478] [ 38.308338][ T478] __dump_stack+0x21/0x30 [ 38.312665][ T478] dump_stack_lvl+0x110/0x170 [ 38.317334][ T478] ? show_regs_print_info+0x20/0x20 [ 38.322526][ T478] dump_stack+0x15/0x20 [ 38.326672][ T478] should_fail+0x3ab/0x500 [ 38.331082][ T478] __should_failslab+0xa4/0xe0 [ 38.335844][ T478] should_failslab+0x9/0x20 [ 38.340339][ T478] slab_pre_alloc_hook+0x39/0xd0 [ 38.345276][ T478] ? key_alloc+0x2c1/0xef0 [ 38.349686][ T478] kmem_cache_alloc+0x44/0x260 [ 38.354447][ T478] key_alloc+0x2c1/0xef0 [ 38.358686][ T478] keyring_alloc+0x47/0xb0 [ 38.363101][ T478] lookup_user_key+0x448/0x11b0 [ 38.367953][ T478] ? lookup_user_key_possessed+0x40/0x40 [ 38.373601][ T478] ? search_process_keyrings_rcu+0x280/0x280 [ 38.379587][ T478] __se_sys_add_key+0x311/0x410 [ 38.384440][ T478] ? __x64_sys_add_key+0xd0/0xd0 [ 38.389380][ T478] ? ksys_write+0x1fa/0x260 [ 38.393884][ T478] ? __kasan_check_write+0x14/0x20 [ 38.398998][ T478] __x64_sys_add_key+0xbf/0xd0 [ 38.403752][ T478] x64_sys_call+0x713/0x9a0 [ 38.408247][ T478] do_syscall_64+0x4c/0xa0 [ 38.412653][ T478] ? clear_bhb_loop+0x50/0xa0 [ 38.417322][ T478] ? clear_bhb_loop+0x50/0xa0 [ 38.421988][ T478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.427874][ T478] RIP: 0033:0x7f85b5b9eb19 [ 38.432279][ T478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.451878][ T478] RSP: 002b:00007f85b45b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 38.460284][ T478] RAX: ffffffffffffffda RBX: 00007f85b5e25180 RCX: 00007f85b5b9eb19 [ 38.468247][ T478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 38.476208][ T478] RBP: 00007f85b5c36af8 R08: ffffffffffffffff R09: 0000000000000000 [ 38.484169][ T478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.492130][ T478] R13: 00007f85b5e25218 R14: 00007f85b5e25180 R15: 00007ffefc903118 [ 38.500094][ T478] [ 38.547626][ T470] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 38.558790][ T470] ext2 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.708245][ T306] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 38.740774][ T481] loop0: detected capacity change from 0 to 8192 [ 38.779244][ T295] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.840497][ T485] Zero length message leads to an empty skb [ 38.863450][ T30] audit: type=1400 audit(1793680343.364:185): avc: denied { ioctl } for pid=469 comm="syz.3.41" path="/4/file1/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.970570][ T487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 39.172126][ T481] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.226757][ T306] usb 2-1: USB disconnect, device number 5 [ 39.238064][ T30] audit: type=1400 audit(1793680343.364:186): avc: denied { lock } for pid=469 comm="syz.3.41" path="/4/file1/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.267825][ T487] FAULT_INJECTION: forcing a failure. [ 40.267825][ T487] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 40.281065][ T487] CPU: 0 PID: 487 Comm: syz.4.42 Not tainted syzkaller #0 [ 40.288164][ T487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 40.298203][ T487] Call Trace: [ 40.301466][ T487] [ 40.304384][ T487] __dump_stack+0x21/0x30 [ 40.308710][ T487] dump_stack_lvl+0x110/0x170 [ 40.313376][ T487] ? show_regs_print_info+0x20/0x20 [ 40.318564][ T487] ? release_pages+0x1264/0x12c0 [ 40.323496][ T487] ? __count_memcg_events+0xad/0x120 [ 40.328773][ T487] dump_stack+0x15/0x20 [ 40.332920][ T487] should_fail+0x3ab/0x500 [ 40.337329][ T487] should_fail_alloc_page+0x55/0x80 [ 40.342526][ T487] prepare_alloc_pages+0x13f/0x590 [ 40.347628][ T487] ? __alloc_pages_bulk+0xab0/0xab0 [ 40.352818][ T487] __alloc_pages+0x11d/0x460 [ 40.357398][ T487] ? unlock_page_memcg+0x114/0x130 [ 40.362497][ T487] ? zone_watermark_fast+0x250/0x250 [ 40.367772][ T487] ? page_remove_rmap+0xc6d/0xf40 [ 40.372785][ T487] ? page_add_file_rmap+0x700/0x700 [ 40.377969][ T487] ? mark_page_accessed+0x3a8/0x8e0 [ 40.383158][ T487] __get_free_pages+0x10/0x30 [ 40.387829][ T487] __tlb_remove_page_size+0x18a/0x310 [ 40.393191][ T487] unmap_page_range+0x1059/0x1e00 [ 40.398210][ T487] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 40.404526][ T487] ? lru_cache_add+0x7e0/0x7e0 [ 40.409279][ T487] unmap_vmas+0x26d/0x380 [ 40.413597][ T487] ? unmap_page_range+0x1e00/0x1e00 [ 40.418786][ T487] ? __kasan_check_write+0x14/0x20 [ 40.423890][ T487] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 40.429343][ T487] exit_mmap+0x412/0x8b0 [ 40.433574][ T487] ? vm_brk+0x30/0x30 [ 40.437545][ T487] ? mutex_unlock+0x8f/0x230 [ 40.442126][ T487] ? uprobe_clear_state+0x2c6/0x320 [ 40.447314][ T487] __mmput+0x92/0x300 [ 40.451291][ T487] mmput+0x50/0x150 [ 40.455095][ T487] do_exit+0xacc/0x29a0 [ 40.459243][ T487] ? put_task_struct+0x90/0x90 [ 40.463995][ T487] ? __kasan_check_read+0x11/0x20 [ 40.469006][ T487] ? cpupri_find+0xfc/0x280 [ 40.473499][ T487] ? __kasan_check_write+0x14/0x20 [ 40.478598][ T487] ? _raw_spin_lock_irq+0x95/0xf0 [ 40.483612][ T487] do_group_exit+0x149/0x310 [ 40.488193][ T487] ? __kasan_check_write+0x14/0x20 [ 40.493292][ T487] ? recalc_sigpending+0x1ac/0x230 [ 40.498401][ T487] get_signal+0x64f/0x1430 [ 40.502815][ T487] arch_do_signal_or_restart+0xe2/0x1100 [ 40.508435][ T487] ? update_rt_migration+0x3b0/0x3b0 [ 40.513713][ T487] ? _raw_spin_unlock+0x4d/0x70 [ 40.518554][ T487] ? update_rt_migration+0x3b0/0x3b0 [ 40.523830][ T487] ? finish_task_switch+0x16b/0x790 [ 40.529019][ T487] ? switch_mm_irqs_off+0x2fb/0x960 [ 40.534205][ T487] ? get_sigframe_size+0x10/0x10 [ 40.539129][ T487] ? __se_sys_futex+0x135/0x330 [ 40.543973][ T487] exit_to_user_mode_loop+0xa7/0xe0 [ 40.549160][ T487] exit_to_user_mode_prepare+0x87/0xd0 [ 40.554614][ T487] syscall_exit_to_user_mode+0x1a/0x30 [ 40.560065][ T487] do_syscall_64+0x58/0xa0 [ 40.564474][ T487] ? clear_bhb_loop+0x50/0xa0 [ 40.569141][ T487] ? clear_bhb_loop+0x50/0xa0 [ 40.573805][ T487] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.579687][ T487] RIP: 0033:0x7fab4dc12b19 [ 40.584088][ T487] Code: Unable to access opcode bytes at RIP 0x7fab4dc12aef. [ 40.591436][ T487] RSP: 002b:00007fab4c6280e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 40.599839][ T487] RAX: fffffffffffffe00 RBX: 00007fab4de99188 RCX: 00007fab4dc12b19 [ 40.607797][ T487] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fab4de99188 [ 40.615759][ T487] RBP: 00007fab4de99180 R08: 0000000000000000 R09: 0000000000000000 [ 40.623715][ T487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.631675][ T487] R13: 00007fab4de99218 R14: 00007fff55bd1850 R15: 00007fff55bd1938 [ 40.639643][ T487] [ 40.737520][ T495] loop2: detected capacity change from 0 to 1024 [ 41.109913][ T499] FAULT_INJECTION: forcing a failure. [ 41.109913][ T499] name failslab, interval 1, probability 0, space 0, times 0 [ 41.122546][ T499] CPU: 0 PID: 499 Comm: syz.4.45 Not tainted syzkaller #0 [ 41.129651][ T499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.139698][ T499] Call Trace: [ 41.142969][ T499] [ 41.145893][ T499] __dump_stack+0x21/0x30 [ 41.150222][ T499] dump_stack_lvl+0x110/0x170 [ 41.154891][ T499] ? show_regs_print_info+0x20/0x20 [ 41.160082][ T499] dump_stack+0x15/0x20 [ 41.164228][ T499] should_fail+0x3ab/0x500 [ 41.168637][ T499] __should_failslab+0xa4/0xe0 [ 41.173394][ T499] should_failslab+0x9/0x20 [ 41.177891][ T499] slab_pre_alloc_hook+0x39/0xd0 [ 41.182820][ T499] ? key_alloc+0x2c1/0xef0 [ 41.187233][ T499] kmem_cache_alloc+0x44/0x260 [ 41.191989][ T499] key_alloc+0x2c1/0xef0 [ 41.196228][ T499] keyring_alloc+0x47/0xb0 [ 41.200640][ T499] lookup_user_key+0x448/0x11b0 [ 41.205486][ T499] ? lookup_user_key_possessed+0x40/0x40 [ 41.211110][ T499] ? search_process_keyrings_rcu+0x280/0x280 [ 41.217085][ T499] __se_sys_add_key+0x311/0x410 [ 41.221922][ T499] ? __x64_sys_add_key+0xd0/0xd0 [ 41.226847][ T499] ? ksys_write+0x1fa/0x260 [ 41.231339][ T499] ? __kasan_check_write+0x14/0x20 [ 41.236443][ T499] __x64_sys_add_key+0xbf/0xd0 [ 41.241195][ T499] x64_sys_call+0x713/0x9a0 [ 41.245689][ T499] do_syscall_64+0x4c/0xa0 [ 41.250098][ T499] ? clear_bhb_loop+0x50/0xa0 [ 41.254771][ T499] ? clear_bhb_loop+0x50/0xa0 [ 41.259437][ T499] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 41.265323][ T499] RIP: 0033:0x7fab4dc12b19 [ 41.269725][ T499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.289320][ T499] RSP: 002b:00007fab4c628028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 41.297728][ T499] RAX: ffffffffffffffda RBX: 00007fab4de99180 RCX: 00007fab4dc12b19 [ 41.305695][ T499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 41.313654][ T499] RBP: 00007fab4dcaaaf8 R08: ffffffffffffffff R09: 0000000000000000 [ 41.321614][ T499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.329573][ T499] R13: 00007fab4de99218 R14: 00007fab4de99180 R15: 00007fff55bd1938 [ 41.337536][ T499] [ 41.466616][ T495] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 41.507655][ T30] audit: type=1400 audit(1793680346.004:187): avc: denied { remove_name } for pid=471 comm="syz.2.40" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.530110][ T30] audit: type=1400 audit(1793680346.004:188): avc: denied { rename } for pid=471 comm="syz.2.40" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.557551][ T495] EXT4-fs warning (device loop2): ext4_rmdir:3245: inode #11: comm syz.2.40: empty directory 'file0' has too many links (111) [ 41.571773][ T30] audit: type=1400 audit(1793680346.004:189): avc: denied { rmdir } for pid=471 comm="syz.2.40" name="file1" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.585336][ T295] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.632810][ T295] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.645606][ T295] usb 3-1: config 0 interface 0 has no altsetting 0 [ 41.652215][ T295] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 41.750671][ T511] FAULT_INJECTION: forcing a failure. [ 41.750671][ T511] name failslab, interval 1, probability 0, space 0, times 0 [ 41.763301][ T511] CPU: 1 PID: 511 Comm: syz.3.47 Not tainted syzkaller #0 [ 41.770403][ T511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.780448][ T511] Call Trace: [ 41.783717][ T511] [ 41.786641][ T511] __dump_stack+0x21/0x30 [ 41.790967][ T511] dump_stack_lvl+0x110/0x170 [ 41.795637][ T511] ? show_regs_print_info+0x20/0x20 [ 41.800826][ T511] ? __kasan_check_read+0x11/0x20 [ 41.805844][ T511] ? preempt_schedule_irq+0xca/0x120 [ 41.811120][ T511] ? __cond_resched+0xd0/0xd0 [ 41.815164][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.815788][ T511] dump_stack+0x15/0x20 [ 41.827879][ T511] should_fail+0x3ab/0x500 [ 41.832294][ T511] __should_failslab+0xa4/0xe0 [ 41.836742][ T295] usb 3-1: config 0 descriptor?? [ 41.837058][ T511] should_failslab+0x9/0x20 [ 41.846453][ T511] slab_pre_alloc_hook+0x39/0xd0 [ 41.851399][ T511] ? key_alloc+0x2c1/0xef0 [ 41.855825][ T511] kmem_cache_alloc+0x44/0x260 [ 41.855847][ T511] key_alloc+0x2c1/0xef0 [ 41.855867][ T511] keyring_alloc+0x47/0xb0 [ 41.855885][ T511] lookup_user_key+0x448/0x11b0 [ 41.855901][ T511] ? lookup_user_key_possessed+0x40/0x40 [ 41.855917][ T511] ? search_process_keyrings_rcu+0x280/0x280 [ 41.855935][ T511] __se_sys_add_key+0x311/0x410 [ 41.855950][ T511] ? __x64_sys_add_key+0xd0/0xd0 [ 41.855964][ T511] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 41.855985][ T511] __x64_sys_add_key+0xbf/0xd0 [ 41.856000][ T511] x64_sys_call+0x713/0x9a0 [ 41.856017][ T511] do_syscall_64+0x4c/0xa0 [ 41.856031][ T511] ? clear_bhb_loop+0x50/0xa0 [ 41.856047][ T511] ? clear_bhb_loop+0x50/0xa0 [ 41.856062][ T511] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 41.856080][ T511] RIP: 0033:0x7f39e6adfb19 [ 41.856094][ T511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.856105][ T511] RSP: 002b:00007f39e54f5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 41.856123][ T511] RAX: ffffffffffffffda RBX: 00007f39e6d66180 RCX: 00007f39e6adfb19 [ 41.856136][ T511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 41.856146][ T511] RBP: 00007f39e6b77af8 R08: ffffffffffffffff R09: 0000000000000000 [ 41.856157][ T511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.856167][ T511] R13: 00007f39e6d66218 R14: 00007f39e6d66180 R15: 00007fffac42ecc8 [ 41.856180][ T511] [ 41.969253][ T30] audit: type=1400 audit(1793680346.004:190): avc: denied { rename } for pid=471 comm="syz.2.40" name="file1" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.969305][ T30] audit: type=1400 audit(1793680346.004:191): avc: denied { reparent } for pid=471 comm="syz.2.40" name="file1" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.969325][ T30] audit: type=1400 audit(1793680346.004:192): avc: denied { unlink } for pid=471 comm="syz.2.40" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 41.985618][ T517] loop4: detected capacity change from 0 to 4096 [ 42.006132][ T517] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 42.006132][ T517] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 42.006132][ T517] [ 42.039223][ T462] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.051911][ T517] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 42.095525][ T30] audit: type=1400 audit(1793680346.604:193): avc: denied { read } for pid=471 comm="syz.2.40" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 42.101115][ T517] EXT4-fs (loop4): Ignoring removed orlov option [ 42.270192][ T517] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 42.270192][ T517] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 42.270192][ T517] [ 42.292802][ T517] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 42.369263][ T295] usbhid 3-1:0.0: can't add hid device: -71 [ 42.375188][ T295] usbhid: probe of 3-1:0.0 failed with error -71 [ 42.398288][ T295] usb 3-1: USB disconnect, device number 3 [ 42.446401][ T521] loop3: detected capacity change from 0 to 4096 [ 42.504783][ T521] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 42.539256][ T462] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 42.548470][ T462] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 42.557622][ T462] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.594423][ T527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.50'. [ 42.857693][ T30] audit: type=1400 audit(1793680347.364:194): avc: denied { mounton } for pid=520 comm="syz.3.52" path="/7/file3/debug" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.881804][ T30] audit: type=1400 audit(1793680347.384:195): avc: denied { mount } for pid=520 comm="syz.3.52" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 42.905210][ T521] netlink: 'syz.3.52': attribute type 9 has an invalid length. [ 42.930487][ T30] audit: type=1400 audit(1793680347.444:196): avc: denied { write } for pid=520 comm="syz.3.52" name="bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.931596][ T521] EXT4-fs error (device loop3): ext4_empty_dir:3156: inode #12: block 80: comm syz.3.52: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 42.979433][ T521] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz.3.52: directory missing '..' [ 42.994554][ T533] loop4: detected capacity change from 0 to 4096 [ 43.039235][ T295] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 43.046940][ T531] loop1: detected capacity change from 0 to 40427 [ 43.054834][ T533] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 43.054834][ T533] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 43.054834][ T533] [ 43.072619][ T533] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 43.072945][ T462] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 43.081991][ T533] EXT4-fs (loop4): Ignoring removed orlov option [ 43.094060][ T533] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 43.094060][ T533] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 43.094060][ T533] [ 43.098209][ T531] F2FS-fs (loop1): invalid crc value [ 43.119324][ T531] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.126857][ T533] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 43.164401][ T531] F2FS-fs (loop1): Start checkpoint disabled! [ 43.198508][ T531] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 43.520936][ T466] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 43.620144][ T462] usb 1-1: USB disconnect, device number 2 [ 44.227615][ T45] attempt to access beyond end of device [ 44.227615][ T45] loop1: rw=2049, want=40976, limit=40427 [ 44.279316][ T466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.290678][ T466] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.299265][ T295] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 44.300677][ T466] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 44.318582][ T466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.320348][ T295] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 44.327479][ T466] usb 4-1: config 0 descriptor?? [ 44.349528][ T295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.365824][ T546] loop1: detected capacity change from 0 to 2048 [ 44.529229][ T306] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 44.609731][ T295] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 44.679273][ T466] usbhid 4-1:0.0: can't add hid device: -71 [ 44.685242][ T466] usbhid: probe of 4-1:0.0 failed with error -71 [ 44.703185][ T466] usb 4-1: USB disconnect, device number 5 [ 44.805825][ T550] loop0: detected capacity change from 0 to 40427 [ 44.821142][ T550] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 44.828405][ T550] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 44.847349][ T550] F2FS-fs (loop0): invalid crc value [ 44.860324][ T550] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 44.889628][ T550] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 44.896757][ T550] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 44.905715][ T306] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 44.915133][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 44.924400][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.932978][ T464] usb 3-1: USB disconnect, device number 4 [ 45.189642][ T306] cdc_acm 5-1:1.0: ttyACM1: USB ACM device [ 45.219266][ T295] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 45.230030][ T285] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /7/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 45.261361][ T285] EXT4-fs error (device loop3): ext4_empty_dir:3156: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 45.297280][ T285] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz-executor: directory missing '..' [ 45.308980][ T285] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /7/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 45.330244][ T285] EXT4-fs error (device loop3): ext4_empty_dir:3156: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 45.349935][ T285] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz-executor: directory missing '..' [ 45.361603][ T285] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /7/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 45.382848][ T285] EXT4-fs error (device loop3): ext4_empty_dir:3156: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 45.402680][ T285] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz-executor: directory missing '..' [ 45.408838][ T464] usb 5-1: USB disconnect, device number 2 [ 45.414380][ T285] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /7/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 45.441170][ T285] EXT4-fs error (device loop3): ext4_empty_dir:3156: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 45.460740][ T285] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz-executor: directory missing '..' [ 45.472379][ T285] EXT4-fs error (device loop3): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /7/file3/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 45.494753][ T285] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz-executor: directory missing '..' [ 45.506613][ T285] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz-executor: directory missing '..' [ 45.518676][ T285] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz-executor: directory missing '..' [ 45.530730][ T285] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz-executor: directory missing '..' [ 45.542685][ T285] EXT4-fs warning (device loop3): ext4_empty_dir:3158: inode #12: comm syz-executor: directory missing '..' [ 45.563563][ T295] usb 1-1: Using ep0 maxpacket: 16 [ 45.696598][ T559] FAULT_INJECTION: forcing a failure. [ 45.696598][ T559] name failslab, interval 1, probability 0, space 0, times 0 [ 45.709249][ T559] CPU: 1 PID: 559 Comm: syz.1.59 Not tainted syzkaller #0 [ 45.716358][ T559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 45.726407][ T559] Call Trace: [ 45.729674][ T559] [ 45.732595][ T559] __dump_stack+0x21/0x30 [ 45.736923][ T559] dump_stack_lvl+0x110/0x170 [ 45.741598][ T559] ? show_regs_print_info+0x20/0x20 [ 45.746804][ T559] dump_stack+0x15/0x20 [ 45.750953][ T559] should_fail+0x3ab/0x500 [ 45.755366][ T559] __should_failslab+0xa4/0xe0 [ 45.760123][ T559] should_failslab+0x9/0x20 [ 45.764620][ T559] slab_pre_alloc_hook+0x39/0xd0 [ 45.769571][ T559] ? key_alloc+0x2c1/0xef0 [ 45.774004][ T559] kmem_cache_alloc+0x44/0x260 [ 45.778760][ T559] key_alloc+0x2c1/0xef0 [ 45.782993][ T559] keyring_alloc+0x47/0xb0 [ 45.787398][ T559] lookup_user_key+0x448/0x11b0 [ 45.792231][ T559] ? lookup_user_key_possessed+0x40/0x40 [ 45.797844][ T559] ? search_process_keyrings_rcu+0x280/0x280 [ 45.803805][ T559] __se_sys_add_key+0x311/0x410 [ 45.808636][ T559] ? __x64_sys_add_key+0xd0/0xd0 [ 45.813549][ T559] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 45.819168][ T559] __x64_sys_add_key+0xbf/0xd0 [ 45.823910][ T559] x64_sys_call+0x713/0x9a0 [ 45.828396][ T559] do_syscall_64+0x4c/0xa0 [ 45.832795][ T559] ? clear_bhb_loop+0x50/0xa0 [ 45.837452][ T559] ? clear_bhb_loop+0x50/0xa0 [ 45.842112][ T559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.847998][ T559] RIP: 0033:0x7f5c42ad7b19 [ 45.852394][ T559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.871981][ T559] RSP: 002b:00007f5c414ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 45.880374][ T559] RAX: ffffffffffffffda RBX: 00007f5c42d5e180 RCX: 00007f5c42ad7b19 [ 45.888325][ T559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 45.896274][ T559] RBP: 00007f5c42b6faf8 R08: ffffffffffffffff R09: 0000000000000000 [ 45.904224][ T559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.912174][ T559] R13: 00007f5c42d5e218 R14: 00007f5c42d5e180 R15: 00007ffe0f904658 [ 45.920129][ T559] [ 45.934231][ T560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.018410][ T285] syz-executor (285) used greatest stack depth: 21440 bytes left [ 46.165838][ T566] FAULT_INJECTION: forcing a failure. [ 46.165838][ T566] name failslab, interval 1, probability 0, space 0, times 0 [ 46.178553][ T566] CPU: 1 PID: 566 Comm: syz.2.61 Not tainted syzkaller #0 [ 46.185664][ T566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 46.195713][ T566] Call Trace: [ 46.198985][ T566] [ 46.201908][ T566] __dump_stack+0x21/0x30 [ 46.206236][ T566] dump_stack_lvl+0x110/0x170 [ 46.210907][ T566] ? show_regs_print_info+0x20/0x20 [ 46.216098][ T566] ? preempt_schedule_common+0xbe/0xf0 [ 46.221553][ T566] dump_stack+0x15/0x20 [ 46.225699][ T566] should_fail+0x3ab/0x500 [ 46.230099][ T566] __should_failslab+0xa4/0xe0 [ 46.234849][ T566] should_failslab+0x9/0x20 [ 46.239332][ T566] slab_pre_alloc_hook+0x39/0xd0 [ 46.244249][ T566] ? key_alloc+0x2c1/0xef0 [ 46.248646][ T566] kmem_cache_alloc+0x44/0x260 [ 46.253388][ T566] key_alloc+0x2c1/0xef0 [ 46.257612][ T566] keyring_alloc+0x47/0xb0 [ 46.262005][ T566] lookup_user_key+0x448/0x11b0 [ 46.266836][ T566] ? lookup_user_key_possessed+0x40/0x40 [ 46.272446][ T566] ? search_process_keyrings_rcu+0x280/0x280 [ 46.278407][ T566] __se_sys_add_key+0x311/0x410 [ 46.283235][ T566] ? __x64_sys_add_key+0xd0/0xd0 [ 46.288151][ T566] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 46.293766][ T566] __x64_sys_add_key+0xbf/0xd0 [ 46.298515][ T566] x64_sys_call+0x713/0x9a0 [ 46.302996][ T566] do_syscall_64+0x4c/0xa0 [ 46.307392][ T566] ? clear_bhb_loop+0x50/0xa0 [ 46.312047][ T566] ? clear_bhb_loop+0x50/0xa0 [ 46.316703][ T566] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.322575][ T566] RIP: 0033:0x7f7903a5bb19 [ 46.326968][ T566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.346556][ T566] RSP: 002b:00007f7902471028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 46.354951][ T566] RAX: ffffffffffffffda RBX: 00007f7903ce2180 RCX: 00007f7903a5bb19 [ 46.362902][ T566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 46.370850][ T566] RBP: 00007f7903af3af8 R08: ffffffffffffffff R09: 0000000000000000 [ 46.378799][ T566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.386746][ T566] R13: 00007f7903ce2218 R14: 00007f7903ce2180 R15: 00007ffdf698bda8 [ 46.394700][ T566] [ 46.460965][ T295] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 46.471418][ T295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.482545][ T295] usb 1-1: Product: syz [ 46.486722][ T295] usb 1-1: Manufacturer: syz [ 46.491466][ T295] usb 1-1: SerialNumber: syz [ 46.497034][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.504725][ T564] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.512234][ T564] device bridge_slave_0 entered promiscuous mode [ 46.512869][ T571] loop4: detected capacity change from 0 to 8192 [ 46.526331][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.533407][ T564] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.540774][ T564] device bridge_slave_1 entered promiscuous mode [ 46.575643][ T564] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.582678][ T564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.589946][ T564] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.596957][ T564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.607049][ T571] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.619176][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.630901][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.640737][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.673621][ T564] device veth0_vlan entered promiscuous mode [ 46.682340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.691275][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.699740][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.706776][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.714304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.722639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.731032][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.738059][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.745534][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.753502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.761465][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.769382][ T464] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 46.769632][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.784746][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.793117][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.802547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.263590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.271771][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.279622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.287952][ T577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.57'. [ 47.312768][ T564] device veth1_macvtap entered promiscuous mode [ 47.668943][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.696838][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.740158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.864084][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.942401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.990924][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.994179][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 47.994190][ T30] audit: type=1400 audit(1793680352.504:208): avc: denied { execute } for pid=585 comm="syz.4.67" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 47.999128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.536930][ T589] loop5: detected capacity change from 0 to 4096 [ 48.589712][ T8] device bridge_slave_1 left promiscuous mode [ 48.595918][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.603666][ T8] device bridge_slave_0 left promiscuous mode [ 48.609915][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.617965][ T8] device veth1_macvtap left promiscuous mode [ 48.624264][ T8] device veth0_vlan left promiscuous mode [ 48.630452][ T589] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 48.630452][ T589] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 48.630452][ T589] [ 48.639363][ T295] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 48.648638][ T589] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 48.671622][ T589] EXT4-fs (loop5): Ignoring removed orlov option [ 48.679268][ T295] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 48.688284][ T589] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 48.688284][ T589] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 48.688284][ T589] [ 48.707005][ T464] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 48.716192][ T464] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 48.735562][ T295] usb 1-1: USB disconnect, device number 3 [ 48.741611][ T464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.804451][ T589] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 48.845402][ T579] loop2: detected capacity change from 0 to 131072 [ 48.870262][ T579] F2FS-fs (loop2): Test dummy encryption mode enabled [ 48.877891][ T579] F2FS-fs (loop2): invalid crc value [ 48.884598][ T579] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.949911][ T579] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 49.014920][ T464] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 49.023270][ T464] usb 2-1: USB disconnect, device number 6 [ 49.036010][ T579] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 49.124706][ T601] netlink: 20 bytes leftover after parsing attributes in process `syz.5.68'. [ 49.319098][ T30] audit: type=1400 audit(1793680353.824:209): avc: denied { create } for pid=578 comm="syz.2.66" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 49.449827][ T599] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 49.546214][ T579] xt_hashlimit: size too large, truncated to 1048576 [ 50.508533][ T614] FAULT_INJECTION: forcing a failure. [ 50.508533][ T614] name failslab, interval 1, probability 0, space 0, times 0 [ 50.521181][ T614] CPU: 0 PID: 614 Comm: syz.0.71 Not tainted syzkaller #0 [ 50.528292][ T614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 50.538343][ T614] Call Trace: [ 50.541619][ T614] [ 50.544548][ T614] __dump_stack+0x21/0x30 [ 50.548881][ T614] dump_stack_lvl+0x110/0x170 [ 50.553557][ T614] ? show_regs_print_info+0x20/0x20 [ 50.558758][ T614] dump_stack+0x15/0x20 [ 50.562913][ T614] should_fail+0x3ab/0x500 [ 50.567330][ T614] __should_failslab+0xa4/0xe0 [ 50.572091][ T614] should_failslab+0x9/0x20 [ 50.576585][ T614] slab_pre_alloc_hook+0x39/0xd0 [ 50.581520][ T614] ? key_alloc+0x2c1/0xef0 [ 50.585928][ T614] kmem_cache_alloc+0x44/0x260 [ 50.590684][ T614] key_alloc+0x2c1/0xef0 [ 50.594926][ T614] keyring_alloc+0x47/0xb0 [ 50.599339][ T614] lookup_user_key+0x448/0x11b0 [ 50.604183][ T614] ? lookup_user_key_possessed+0x40/0x40 [ 50.609805][ T614] ? search_process_keyrings_rcu+0x280/0x280 [ 50.615784][ T614] __se_sys_add_key+0x311/0x410 [ 50.620629][ T614] ? __x64_sys_add_key+0xd0/0xd0 [ 50.625556][ T614] ? ksys_write+0x1fa/0x260 [ 50.630050][ T614] ? __kasan_check_write+0x14/0x20 [ 50.635152][ T614] __x64_sys_add_key+0xbf/0xd0 [ 50.639912][ T614] x64_sys_call+0x713/0x9a0 [ 50.644406][ T614] do_syscall_64+0x4c/0xa0 [ 50.648813][ T614] ? clear_bhb_loop+0x50/0xa0 [ 50.653480][ T614] ? clear_bhb_loop+0x50/0xa0 [ 50.658148][ T614] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.664039][ T614] RIP: 0033:0x7f85b5b9eb19 [ 50.668444][ T614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.688040][ T614] RSP: 002b:00007f85b45b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 50.696447][ T614] RAX: ffffffffffffffda RBX: 00007f85b5e25180 RCX: 00007f85b5b9eb19 [ 50.704415][ T614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 50.712389][ T614] RBP: 00007f85b5c36af8 R08: ffffffffffffffff R09: 0000000000000000 [ 50.720354][ T614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.728324][ T614] R13: 00007f85b5e25218 R14: 00007f85b5e25180 R15: 00007ffefc903118 [ 50.736292][ T614] [ 51.047417][ T620] loop0: detected capacity change from 0 to 1024 [ 51.113769][ T620] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 51.134388][ T620] EXT4-fs (loop0): group descriptors corrupted! [ 52.096872][ T628] loop5: detected capacity change from 0 to 4096 [ 52.115461][ T630] loop0: detected capacity change from 0 to 512 [ 52.122004][ T30] audit: type=1400 audit(1793680356.584:210): avc: denied { create } for pid=622 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.139577][ T620] serio: Serial port ptm0 [ 52.169072][ T633] loop1: detected capacity change from 0 to 4096 [ 52.190431][ T628] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 52.213691][ T620] serio: Serial port ptm0 [ 52.216697][ T30] audit: type=1326 audit(1793680356.604:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=622 comm="syz.4.76" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab4dc12b19 code=0x0 [ 52.241771][ T637] loop2: detected capacity change from 0 to 16 [ 52.257821][ T464] hid-generic 0003:0008:0043.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 52.271511][ T30] audit: type=1400 audit(1793680356.714:212): avc: denied { unmount } for pid=622 comm="syz.4.76" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.312925][ T637] erofs: (device loop2): mounted with root inode @ nid 36. [ 52.325469][ T633] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 52.325469][ T633] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 52.325469][ T633] [ 52.369377][ T30] audit: type=1400 audit(1793680356.764:213): avc: denied { read write } for pid=627 comm="syz.5.77" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.398527][ T633] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 52.409615][ T633] EXT4-fs (loop1): Ignoring removed orlov option [ 52.411551][ T30] audit: type=1400 audit(1793680356.764:214): avc: denied { open } for pid=627 comm="syz.5.77" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.426120][ T633] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 52.426120][ T633] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 52.426120][ T633] [ 52.445027][ T30] audit: type=1400 audit(1793680356.784:215): avc: denied { mounton } for pid=636 comm="syz.2.75" path="/syzcgroup/unified/syz2/file1" dev="cgroup2" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 52.488069][ T637] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 52.488886][ T30] audit: type=1400 audit(1793680356.894:216): avc: denied { read } for pid=636 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.518596][ T30] audit: type=1400 audit(1793680356.994:217): avc: denied { shutdown } for pid=636 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.538693][ T637] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 52.549880][ T637] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 52.581505][ T637] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 52.613614][ T633] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 52.649283][ T637] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 52.659245][ T462] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.699263][ T637] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 52.707448][ T637] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 52.744757][ T646] FAULT_INJECTION: forcing a failure. [ 52.744757][ T646] name failslab, interval 1, probability 0, space 0, times 0 [ 52.757390][ T646] CPU: 1 PID: 646 Comm: syz.0.80 Not tainted syzkaller #0 [ 52.764496][ T646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 52.774540][ T646] Call Trace: [ 52.777814][ T646] [ 52.780737][ T646] __dump_stack+0x21/0x30 [ 52.785067][ T646] dump_stack_lvl+0x110/0x170 [ 52.789732][ T646] ? show_regs_print_info+0x20/0x20 [ 52.794925][ T646] dump_stack+0x15/0x20 [ 52.799070][ T646] should_fail+0x3ab/0x500 [ 52.803481][ T646] __should_failslab+0xa4/0xe0 [ 52.808239][ T646] should_failslab+0x9/0x20 [ 52.812730][ T646] slab_pre_alloc_hook+0x39/0xd0 [ 52.817654][ T646] ? key_alloc+0x2c1/0xef0 [ 52.822053][ T646] kmem_cache_alloc+0x44/0x260 [ 52.826797][ T646] key_alloc+0x2c1/0xef0 [ 52.831025][ T646] keyring_alloc+0x47/0xb0 [ 52.835421][ T646] lookup_user_key+0x448/0x11b0 [ 52.840251][ T646] ? lookup_user_key_possessed+0x40/0x40 [ 52.845866][ T646] ? search_process_keyrings_rcu+0x280/0x280 [ 52.851824][ T646] __se_sys_add_key+0x311/0x410 [ 52.856650][ T646] ? irqentry_exit+0x37/0x40 [ 52.861222][ T646] ? __x64_sys_add_key+0xd0/0xd0 [ 52.866138][ T646] ? __x64_sys_add_key+0x20/0xd0 [ 52.871054][ T646] __x64_sys_add_key+0xbf/0xd0 [ 52.875799][ T646] x64_sys_call+0x713/0x9a0 [ 52.880281][ T646] do_syscall_64+0x4c/0xa0 [ 52.884677][ T646] ? clear_bhb_loop+0x50/0xa0 [ 52.889333][ T646] ? clear_bhb_loop+0x50/0xa0 [ 52.894000][ T646] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.899878][ T646] RIP: 0033:0x7f85b5b9eb19 [ 52.904272][ T646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.923859][ T646] RSP: 002b:00007f85b45b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 52.932254][ T646] RAX: ffffffffffffffda RBX: 00007f85b5e25180 RCX: 00007f85b5b9eb19 [ 52.940205][ T646] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 52.948154][ T646] RBP: 00007f85b5c36af8 R08: ffffffffffffffff R09: 0000000000000000 [ 52.956103][ T646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.964052][ T646] R13: 00007f85b5e25218 R14: 00007f85b5e25180 R15: 00007ffefc903118 [ 52.972014][ T646] [ 53.129350][ T462] usb 6-1: Using ep0 maxpacket: 8 [ 53.148262][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 53.148273][ T30] audit: type=1400 audit(1793680357.654:219): avc: denied { mounton } for pid=638 comm="syz.4.79" path="/18/file0" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.245241][ T651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.78'. [ 53.510261][ T654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.83'. [ 53.533985][ T655] loop0: detected capacity change from 0 to 4096 [ 53.537919][ T654] device macsec0 entered promiscuous mode [ 53.541096][ T462] usb 6-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 53.559790][ T462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.567858][ T462] usb 6-1: Product: syz [ 53.577997][ T462] usb 6-1: Manufacturer: syz [ 53.591715][ T462] usb 6-1: SerialNumber: syz [ 53.598867][ T30] audit: type=1400 audit(1793680358.104:220): avc: denied { create } for pid=656 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.623939][ T655] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 53.623939][ T655] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 53.623939][ T655] [ 53.650955][ T657] loop1: detected capacity change from 0 to 256 [ 53.670083][ T30] audit: type=1400 audit(1793680358.184:221): avc: denied { setopt } for pid=656 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.695018][ T655] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 53.739316][ T655] EXT4-fs (loop0): Ignoring removed orlov option [ 53.746147][ T657] exfat: Unknown parameter 'vfat' [ 53.751211][ T655] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 53.751211][ T655] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 53.751211][ T655] [ 53.809369][ T655] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 54.062404][ T666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 54.327075][ T668] loop1: detected capacity change from 0 to 128 [ 54.414005][ T30] audit: type=1400 audit(1793680358.924:222): avc: denied { setopt } for pid=667 comm="syz.1.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 54.466864][ T685] loop0: detected capacity change from 0 to 512 [ 54.489257][ T30] audit: type=1400 audit(1793680358.964:223): avc: denied { mounton } for pid=667 comm="syz.1.85" path="/file0" dev="loop1" ino=1048670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 54.511404][ T462] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.529297][ T462] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 54.562937][ T462] usb 6-1: USB disconnect, device number 2 [ 54.580184][ T685] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 54.596831][ T685] EXT4-fs (loop0): 1 truncate cleaned up [ 54.644512][ T685] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 54.970176][ T689] FAULT_INJECTION: forcing a failure. [ 54.970176][ T689] name failslab, interval 1, probability 0, space 0, times 0 [ 54.970616][ T30] audit: type=1400 audit(1793680359.484:224): avc: denied { mounton } for pid=683 comm="syz.0.86" path="/17/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.982851][ T689] CPU: 1 PID: 689 Comm: syz.1.87 Not tainted syzkaller #0 [ 55.005580][ T30] audit: type=1400 audit(1793680359.484:225): avc: denied { mount } for pid=683 comm="syz.0.86" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 55.012632][ T689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.012642][ T689] Call Trace: [ 55.012647][ T689] [ 55.012653][ T689] __dump_stack+0x21/0x30 [ 55.054831][ T689] dump_stack_lvl+0x110/0x170 [ 55.059511][ T689] ? show_regs_print_info+0x20/0x20 [ 55.059597][ T685] devpts: called with bogus options [ 55.064702][ T689] dump_stack+0x15/0x20 [ 55.064722][ T689] should_fail+0x3ab/0x500 [ 55.069954][ T30] audit: type=1400 audit(1793680359.574:226): avc: denied { remount } for pid=683 comm="syz.0.86" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 55.074011][ T689] __should_failslab+0xa4/0xe0 [ 55.102551][ T689] should_failslab+0x9/0x20 [ 55.107059][ T689] slab_pre_alloc_hook+0x39/0xd0 [ 55.110391][ T30] audit: type=1400 audit(1793680359.624:227): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 55.111995][ T689] ? key_alloc+0x2c1/0xef0 [ 55.112017][ T689] kmem_cache_alloc+0x44/0x260 [ 55.140904][ T689] key_alloc+0x2c1/0xef0 [ 55.145147][ T689] keyring_alloc+0x47/0xb0 [ 55.149565][ T689] lookup_user_key+0x448/0x11b0 [ 55.154450][ T689] ? lookup_user_key_possessed+0x40/0x40 [ 55.160080][ T689] ? search_process_keyrings_rcu+0x280/0x280 [ 55.166058][ T689] __se_sys_add_key+0x311/0x410 [ 55.170904][ T689] ? __x64_sys_add_key+0xd0/0xd0 [ 55.175836][ T689] ? ksys_write+0x1fa/0x260 [ 55.180337][ T689] ? __kasan_check_write+0x14/0x20 [ 55.185453][ T689] __x64_sys_add_key+0xbf/0xd0 [ 55.190211][ T689] x64_sys_call+0x713/0x9a0 [ 55.194709][ T689] do_syscall_64+0x4c/0xa0 [ 55.199119][ T689] ? clear_bhb_loop+0x50/0xa0 [ 55.203791][ T689] ? clear_bhb_loop+0x50/0xa0 [ 55.208464][ T689] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.214361][ T689] RIP: 0033:0x7f5c42ad7b19 [ 55.218768][ T689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.238369][ T689] RSP: 002b:00007f5c4150e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 55.246777][ T689] RAX: ffffffffffffffda RBX: 00007f5c42d5e090 RCX: 00007f5c42ad7b19 [ 55.254745][ T689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 55.262709][ T689] RBP: 00007f5c42b6faf8 R08: ffffffffffffffff R09: 0000000000000000 [ 55.270675][ T689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.278643][ T689] R13: 00007f5c42d5e128 R14: 00007f5c42d5e090 R15: 00007ffe0f904658 [ 55.286614][ T689] [ 55.552367][ T694] FAULT_INJECTION: forcing a failure. [ 55.552367][ T694] name failslab, interval 1, probability 0, space 0, times 0 [ 55.565006][ T694] CPU: 0 PID: 694 Comm: syz.2.88 Not tainted syzkaller #0 [ 55.572111][ T694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 55.582160][ T694] Call Trace: [ 55.585426][ T694] [ 55.588351][ T694] __dump_stack+0x21/0x30 [ 55.592667][ T694] dump_stack_lvl+0x110/0x170 [ 55.597323][ T694] ? show_regs_print_info+0x20/0x20 [ 55.602508][ T694] dump_stack+0x15/0x20 [ 55.606640][ T694] should_fail+0x3ab/0x500 [ 55.611036][ T694] __should_failslab+0xa4/0xe0 [ 55.615780][ T694] should_failslab+0x9/0x20 [ 55.620261][ T694] slab_pre_alloc_hook+0x39/0xd0 [ 55.625179][ T694] ? key_alloc+0x2c1/0xef0 [ 55.629575][ T694] kmem_cache_alloc+0x44/0x260 [ 55.634318][ T694] key_alloc+0x2c1/0xef0 [ 55.638547][ T694] keyring_alloc+0x47/0xb0 [ 55.642946][ T694] lookup_user_key+0x448/0x11b0 [ 55.647778][ T694] ? lookup_user_key_possessed+0x40/0x40 [ 55.653387][ T694] ? search_process_keyrings_rcu+0x280/0x280 [ 55.659348][ T694] __se_sys_add_key+0x311/0x410 [ 55.664176][ T694] ? __x64_sys_add_key+0xd0/0xd0 [ 55.669090][ T694] ? ksys_write+0x1fa/0x260 [ 55.673572][ T694] ? __kasan_check_write+0x14/0x20 [ 55.678665][ T694] __x64_sys_add_key+0xbf/0xd0 [ 55.683407][ T694] x64_sys_call+0x713/0x9a0 [ 55.687891][ T694] do_syscall_64+0x4c/0xa0 [ 55.692292][ T694] ? clear_bhb_loop+0x50/0xa0 [ 55.696960][ T694] ? clear_bhb_loop+0x50/0xa0 [ 55.701625][ T694] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.707503][ T694] RIP: 0033:0x7f7903a5bb19 [ 55.711897][ T694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.731483][ T694] RSP: 002b:00007f7902492028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 55.739877][ T694] RAX: ffffffffffffffda RBX: 00007f7903ce2090 RCX: 00007f7903a5bb19 [ 55.747830][ T694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001180 [ 55.755780][ T694] RBP: 00007f7903af3af8 R08: ffffffffffffffff R09: 0000000000000000 [ 55.763730][ T694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.771681][ T694] R13: 00007f7903ce2128 R14: 00007f7903ce2090 R15: 00007ffdf698bda8 [ 55.779637][ T694] [ 55.783607][ T288] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 55.798184][ T30] audit: type=1400 audit(1793680360.294:228): avc: denied { unlink } for pid=288 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 55.818842][ T288] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 55.849572][ T288] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 55.878525][ T699] loop1: detected capacity change from 0 to 4096 [ 55.915683][ T699] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 55.915683][ T699] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 55.915683][ T699] [ 55.979606][ T699] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 55.988791][ T703] FAT-fs (loop5): bogus logical sector size 0 [ 55.996190][ T703] FAT-fs (loop5): Can't find a valid FAT filesystem [ 56.002919][ T699] EXT4-fs (loop1): Ignoring removed orlov option [ 56.013975][ T699] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 56.013975][ T699] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 56.013975][ T699] [ 56.014161][ T710] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 56.061305][ T699] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 56.100356][ T710] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 56.107532][ T710] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 56.127213][ T710] EXT4-fs (loop0): Unrecognized mount option "subj_type=usrjquota=" or missing value [ 56.221377][ T721] set_capacity_and_notify: 2 callbacks suppressed [ 56.221391][ T721] loop5: detected capacity change from 0 to 512 [ 56.310958][ T723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.91'. [ 56.516103][ T725] loop0: detected capacity change from 0 to 4096 [ 56.542669][ T725] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 56.542669][ T725] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 56.542669][ T725] [ 56.579287][ T725] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 56.588409][ T725] EXT4-fs (loop0): Ignoring removed orlov option [ 56.617922][ T725] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 56.617922][ T725] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 56.617922][ T725] [ 56.660400][ T725] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 56.845295][ T738] loop1: detected capacity change from 0 to 128 [ 57.023807][ T741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.97'. [ 57.209228][ T464] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 57.476768][ T745] loop0: detected capacity change from 0 to 512 [ 57.511421][ T747] fuse: Unknown parameter '#0x0000000000000007' [ 57.544214][ T747] KVM: debugfs: duplicate directory 747-5 [ 57.574634][ T747] futex_wake_op: syz.2.107 tries to shift op by 144; fix this program [ 57.599282][ T464] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 57.610726][ T464] usb 2-1: config 179 has no interface number 0 [ 57.616996][ T464] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 57.636538][ T778] loop5: detected capacity change from 0 to 512 [ 57.648338][ T464] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 57.670926][ T778] EXT4-fs (loop5): Unrecognized mount option "uid=00000000000000000000" or missing value [ 57.672589][ T464] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 57.704651][ T464] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 57.720473][ T464] usb 2-1: config 179 interface 65 has no altsetting 0 [ 57.728586][ T464] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 57.739225][ T464] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.753294][ T796] loop5: detected capacity change from 0 to 512 [ 57.769271][ T740] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 57.800694][ T464] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input4 [ 58.006331][ T740] UDC core: couldn't find an available UDC or it's busy: -16 [ 58.089291][ T740] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 58.108603][ T844] loop5: detected capacity change from 0 to 512 [ 58.117574][ T846] netlink: 'syz.2.120': attribute type 16 has an invalid length. [ 58.131292][ T846] netlink: 'syz.2.120': attribute type 17 has an invalid length. [ 58.354295][ T846] device veth0_vlan left promiscuous mode [ 58.408072][ T844] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback. [ 58.431799][ T846] device veth0_vlan entered promiscuous mode [ 58.499795][ T846] device veth1_macvtap left promiscuous mode [ 58.507700][ T844] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.557686][ T846] device veth1_macvtap entered promiscuous mode [ 58.608921][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.617450][ T464] usb 2-1: USB disconnect, device number 7 [ 58.623291][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 58.638124][ T855] netlink: 68 bytes leftover after parsing attributes in process `syz.0.122'. [ 58.657399][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.685482][ T464] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 58.695915][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.706610][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 58.706621][ T30] audit: type=1400 audit(1793680363.214:243): avc: denied { write } for pid=843 comm="syz.5.121" path="socket:[18754]" dev="sockfs" ino=18754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.744060][ T861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 58.769465][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.776498][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.796369][ T30] audit: type=1400 audit(1793680363.254:244): avc: denied { setattr } for pid=843 comm="syz.5.121" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.804168][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.841500][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.859387][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.866423][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.877992][ T30] audit: type=1400 audit(1793680363.294:245): avc: denied { ioctl } for pid=859 comm="syz.4.124" path="socket:[18763]" dev="sockfs" ino=18763 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.909286][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.927662][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 58.949154][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.959602][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 58.976219][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.992871][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.029417][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.069055][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.212909][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.360202][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.489046][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.709726][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.864424][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.887014][ T855] loop0: detected capacity change from 0 to 40427 [ 59.909483][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.927576][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.945864][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.963993][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.972602][ T855] F2FS-fs (loop0): fault_injection options not supported [ 59.982042][ T855] F2FS-fs (loop0): fault_type options not supported [ 59.992312][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.006335][ T855] F2FS-fs (loop0): invalid crc value [ 60.011976][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.021036][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.029053][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.037910][ T855] F2FS-fs (loop0): Found nat_bits in checkpoint [ 60.049296][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.068576][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.085801][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.089563][ T855] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 60.109319][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.119517][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.129828][ T861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 60.133711][ T846] syz.2.120 (846) used greatest stack depth: 19872 bytes left [ 60.148530][ T608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.325537][ T857] loop1: detected capacity change from 0 to 131072 [ 60.391647][ T880] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 0 [ 60.489826][ T857] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 5) [ 60.539580][ T462] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 60.544761][ T857] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 60.562178][ T857] F2FS-fs (loop1): Test dummy encryption mode enabled [ 60.569829][ T857] F2FS-fs (loop1): invalid crc value [ 60.576344][ T857] F2FS-fs (loop1): Found nat_bits in checkpoint [ 60.611833][ T857] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 60.618896][ T857] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 60.635839][ T857] netlink: 3820 bytes leftover after parsing attributes in process `syz.1.123'. [ 60.689240][ T464] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.696725][ T329] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 60.782788][ T30] audit: type=1400 audit(1793680365.294:246): avc: denied { connect } for pid=887 comm="syz.1.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.802240][ T462] usb 1-1: Using ep0 maxpacket: 32 [ 60.804750][ T30] audit: type=1400 audit(1793680365.294:247): avc: denied { ioctl } for pid=887 comm="syz.1.130" path="socket:[18859]" dev="sockfs" ino=18859 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.812670][ T608] ================================================================== [ 60.832374][ T887] ------------[ cut here ]------------ [ 60.839846][ T608] BUG: KASAN: use-after-free in l2tp_tunnel_del_work+0xcd/0x3d0 [ 60.845373][ T887] WARNING: CPU: 0 PID: 887 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 60.852887][ T608] Read of size 8 at addr ffff88810c632c80 by task kworker/u4:5/608 [ 60.852902][ T608] [ 60.852912][ T608] CPU: 1 PID: 608 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 60.862923][ T887] Modules linked in: [ 60.870701][ T608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.870713][ T608] Workqueue: l2tp l2tp_tunnel_del_work [ 60.873089][ T887] [ 60.880444][ T608] [ 60.880453][ T608] Call Trace: [ 60.880459][ T608] [ 60.880465][ T608] __dump_stack+0x21/0x30 [ 60.880484][ T608] dump_stack_lvl+0x110/0x170 [ 60.884570][ T887] CPU: 0 PID: 887 Comm: syz.1.130 Not tainted syzkaller #0 [ 60.894372][ T608] ? show_regs_print_info+0x20/0x20 [ 60.894391][ T608] ? load_image+0x3f0/0x3f0 [ 60.894405][ T608] print_address_description+0x7f/0x2c0 [ 60.894420][ T608] ? l2tp_tunnel_del_work+0xcd/0x3d0 [ 60.894433][ T608] kasan_report+0x10f/0x150 [ 60.894449][ T608] ? l2tp_tunnel_del_work+0xcd/0x3d0 [ 60.899961][ T887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 60.902183][ T608] __asan_report_load8_noabort+0x14/0x20 [ 60.904521][ T887] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 60.907752][ T608] l2tp_tunnel_del_work+0xcd/0x3d0 [ 60.910740][ T887] Code: 5d c3 e8 ec 16 0a fd be 02 00 00 00 eb 0a e8 e0 16 0a fd be 01 00 00 00 4c 89 f7 e8 b3 bc f0 fd e9 0f ff ff ff e8 c9 16 0a fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 b8 16 0a fd 4c 89 f7 be 03 [ 60.914968][ T608] process_one_work+0x6c8/0xbb0 [ 60.919643][ T887] RSP: 0018:ffffc90001297d10 EFLAGS: 00010293 [ 60.926781][ T608] worker_thread+0xaa0/0x1250 [ 60.926804][ T608] ? __kasan_check_read+0x11/0x20 [ 60.932188][ T887] [ 60.936439][ T608] kthread+0x3f5/0x4f0 [ 60.941984][ T887] RAX: ffffffff845fc037 RBX: ffff88811aaf5000 RCX: ffff88810e3e3c00 [ 60.947213][ T608] ? worker_clr_flags+0x190/0x190 [ 60.947233][ T608] ? kthread_blkcg+0xd0/0xd0 [ 60.951770][ T887] RDX: 0000000000000000 RSI: 000000000f3b1d80 RDI: 000000000c04eb7d [ 60.956962][ T608] ret_from_fork+0x1f/0x30 [ 60.967072][ T887] RBP: ffffc90001297d30 R08: ffff88811aaf5083 R09: 1ffff1102355ea10 [ 60.972605][ T608] [ 60.972612][ T608] [ 60.972615][ T608] Allocated by task 888: [ 60.972623][ T608] __kasan_kmalloc+0xd4/0x100 [ 60.978972][ T887] R10: dffffc0000000000 R11: ffffed102355ea11 R12: dffffc0000000000 [ 60.983988][ T608] __kmalloc+0x13d/0x2c0 [ 60.984005][ T608] l2tp_session_create+0x39/0xb60 [ 60.984019][ T608] pppol2tp_connect+0xbf5/0x1640 [ 60.984031][ T608] __sys_connect+0x3cb/0x450 [ 60.984045][ T608] __x64_sys_connect+0x7a/0x90 [ 61.004186][ T887] R13: dffffc0000000000 R14: 000000000f3b1d80 R15: ffff88810c632c00 [ 61.008439][ T608] x64_sys_call+0x7c/0x9a0 [ 61.008456][ T608] do_syscall_64+0x4c/0xa0 [ 61.014587][ T887] FS: 00005555870c2500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 61.019142][ T608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.024184][ T887] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.026446][ T608] [ 61.026450][ T608] Freed by task 902: [ 61.026458][ T608] kasan_set_track+0x4a/0x70 [ 61.026473][ T608] kasan_set_free_info+0x23/0x40 [ 61.030580][ T887] CR2: 00007f5c414aaff8 CR3: 00000001145e7000 CR4: 00000000003526b0 [ 61.038452][ T608] ____kasan_slab_free+0x125/0x160 [ 61.038468][ T608] __kasan_slab_free+0x11/0x20 [ 61.185064][ T608] slab_free_freelist_hook+0xc2/0x190 [ 61.190415][ T608] kfree+0xc4/0x270 [ 61.194198][ T608] l2tp_session_put+0xaf/0x1a0 [ 61.198939][ T608] pppol2tp_ioctl+0x748/0x960 [ 61.203590][ T608] pppox_ioctl+0x1e1/0x440 [ 61.207986][ T608] sock_do_ioctl+0x103/0x310 [ 61.212554][ T608] sock_ioctl+0x459/0x6d0 [ 61.216863][ T608] __se_sys_ioctl+0x121/0x1a0 [ 61.221519][ T608] __x64_sys_ioctl+0x7b/0x90 [ 61.226084][ T608] x64_sys_call+0x2f/0x9a0 [ 61.230475][ T608] do_syscall_64+0x4c/0xa0 [ 61.234868][ T608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.240738][ T608] [ 61.243036][ T608] Last potentially related work creation: [ 61.248721][ T608] kasan_save_stack+0x3a/0x60 [ 61.253375][ T608] __kasan_record_aux_stack+0xd2/0x100 [ 61.258817][ T608] kasan_record_aux_stack_noalloc+0xb/0x10 [ 61.264601][ T608] call_rcu+0x10b/0xf60 [ 61.268732][ T608] ip6_route_info_create+0xaa8/0x14d0 [ 61.274081][ T608] ip6_route_add+0x27/0x130 [ 61.278565][ T608] addrconf_prefix_route+0x233/0x310 [ 61.283833][ T608] inet6_addr_add+0x50b/0x9d0 [ 61.288487][ T608] inet6_rtm_newaddr+0x6e7/0x9c0 [ 61.293400][ T608] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 61.298316][ T608] netlink_rcv_skb+0x1e9/0x430 [ 61.303058][ T608] rtnetlink_rcv+0x1c/0x20 [ 61.307450][ T608] netlink_unicast+0x86c/0xa30 [ 61.312187][ T608] netlink_sendmsg+0x879/0xb80 [ 61.316928][ T608] __sys_sendto+0x46d/0x620 [ 61.321406][ T608] __x64_sys_sendto+0xe5/0x100 [ 61.326146][ T608] x64_sys_call+0x178/0x9a0 [ 61.330624][ T608] do_syscall_64+0x4c/0xa0 [ 61.335016][ T608] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.340888][ T608] [ 61.343188][ T608] Second to last potentially related work creation: [ 61.349746][ T608] kasan_save_stack+0x3a/0x60 [ 61.354400][ T608] __kasan_record_aux_stack+0xd2/0x100 [ 61.359833][ T608] kasan_record_aux_stack_noalloc+0xb/0x10 [ 61.365613][ T608] call_rcu+0x10b/0xf60 [ 61.369746][ T608] assoc_array_apply_edit+0x9fb/0xa50 [ 61.375096][ T608] key_link+0x4a2/0x5b0 [ 61.379228][ T608] look_up_user_keyrings+0x4c9/0x630 [ 61.384487][ T608] init_root_keyring+0x12/0x20 [ 61.389229][ T608] do_one_initcall+0x1fc/0x5a0 [ 61.393975][ T608] do_initcall_level+0x174/0x2e0 [ 61.398890][ T608] do_initcalls+0x50/0xa0 [ 61.403198][ T608] do_basic_setup+0x81/0x90 [ 61.407675][ T608] kernel_init_freeable+0x298/0x3d0 [ 61.412850][ T608] kernel_init+0x1d/0x1b0 [ 61.417157][ T608] ret_from_fork+0x1f/0x30 [ 61.421552][ T608] [ 61.423858][ T608] The buggy address belongs to the object at ffff88810c632c00 [ 61.423858][ T608] which belongs to the cache kmalloc-512 of size 512 [ 61.437883][ T608] The buggy address is located 128 bytes inside of [ 61.437883][ T608] 512-byte region [ffff88810c632c00, ffff88810c632e00) [ 61.451132][ T608] The buggy address belongs to the page: [ 61.456746][ T608] page:ffffea0004318c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c630 [ 61.466961][ T608] head:ffffea0004318c00 order:2 compound_mapcount:0 compound_pincount:0 [ 61.475261][ T608] flags: 0x4000000000010200(slab|head|zone=1) [ 61.481323][ T608] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042f00 [ 61.489882][ T608] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 61.498433][ T608] page dumped because: kasan: bad access detected [ 61.504815][ T608] page_owner tracks the page as allocated [ 61.510507][ T608] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2455316805, free_ts 2454141683 [ 61.530880][ T608] post_alloc_hook+0x192/0x1b0 [ 61.535623][ T608] prep_new_page+0x1c/0x110 [ 61.540105][ T608] get_page_from_freelist+0x2d42/0x2dd0 [ 61.545627][ T608] __alloc_pages+0x1a2/0x460 [ 61.550193][ T608] new_slab+0xa0/0x4d0 [ 61.554235][ T608] ___slab_alloc+0x3ac/0x840 [ 61.558803][ T608] __slab_alloc+0x49/0x90 [ 61.563109][ T608] __kmalloc+0x16a/0x2c0 [ 61.567328][ T608] kvmalloc_node+0x211/0x320 [ 61.571891][ T608] alloc_netdev_mqs+0x653/0xe20 [ 61.576716][ T608] ip6gre_init_net+0xff/0x340 [ 61.581373][ T608] ops_init+0x2c0/0x470 [ 61.585504][ T608] register_pernet_operations+0x2a0/0x600 [ 61.591197][ T608] register_pernet_device+0x2a/0x80 [ 61.596372][ T608] ip6gre_init+0x22/0x120 [ 61.600677][ T608] do_one_initcall+0x1fc/0x5a0 [ 61.605416][ T608] page last free stack trace: [ 61.610059][ T608] free_unref_page_prepare+0x5fa/0x600 [ 61.615496][ T608] free_unref_page+0xae/0x540 [ 61.620146][ T608] __free_pages+0x6c/0x100 [ 61.624537][ T608] free_pages+0x82/0x90 [ 61.628677][ T608] __stack_depot_save+0x453/0x480 [ 61.633678][ T608] __kasan_kmalloc+0xe6/0x100 [ 61.638335][ T608] __kmalloc_track_caller+0x13c/0x2c0 [ 61.643684][ T608] __alloc_skb+0x210/0x730 [ 61.648076][ T608] alloc_uevent_skb+0x85/0x240 [ 61.652817][ T608] kobject_uevent_net_broadcast+0x1a6/0x5a0 [ 61.658688][ T608] kobject_uevent_env+0x52b/0x700 [ 61.663687][ T608] kobject_uevent+0x1d/0x30 [ 61.668167][ T608] net_rx_queue_update_kobjects+0x212/0x460 [ 61.674039][ T608] netdev_register_kobject+0x23d/0x330 [ 61.679476][ T608] register_netdevice+0xeaa/0x1490 [ 61.684565][ T608] register_netdev+0x3e/0x50 [ 61.689129][ T608] [ 61.691428][ T608] Memory state around the buggy address: [ 61.697031][ T608] ffff88810c632b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 61.705067][ T608] ffff88810c632c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.713108][ T608] >ffff88810c632c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.721151][ T608] ^ [ 61.725196][ T608] ffff88810c632d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.733232][ T608] ffff88810c632d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 61.741262][ T608] ================================================================== [ 61.749292][ T608] Disabling lock debugging due to kernel taint [ 61.759290][ T887] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 61.764312][ T30] audit: type=1400 audit(1793680366.274:248): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 61.767287][ T887] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 61.789069][ T30] audit: type=1400 audit(1793680366.274:249): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.804471][ T887] Call Trace: [ 61.818575][ T608] ------------[ cut here ]------------ [ 61.829941][ T887] [ 61.832955][ T887] pppol2tp_release+0x150/0x2b0 [ 61.837869][ T887] sock_close+0xb8/0x200 [ 61.849705][ T887] ? sock_mmap+0xa0/0xa0 [ 61.854048][ T887] __fput+0x22b/0x900 [ 61.858064][ T887] ____fput+0x15/0x20 [ 61.860894][ T608] refcount_t: underflow; use-after-free. [ 61.865754][ T462] usb 1-1: device descriptor read/all, error -71 [ 61.867718][ T608] WARNING: CPU: 0 PID: 608 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 61.874414][ T887] task_work_run+0x127/0x190 [ 61.883264][ T608] Modules linked in: [ 61.883276][ T608] CPU: 0 PID: 608 Comm: kworker/u4:5 Tainted: G B syzkaller #0 [ 61.888184][ T30] audit: type=1400 audit(1793680366.274:250): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.891725][ T608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.900770][ T887] exit_to_user_mode_loop+0xd0/0xe0 [ 61.921807][ T608] Workqueue: l2tp l2tp_tunnel_del_work [ 61.931858][ T30] audit: type=1400 audit(1793680366.274:251): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.937161][ T608] [ 61.965751][ T464] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 221, changing to 7 [ 61.968559][ T30] audit: type=1400 audit(1793680366.274:252): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.979239][ T329] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.997529][ T887] exit_to_user_mode_prepare+0x87/0xd0 [ 62.016571][ T608] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 62.022919][ T887] syscall_exit_to_user_mode+0x1a/0x30 [ 62.028416][ T608] Code: 04 01 48 c7 c7 e0 57 63 85 e8 5c d0 5b 02 0f 0b eb c3 e8 13 59 19 ff c6 05 f2 c4 95 04 01 48 c7 c7 40 58 63 85 e8 40 d0 5b 02 <0f> 0b eb a7 e8 f7 58 19 ff c6 05 d3 c4 95 04 01 48 c7 c7 80 57 63 [ 62.036819][ T329] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.048377][ T887] do_syscall_64+0x58/0xa0 [ 62.061083][ T329] usb 3-1: config 0 interface 0 has no altsetting 0 [ 62.067509][ T608] RSP: 0018:ffffc900012e7c40 EFLAGS: 00010246 [ 62.072101][ T329] usb 3-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 62.077947][ T887] ? clear_bhb_loop+0x50/0xa0 [ 62.087152][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.091691][ T608] RAX: 8015376ef5162900 RBX: 0000000000000003 RCX: ffff888132f61400 [ 62.091706][ T608] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 62.091717][ T608] RBP: ffffc900012e7c50 R08: ffff8881f7027493 R09: 1ffff1103ee04e92 [ 62.091730][ T608] R10: dffffc0000000000 R11: ffffed103ee04e93 R12: ffff888106ff4020 [ 62.100589][ T887] ? clear_bhb_loop+0x50/0xa0 [ 62.107773][ T608] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 62.116013][ T329] usb 3-1: config 0 descriptor?? [ 62.134085][ T608] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 62.136405][ T887] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 62.144996][ T608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.149512][ T887] RIP: 0033:0x7f5c42ad7b19 [ 62.158171][ T608] CR2: 00007f85b5df62f8 CR3: 000000011a8d4000 CR4: 00000000003526a0 [ 62.164180][ T887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.170693][ T608] DR0: 0000000000000000 DR1: 0000000000008000 DR2: 0000000000000000 [ 62.175466][ T887] RSP: 002b:00007ffe0f9047b8 EFLAGS: 00000246 [ 62.183125][ T608] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 62.203322][ T887] ORIG_RAX: 00000000000001b4 [ 62.210753][ T608] Call Trace: [ 62.216735][ T887] RAX: 0000000000000000 RBX: 00007f5c42d5fda0 RCX: 00007f5c42ad7b19 [ 62.224750][ T608] [ 62.229418][ T887] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 62.232563][ T608] l2tp_session_put+0xc8/0x1a0 [ 62.240632][ T887] RBP: 00007f5c42d5fda0 R08: 0000000000000006 R09: 0000000000000000 [ 62.244450][ T608] l2tp_session_delete+0x3a9/0x4a0 [ 62.251582][ T464] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 62.256250][ T608] l2tp_tunnel_del_work+0x180/0x3d0 [ 62.264267][ T887] R10: 000000000003fc78 R11: 0000000000000246 R12: 000000000000f09b [ 62.269380][ T608] process_one_work+0x6c8/0xbb0 [ 62.283526][ T887] R13: 00007f5c42d5ef9c R14: 00007f5c42d5ef98 R15: 00007f5c42d5ef90 [ 62.294745][ T608] worker_thread+0xaa0/0x1250 [ 62.304339][ T464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.313149][ T608] ? __kasan_check_read+0x11/0x20 [ 62.317033][ T887] [ 62.324981][ T464] usb 6-1: Product: syz [ 62.326806][ T608] kthread+0x3f5/0x4f0 [ 62.329129][ T464] usb 6-1: Manufacturer: syz [ 62.329143][ T464] usb 6-1: SerialNumber: syz [ 62.333396][ T608] ? worker_clr_flags+0x190/0x190 [ 62.338010][ T887] ---[ end trace 7e34da3b56ed8893 ]--- [ 62.342473][ T608] ? kthread_blkcg+0xd0/0xd0 [ 62.357412][ T608] ret_from_fork+0x1f/0x30 [ 62.362042][ T608] [ 62.365050][ T608] ---[ end trace 7e34da3b56ed8894 ]--- [ 62.709290][ T464] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 62.729327][ T464] usb 6-1: unit 13 not found! [ 62.737258][ T464] usb 6-1: USB disconnect, device number 3 [ 62.969263][ T329] usbhid 3-1:0.0: can't add hid device: -71 [ 62.975207][ T329] usbhid: probe of 3-1:0.0 failed with error -71 [ 62.983836][ T329] usb 3-1: USB disconnect, device number 5