last executing test programs: 4.509920146s ago: executing program 1 (id=2001): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ftruncate(r2, 0x80000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) symlink(0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) ftruncate(0xffffffffffffffff, 0x5) mmap(&(0x7f00008b3000/0x1000)=nil, 0x1000, 0x2000007, 0x10, r1, 0x31512000) readahead(0xffffffffffffffff, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000040)={0x3e4, 0xd1, 0x0, 0x1}, 0x10) 4.490319668s ago: executing program 4 (id=2002): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) 4.484914388s ago: executing program 1 (id=2003): syz_open_dev$MSR(&(0x7f00000001c0), 0x4, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.377366749s ago: executing program 1 (id=2005): getgroups(0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x3220120) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff19181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 3.717480986s ago: executing program 3 (id=2010): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.509193636s ago: executing program 4 (id=2013): getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 2.696859239s ago: executing program 3 (id=2015): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc00000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000580012800b0001006772657461700000480002800400120006000f0004000000060010004e23000005000900f4000000080005000300000005000800040000000600030000010000060003000000000005000a0001"], 0xcc}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.507390107s ago: executing program 0 (id=2016): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$[\x00', @ANYRES16, @ANYBLOB="010028bd7000ff"], 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x4040000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x80, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0xb3a6, 0x0, 0xffffffffffffffff, 0xa, 0xd], 0x0, 0x141d01}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.504870798s ago: executing program 3 (id=2017): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) (fail_nth: 1) 2.307049418s ago: executing program 4 (id=2018): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000040), 0x4080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000010640)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b7032d7a3d77ba65f6179d16cef7c34648024212402e69cc86c8fce5989be545ce26a9c4f5f2165f36561402b40d94de59edbb0507bf01e3ece0fd57e13bef384234e823d81383eac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f473cd22efb03bcddff402dacf8c1372a5e8ff5bc5b6a5015037cf1236a6167a302d5d082a447099b4ee2bc4"], 0x1, 0x10600, &(0x7f0000020cc0)="$eJzs3D1vW1UYB/DHCX2llAr1hQHElRBSItVWnb4IFlSgFSDaqqIwMIFju5Zb2zeK3cR0YYEBiYmFL8EEn4EFdlZY2FhAYqso8r0niEAlIHHjQH4/6eZ/7vG5j8+xvBzf6AawZx3Lfvm5EkfjUETMR8SRiKJdSUfhYhlPRsQzqWsuHZXU/3vH/og4HBFHJ8XLmpX00lO/3vv+i2+uPP3xd59++8FnP92YzYqB3eC5iOivlO31fpl5p8xbqb+x1i2yf24tZflC/3Y6z8tcby8XFdYbG+MaRZ7tlOPzlTvDSd7sNZqT7HRvFv0rg/INh2udjTrFBbcaq8V5q71cZHeYF9m5W85rnPLucFTWaaV67xflYzTayLK/PW6X61m5XWRzMEr9Zd281R5Pci1lerto5r1WMY/lLX/Mu96V7uDOOFtrrw67+SA7X6s/X6tfqNZX81Z71D5XbfRbF85lC53eZFh11G70L3byvNNr15p5fzFb6DSb1Xo9W7jUXu42Blm9XjtbO1M9v5hap7NXr72d9VrZwiRf7g7ujLq9YXYzX83KKxazpdrZFxazZ+vZjavXs+tvXr589fpb715659pLV19/JQ36y7SyhaUzS0vV+pnqUn1xqys/fb+0V9dfGle2dz17nO8PwL+2lf3/nP0/sE32//b/saf3/9Yf9v9sl+8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCe9cO+L18rGsfK80dT/2Op64mIOBURJyPiRETcf4D52L+p5vGIqKT2g8bv+9McvqpEUWFyzYF0HI6Ii+m49/jD/hQAAADg/+vzrz/8KGJ+0iz+vDjrCbGT0o82B6dVr/jJ55FpVTteFBtPqdqJjZJTcTIi9h37cUrVTkXE3JH3plTtH5nfFAf/EJUy5nZyNgAAwM7YvBOY2u4NAACAXeeTWU+A2Sju16b/xU/3gg+UkW4IHto4e2MGswMAAACmoTLrCQAAAAAPXbH///vn/817/h8AAAD8h5XP/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA3du7mNnEgigP4A9YL+6VFKz5a4bTaIweK2BJyTAFJN7lRQyREHeSWEiKIsCdSHHGI5DFO0O8nmRlb8Nczt+exBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE0PxXp5t725bZqzPzST524AAACAU3bFellOxtX5j3T9V7r0JyLmETGLiGlEnOrdB/G1ljmJiF6an/p+8aaG+4gy4fibYTq+R8S/dDz9bvtfAAAAgMu13SxWEYPjtPz423VBnFN6aDPKlVc+8vmSK21Shl1nSpu+RGYxi4hi/JgpbR4R/Z//M6W9y6A2jF4NvWron7MaAADgPOqdQLbuDQAAgA/nqusC6Ea5XpvexU9rwcNqSAuC32pnAAAAwCfU67oAAAAAoHVl/2//PwAAALhs1f5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtGlXrJfbzWLVNGd/aCbP3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLM/LykYwkAQBvt/qncK3v9WSoNudeWuCgIfM4QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCuv4+R9xqexJvl22vh1PJL8u2pMXTXmrhtLL4zb57bnfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCzPy8nAAIxGAbjW3ta7L8mL8oPevYmCDMgfCQEWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBvuvur/okhsVfVmGliyrhV1ZxVYskqseYgseWgvf3tOD94EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMUOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX2590mYiCMwuj1AAInBFACucWjBhIiBCXwkJAsuQYKoCESIlKLRtgWdiXvON7MG+w5yf2CCeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OCsd744StKkzFlSHj4v/4+TnKR8jeP96ZTN9+pvONvm88/vY82LPF21Sdo0S5wDALC4bt4pzvP+0b9dJ9Pe1L2te1e3exn61/1+GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA27NzPSxRvHAfwZ1d3v1+7dekQBWVBQtT6A3EVL0WBBf0D3hbdRFpL1ENKEHaRLkGX7l261M1Tp/6DTl0iCuq+QUEEQRi7O2OPqbFedlZ6veCZ+TgMM88zB+E9n1EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoL4ezqd1LoRwvPd33fD2y72Zvfb1+8dG0/Ho5PPF+JqNSxRCCDfna9XBDq6lm50Nw839h88PB+Jn+Od5y6trtyq1WnVJoVAotosMfmkBAHBoFZLRyPUfC5tTjWO5yRC2nu7M/+eiOrSZ/7eeDLyO7xXn/6GOrbC7pfl/+vrGxN/yf2llYbG0vLp2YX6hMledq94eGhsfGxwpjw6PlZrvU0reqgAAALC/YjLi/J+f3N3/PxLVoc38/+rlten4Xj3y/y5p/r/c3/+svf5/BpMEAAD4Rxw99e1rbo/juWIx3K2srCwNtbbbPw+3thlM9cD+S0ac/3sms54VAAAA0An19dyO/v9sVIc2+//vv185EV+zJ4TQl/T/L87cqc12bjldK+3/T1yq3Mj67/8zWD4AAAAd0peMuP9faH7/nz+dnpMPIQycadXJvwFsK///fDD+Jr5X/P3/SOeW2JXy5dbzSPP/xrsX8/vl/+a55RB6yxlNFgAAgEPv/2Q08v+nwubU0o/HV4u+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/s2DFKM0EUB/BJNvm+RjEgiKWFNhaigmAVsBAkHsJCFASPEBAPoOBZLLyDSOqk9AApvIHMZEfCNirIrobfDyb/R9hk3840eQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE9Nj8JGrov40pvV7fK98dvwPOakkumzN2sHccW6VW/bf856mc+T06fx3B62DpvrCQAAgMVT5Pk+hPDafTyJ2e6n+X8rXxNn/uHyrM7zfHXuz5ln/7iWHoqzjxv1ZvfphhAur64vdmt7wt9tM+ynHLxs38/vYfW6lS98VyedT/qHpkjH1h7crk67addbd6PR8b9U/v/5pwAAvmsnZ1nk30cx95psDICF1SlXmJv/i36zPQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU4T0AAP//F6aahA==") openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32=r4], 0x30}], 0x1}, 0x0) 2.221192506s ago: executing program 3 (id=2020): mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x80200, &(0x7f0000000c00)="1af6ed8ecac04ed6273d2ff1b95426f50df6642245da1c88a80c8bb56d78f091300af8040ca4ccfcede747819b8f3eafd512", 0x32, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)="33beaec8a81b279f662a832236442c87eb5f1f5f2ef66ef5f02978bca1dbd78e6bc4ef5c974b0175dcf0b765fb37d1d408895037873230b0d305ca143b9966ec66e17342a5404ef5af0d0be20c6f25796ed31ceb6318") syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0030020000000a23"], 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x60, 0x0, 0x0, 0x1, 0x6, 0x16b}}}, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0x9, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "a4bb914365"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x975, 0x1, 0xe}, {0x6, 0x24, 0x1a, 0xec7, 0xb}, [@acm={0x4, 0x24, 0x2, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x8, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xb, 0x3, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x4e56021a0f17856f, 0x1, 0x3, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0xf3, 0xfa}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x10, 0x4, 0x1, 0x0, 0x3}, 0x2e, &(0x7f00000000c0)={0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x7, 0x4}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x8, 0xff00, 0x2, [0x3f00, 0xffc00f, 0xff0000]}]}, 0x1, [{0xbe, &(0x7f0000000100)=@string={0xbe, 0x3, "69bb56b76baf351bf578d177d5d2879eff0c3e4eed38802122b59a0379e82a11516981dfea52ea71418b2ab475be5261806bb814f8c73cce50cf3343fb648de4547344fa877f7da913badc64a3e90977298c100ecc5eae7abde0614f2041648ad156e8ec6c2faa4f07475ded745f1e344a72d0c172c2f3a803add3f47717f7e2600115031cdaa2dcbb8c8d9c8da13bdb23da2e818d38c518317058cd995210d4bb4968a69feba77150d1278327bc5df8d9dd5a40c59426eb9fc41902"}}]}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x40, 0x8, 0xec, {0xec, 0x22, "c574176e3a86a911b7f70dd1a6f2e273a3691fa5861ad03e44590af89908cc75862644701ecfe8d00006cc81006b8203251921ad59d4c964de3e5bab55c3e917f3fd038422a9a4acb4179e3069cb9c653179a91fc6512bc8332567726be93bbf2e63502c4f629499c99baf5b1fff7f90ab6b81c3f46b858936d2b54867d3d43ec260c33f18008bcbe43cba1ceee803f4867ce8a4ce8712bf089e4cb4f7e25faf634f1c3a942bb810c5e57889cf1267f2b70d770b4242c9fba0163be1fb9004ac9a67788ce2adf52717db8f985d3d74d53b398c527c3c97cfdbe7b751e2d24178f113eb19a5b0b1713c5c"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, &(0x7f0000000400)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xc, 0x0, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x9, 0x2, 0x7e2d}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x2, 0x8, "80e89b8a", "117a7ce1"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1a, 0x98, 0x4, 0xf, 0x1, 0x7}}}, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x20, 0x9, 0xac, "ae01cdc014a86c13d52b1b1af684b0c1e6dab58c94c3bb8a93868826f2bbbf93e12a53e6b770ca89c0b4b99d1a7f7ea3810670a33d44d0b9533778301f3b0a05caf1e56f25f7f49190efdbbd866a2c72d02a966cfc01267d4d65c59c61499a464998c818a10213a602c269d40512df5cc144a48b58bdda6ef5ae08ecffc88f868aaf23ba746365734a3adb620a5ec105e4cfe39387195f3ef15e211c701d27aa1b13c18d8a227da29b677229"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x10, 0x10}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x1000}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000740)={0x40, 0xb, 0x2, 'J;'}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x1}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x19, 0x2, "dd2b"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0xd9}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0xfb}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x2}}) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x5, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x96, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0x5, 0x40}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x6, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x4, 0xf}}}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x200, 0x1, 0x6, 0x8, 0x8, 0x3}, 0xb, &(0x7f0000000b00)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x427}}]}) 2.220058887s ago: executing program 0 (id=2021): prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.766281752s ago: executing program 1 (id=2024): syncfs(0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {0xfff2}, {0xb}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0x0, 0x2, {{0x19, 0x4, 0x0, 0x5, 0x64, 0x64, 0x0, 0x68, 0x2f, 0x0, @local, @private=0xa010100, {[@timestamp_addr={0x44, 0x24, 0x8b, 0x1, 0x1, [{@private=0xa010101, 0x1}, {@local, 0x8}, {@loopback, 0x2}, {@private=0xa010102, 0x1}]}, @timestamp_prespec={0x44, 0x2c, 0x93, 0x3, 0x2, [{@multicast2, 0x4}, {@private=0xa010100, 0xc9}, {@empty, 0xfffffff7}, {@multicast1, 0x9}, {@empty}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x0, 0x5, 0x6, 0x1, 0x3, @rand_addr=' \x01\x00', @remote, 0x10, 0x7880, 0x8, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x81, 0x8, 0x9, 0x78, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x40, 0x9}}) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xd0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xfffd]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r9 = socket(0x11, 0x3, 0x0) bind$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x10c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24000010}, 0x40000) r10 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(r11, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r10) preadv2(r12, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 1.358332853s ago: executing program 4 (id=2025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.315336157s ago: executing program 0 (id=2026): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="cea859b8b02b71285483d1cee658a305f8b24400000026ce8a4c6d442a54000000000000000000455d4719560312b521ffb98c3443f367a806c15f0aaafcfbac37c94fa031ea26d7445cde24ca6be0ceb77c13129c99c2e60a741d45d2c0733eaca6f86ca6d1c365d82e664a90747ca1875b0c04de58528b0193eced80916767465880733edb8a1899fa2538764617408c9540fe2ae5cacc7294984bd6563511c27658861c29e3f8e84beff0a89d202c5022000000000000000000000000002099e4a9915da7d4c46b2e3cfd5df78d98dbceefdc0ca275264988faba5b1f5f8d44d3099a81317a1f29d3f19f6ad3e9e2e88e7f86a9f1472c4a2f2e18d3143df0452612676458b81125662ca0ca2eb84c281f44b6e3828f395121ef35d4b506b714f89c9651fd13c32f46a55acd2f6c6bba78ce175db2537072db3c69e100a17c1ee18ed79dac1a528d09d43cae7fb2c5c606b5813573beb3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x8000000010, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet(0x2, 0x3, 0x4) 1.268898082s ago: executing program 0 (id=2027): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r4, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1.015544238s ago: executing program 2 (id=2030): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010028bd7000ff"], 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x4040000) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x80, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0xb3a6, 0x0, 0xffffffffffffffff, 0xa, 0xd], 0x0, 0x141d01}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 968.009443ms ago: executing program 2 (id=2031): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 1) 879.277241ms ago: executing program 0 (id=2032): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mkdir(&(0x7f0000000100)='./bus\x00', 0xc) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x805, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x15, 0x526d630517582f27, 0xfe}) sendmmsg$inet6(r8, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) 750.572524ms ago: executing program 0 (id=2033): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000001c0)="8c94d04e8adaba1f235487e1b53abae72bfb46dcbe413866ec815c5c0eb2a265d130e9ab5eb393462395e393f88840686f4cecb0549a0ff014944f3b37957e66c7943d336009dcdc5e561302284fe3d3f7", 0x51}, {&(0x7f00000003c0)="96e2f1c58f026d7ca63ee76520c1a64e0366c84c7c2841a3aa8d768c3a2dbc2d12a7c19e02510db6e581229ebf199ea87d8dd9c3f683e13b2de868eec1787b8c8c320c033947f5d953345f6dd62b1ce5c9b4dfa6e6b7f10b805eb80c6db8f6996057b1f90efe4bd4d29144a62c2f2dc2b19d00dc1f4af51d7a55ab35e15ad235ceb188278c32bb98429cd0ecb0b730f11f3da4a6df39318bb0cbb4af6593730536575c9f955c351d1de104165d8ad70d69533aa754f73e2cf0c0dcd6a01f2a93737db9b0e534b67085b48058a3290e5d4d1b73b9e21238d80fa7c330b4226164a69d19276026", 0xe6}, {&(0x7f0000000240)="658b6ab265efad11b4b6323070434ef3e75cb0a41bc668f3d8486142ff723ca7b339067f9d1374be90deccd892dfd0fe5a48202e324aa61434ca051bd33d7e3c89bff90c52b76e8149514c06812b4a6153022af1df68f76413ba38fbaff88573d4f4a11f3d85ce69baa4a117f5d59b3c16", 0x71}, {&(0x7f0000000540)="1bab8cfb9dcef61c5f3fbf8e2b94fb456e7967298a0268a8610f21ab815a43cf9d9a3af37584819099ba7cd93fb6766e76866d1584a0fcaf53b76b7354b096a5d17f9f2de3e78510acf0cea4dc450343cac2c91e9e63", 0x56}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="ef5eda4826c6d854e04f77640aff566b0cf1a5d1e434f522ca46da8a7d53f862e0bb84c127ba2d2b8db7d05f5007d3483d92c8b8c25ed60ecb9fd196ab42566f2755279475a1fe5301b7a44449a1895695053f4405ec120ba10f9e695630fa7748825d90cb6d3ffb166c67e5873eb59e1541cb07a5a38ac055db401a51efe15540fe09deb94ad9cb4f23f82bc352af66ef6ce52dcce85a9122527fcec0b08b0d8b6af4276ebaa07f3462b0a23f21c97df0618dce99b62af3e1a11ace2a4349e5f2d3daa971baeae572f2ffc4fa910aca07bd40cb4907ac8a5e4369761032071983a786a4982665f4afca7fdcc28f199aa49c3179d1f2e8", 0xf7}, {&(0x7f00000016c0)="9a880dfd5073713483f817a18589b53f3e0c33a67bf9618aae55bace10e11e4205b3a1de899acf1ac386f1dfa3eb6845cd35f51bae4ab9b8c861eab39a118d849389a49910093f2418be6ee4a5142f6e8fb33e3802da", 0x56}, {&(0x7f0000001740)="27670716ae7e5e3b253daf3c3e32c1d343a953ba1c6d3e88d0d0ad08d89515a7d6adb768a6594d98c75037a40cbd2b30d61ac0d23608f3a8301b68acc00d5514284a8f8bb32344740c53d47a0937c415fcd3d736392f4890fa990ccf07466d9e21b6ea6698f386ff256584ef94dd65047bc121413b739bfc1579a66acfcdfe67bc1a560f7f7b891eef30862c0df6717b19612ec48f512a068c61de018393b7546a567dc4", 0xa4}], 0x8, &(0x7f0000001c00)=[@flowinfo={{0x14, 0x29, 0xb, 0xfff}}, @rthdr={{0x38, 0x29, 0x39, {0x2c, 0x4, 0x2, 0x0, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2e, 0x4, 0x2, 0x2b, 0x0, [@private0, @private0]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0xff, 0xc, 0x0, 0x2, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7f}}, @flowinfo={{0x14, 0x29, 0xb, 0x11ef}}, @rthdr={{0xa8, 0x29, 0x39, {0x6c, 0x12, 0x1, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @private1, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback]}}}, @dstopts={{0xd8, 0x29, 0x37, {0xaa638c735e2d1323, 0x17, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x40, 0x5, [0x52, 0x3, 0x7fff, 0xb]}}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x7, [0x3fc, 0x3, 0x4, 0x3, 0x4, 0x0, 0x109f, 0x2, 0x6]}}, @hao={0xc9, 0x10, @remote}]}}}], 0x2b0}}], 0x2, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r5, @ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x805, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x6, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) 594.07185ms ago: executing program 1 (id=2034): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, 0x0) 570.666583ms ago: executing program 2 (id=2035): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 566.943513ms ago: executing program 1 (id=2036): prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 551.604125ms ago: executing program 2 (id=2037): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x0, r5) (fail_nth: 1) 267.275203ms ago: executing program 2 (id=2038): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x6}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'veth1_to_bond\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b03feff4f12021202004788aa96", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 263.368753ms ago: executing program 2 (id=2039): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/fscaps', 0x149a82, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) munlockall() bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 224.820597ms ago: executing program 4 (id=2040): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000030000000f00000008000300", @ANYRES32, @ANYBLOB="4a000e"], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x2}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x880) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 127.186957ms ago: executing program 3 (id=2041): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="f63daa184e5d59f7a46f63bb7e7cf68d085493d9ab0500302053bcb491a749814d26612ac5a3eea7fd5131d405cf3705a22280a549c416fa46e69e0fad97650a8dd24a7e3132fa70134e1070793d0812feb94640482621fbf971188ef995995af9eff19a9a53f07ba52d7dd45c00c86dcad64fe7c4d3ff39ce102abfa0f41fd79447aaf3c2a28dcddfe6ca4451588ac5c5318b6980f4d1748031caef4f69b2f4207731300b53ce6e2cc9e1af98631ac36afe0afb5eb909968e9638", 0xbb}], 0x1, &(0x7f0000000380)="f74dee90ae48357e665be39a3341645302d7cd2575b95aba80b307e013037edf82f556d1491f71dc180a1b17858a0a63cc5d9ed34fc5085ea425888dd7ee8582ba7c7fd9d583d493301879f82807fb755f0e93169f2289fc3af3c765230dbec6d94a84ccb12309ec5749c9007bd788240ed3214dfda544c218070ff44414221df860f3659ec8241a038c9beed72deec011b9e8acf5bd87", 0x97, 0x48081}, 0x41) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000009c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) tgkill(r0, r0, 0x35) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x9, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310900000010fe1406584afd8d74b8830793b848194e1df82d00", [0x6, 0x9]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) 0s ago: executing program 3 (id=2043): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x48d4}, 0x4040000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x80, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0xb3a6, 0x0, 0xffffffffffffffff, 0xa, 0xd], 0x0, 0x141d01}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): " exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 384.544683][ T24] audit: type=1326 audit(1763157515.940:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 384.568335][ T24] audit: type=1326 audit(1763157515.940:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 384.644193][ T24] audit: type=1326 audit(1763157515.940:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6145 comm="syz.3.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 385.082000][ T6164] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 385.092405][ T6167] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1554: Invalid block bitmap block 0 in block_group 0 [ 385.106089][ T6167] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1554: Failed to acquire dquot type 0 [ 385.158033][ T6167] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1554: Freeing blocks not in datazone - block = 0, count = 4096 [ 385.816845][ T6167] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1554: Invalid inode bitmap blk 0 in block_group 0 [ 385.817206][ T463] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 385.845378][ T6167] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 385.901053][ T6184] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1562: Invalid block bitmap block 0 in block_group 0 [ 385.931589][ T6184] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1562: Failed to acquire dquot type 0 [ 385.943289][ T6184] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.1562: Freeing blocks not in datazone - block = 0, count = 4096 [ 385.957885][ T6184] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1562: Invalid inode bitmap blk 0 in block_group 0 [ 385.970881][ T6184] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 385.980192][ T6184] EXT4-fs (loop3): 1 orphan inode deleted [ 385.985968][ T6184] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 386.037101][ T6184] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.1562: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 386.135612][ T6167] EXT4-fs (loop0): 1 orphan inode deleted [ 386.147551][ T463] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 386.525353][ T6167] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 386.652559][ T6191] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 387.145919][ T6206] binder: Unknown parameter 'conte' [ 387.336503][ T6211] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 387.430549][ T6215] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 387.534733][ T6215] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.785820][ T6215] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 387.825905][ T6230] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1572: Invalid block bitmap block 0 in block_group 0 [ 387.840041][ T6230] __quota_error: 87 callbacks suppressed [ 387.840060][ T6230] Quota error (device loop0): write_blk: dquota write failed [ 387.853138][ T6230] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 387.863155][ T6230] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1572: Failed to acquire dquot type 0 [ 387.875105][ T6230] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1572: Freeing blocks not in datazone - block = 0, count = 4096 [ 387.888997][ T6230] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1572: Invalid inode bitmap blk 0 in block_group 0 [ 387.901862][ T6230] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 387.910762][ T6230] EXT4-fs (loop0): 1 orphan inode deleted [ 387.916506][ T6230] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 387.970164][ T6230] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.1572: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 387.998081][ T49] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 388.063478][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 388.172839][ T6215] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #2: comm syz.2.1571: mark_inode_dirty error [ 388.564975][ T6215] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 388.584238][ T6215] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.1571: mark_inode_dirty error [ 389.128815][ T6239] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1574: Invalid block bitmap block 0 in block_group 0 [ 389.142854][ T6239] Quota error (device loop0): write_blk: dquota write failed [ 389.150309][ T6239] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 389.160342][ T6239] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1574: Failed to acquire dquot type 0 [ 389.172423][ T6239] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1574: Freeing blocks not in datazone - block = 0, count = 4096 [ 389.186245][ T6239] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1574: Invalid inode bitmap blk 0 in block_group 0 [ 389.199122][ T6239] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 389.207952][ T587] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 389.208037][ T6239] EXT4-fs (loop0): 1 orphan inode deleted [ 389.222276][ T6239] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 389.279283][ T6239] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.1574: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 389.298006][ T587] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 389.983544][ T6243] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 390.027926][ T24] audit: type=1326 audit(1763157521.590:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 390.079632][ T24] audit: type=1326 audit(1763157521.610:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 390.134447][ T24] audit: type=1326 audit(1763157521.610:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 390.164907][ T24] audit: type=1326 audit(1763157521.610:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.3.1579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 390.942142][ T6263] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 391.896057][ T6289] xt_bpf: check failed: parse error [ 392.308934][ T6298] binder: Unknown parameter 'conte' [ 392.498515][ T6296] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 392.574301][ T6307] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 393.402377][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 393.402390][ T24] audit: type=1326 audit(1763157524.960:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.1.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 393.432199][ T24] audit: type=1326 audit(1763157524.990:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.1.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 393.490223][ T24] audit: type=1326 audit(1763157524.990:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.1.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 393.575597][ T24] audit: type=1326 audit(1763157524.990:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.1.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 393.599567][ T24] audit: type=1326 audit(1763157524.990:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.1.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 393.623658][ T24] audit: type=1326 audit(1763157524.990:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.1.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 393.647585][ T24] audit: type=1326 audit(1763157524.990:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.1.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 393.671320][ T24] audit: type=1326 audit(1763157524.990:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.1.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 393.695578][ T24] audit: type=1326 audit(1763157524.990:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.1.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 393.841491][ T329] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 393.928738][ T6339] binder: Unknown parameter 'conte' [ 393.937032][ T24] audit: type=1326 audit(1763157524.990:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6323 comm="syz.1.1597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 393.965399][ T6333] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 393.974410][ T6333] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.990152][ T6333] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 393.998602][ T6333] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #2: comm syz.0.1599: mark_inode_dirty error [ 394.010611][ T6333] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 394.019012][ T6333] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #2: comm syz.0.1599: mark_inode_dirty error [ 394.111261][ T329] usb 4-1: Using ep0 maxpacket: 32 [ 394.306949][ T329] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 394.438106][ T6354] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 394.496949][ T329] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 394.506146][ T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.514216][ T329] usb 4-1: Product: syz [ 394.518438][ T329] usb 4-1: Manufacturer: syz [ 394.523111][ T329] usb 4-1: SerialNumber: syz [ 395.138513][ T6329] udc-core: couldn't find an available UDC or it's busy [ 395.169732][ T6329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 395.309586][ T6329] udc-core: couldn't find an available UDC or it's busy [ 395.316612][ T6329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 395.336078][ T6329] udc-core: couldn't find an available UDC or it's busy [ 395.374875][ T6329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 395.502031][ T6372] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1609: Invalid block bitmap block 0 in block_group 0 [ 395.516632][ T6372] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1609: Failed to acquire dquot type 0 [ 395.529230][ T6372] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1609: Freeing blocks not in datazone - block = 0, count = 4096 [ 395.543205][ T6372] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1609: Invalid inode bitmap blk 0 in block_group 0 [ 395.556328][ T6372] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 395.565136][ T587] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 395.576649][ T6372] EXT4-fs (loop0): 1 orphan inode deleted [ 395.582419][ T6372] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 395.634358][ T6372] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.1609: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 395.888364][ T6367] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1608: Invalid block bitmap block 0 in block_group 0 [ 396.412453][ T15] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 396.442524][ T6367] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1608: Failed to acquire dquot type 0 [ 396.637234][ T6367] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.1608: Freeing blocks not in datazone - block = 0, count = 4096 [ 396.707024][ T329] usbhid 4-1:1.0: can't add hid device: -71 [ 396.721885][ T329] usbhid: probe of 4-1:1.0 failed with error -71 [ 396.729300][ T6389] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 396.754896][ T329] usb 4-1: USB disconnect, device number 6 [ 396.787773][ T6367] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1608: Invalid inode bitmap blk 0 in block_group 0 [ 396.806899][ T587] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 396.851561][ T6367] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 396.876286][ T6367] EXT4-fs (loop4): 1 orphan inode deleted [ 396.893114][ T6367] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 396.906876][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 397.116910][ T15] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 397.376977][ T15] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 397.390555][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.406397][ T15] usb 3-1: Product: syz [ 397.417561][ T15] usb 3-1: Manufacturer: syz [ 397.430022][ T15] usb 3-1: SerialNumber: syz [ 397.636307][ T6406] xt_bpf: check failed: parse error [ 398.137133][ T6377] udc-core: couldn't find an available UDC or it's busy [ 398.146184][ T6377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 398.163051][ T6377] udc-core: couldn't find an available UDC or it's busy [ 398.179926][ T6377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 398.204984][ T6377] udc-core: couldn't find an available UDC or it's busy [ 398.214380][ T6377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 398.665655][ T6421] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 398.674920][ T6421] ext4 filesystem being mounted at /337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.685418][ T15] usbhid 3-1:1.0: can't add hid device: -71 [ 398.685424][ T24] kauditd_printk_skb: 100 callbacks suppressed [ 398.685440][ T24] audit: type=1326 audit(1763157530.250:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 398.691540][ T15] usbhid: probe of 3-1:1.0 failed with error -71 [ 398.717803][ T24] audit: type=1326 audit(1763157530.260:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 398.730524][ T15] usb 3-1: USB disconnect, device number 7 [ 398.751816][ T6421] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 398.774617][ T24] audit: type=1326 audit(1763157530.260:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 398.779800][ T6421] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.1625: mark_inode_dirty error [ 398.804083][ T24] audit: type=1326 audit(1763157530.260:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 398.830223][ T6421] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 398.833588][ T24] audit: type=1326 audit(1763157530.260:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 398.852274][ T6421] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1625: mark_inode_dirty error [ 398.875796][ T24] audit: type=1326 audit(1763157530.260:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 398.902847][ T24] audit: type=1326 audit(1763157530.260:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 398.926295][ T24] audit: type=1326 audit(1763157530.260:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 398.949869][ T24] audit: type=1326 audit(1763157530.260:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 398.973360][ T24] audit: type=1326 audit(1763157530.260:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 399.103403][ T6431] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 399.451121][ T6442] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1630: Invalid block bitmap block 0 in block_group 0 [ 399.465135][ T6442] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1630: Failed to acquire dquot type 0 [ 399.476983][ T6442] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1630: Freeing blocks not in datazone - block = 0, count = 4096 [ 399.490867][ T6442] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1630: Invalid inode bitmap blk 0 in block_group 0 [ 399.503834][ T6442] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 399.512667][ T6442] EXT4-fs (loop0): 1 orphan inode deleted [ 399.518433][ T6442] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 399.568413][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 400.248001][ T6454] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 400.483954][ T6465] xt_bpf: check failed: parse error [ 400.957652][ T6479] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1634: Invalid block bitmap block 0 in block_group 0 [ 401.001587][ T6479] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1634: Failed to acquire dquot type 0 [ 401.042137][ T6479] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.1634: Freeing blocks not in datazone - block = 0, count = 4096 [ 401.057643][ T6479] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1634: Invalid inode bitmap blk 0 in block_group 0 [ 401.070910][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 401.115958][ T6479] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 401.274968][ T6479] EXT4-fs (loop3): 1 orphan inode deleted [ 401.345493][ T6479] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 401.822258][ T6497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 402.673513][ T6520] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 403.088223][ T6534] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1652: Invalid block bitmap block 0 in block_group 0 [ 403.102340][ T6534] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1652: Failed to acquire dquot type 0 [ 403.113851][ T6534] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.1652: Freeing blocks not in datazone - block = 0, count = 4096 [ 403.127990][ T6534] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1652: Invalid inode bitmap blk 0 in block_group 0 [ 403.140869][ T6534] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 403.149593][ T6534] EXT4-fs (loop4): 1 orphan inode deleted [ 403.155366][ T6534] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 403.170211][ T49] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 403.184737][ T6538] binder: Unknown parameter 'conte' [ 406.206738][ T6583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 406.486863][ T4680] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 406.733063][ T6598] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 406.742157][ T4680] usb 2-1: Using ep0 maxpacket: 32 [ 406.758234][ T6598] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.788783][ T6598] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 406.797354][ T6598] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.1671: mark_inode_dirty error [ 406.813789][ T6598] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 406.833110][ T6598] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1671: mark_inode_dirty error [ 406.957405][ T4680] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 406.997903][ T24] kauditd_printk_skb: 44 callbacks suppressed [ 406.997917][ T24] audit: type=1326 audit(1763157538.560:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 407.035009][ T24] audit: type=1326 audit(1763157538.560:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 407.058738][ T24] audit: type=1326 audit(1763157538.560:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 407.082994][ T24] audit: type=1326 audit(1763157538.560:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 407.106521][ T24] audit: type=1326 audit(1763157538.560:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 407.130993][ T24] audit: type=1326 audit(1763157538.560:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 407.154881][ T24] audit: type=1326 audit(1763157538.560:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 407.178730][ T24] audit: type=1326 audit(1763157538.560:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 407.187006][ T4680] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 407.211291][ T24] audit: type=1326 audit(1763157538.560:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 407.211308][ T24] audit: type=1326 audit(1763157538.560:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.0.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 407.234998][ T15] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 407.506897][ T15] usb 3-1: Using ep0 maxpacket: 32 [ 407.552866][ T6629] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1682: Invalid block bitmap block 0 in block_group 0 [ 407.567119][ T6629] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1682: Failed to acquire dquot type 0 [ 407.579182][ T6629] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1682: Freeing blocks not in datazone - block = 0, count = 4096 [ 407.593379][ T6629] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1682: Invalid inode bitmap blk 0 in block_group 0 [ 407.606432][ T6629] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 407.615247][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 407.626724][ T6629] EXT4-fs (loop0): 1 orphan inode deleted [ 407.632508][ T6629] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 407.847017][ T15] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 408.311046][ T4680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.319076][ T4680] usb 2-1: Product: syz [ 408.323230][ T4680] usb 2-1: Manufacturer: syz [ 408.327831][ T4680] usb 2-1: SerialNumber: syz [ 408.436981][ T15] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 408.446173][ T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.454243][ T15] usb 3-1: Product: syz [ 408.576296][ T6642] binder: Unknown parameter 'conte' [ 408.734849][ T15] usb 3-1: Manufacturer: syz [ 408.739703][ T15] usb 3-1: SerialNumber: syz [ 408.750789][ T6647] binder: Unknown parameter 'conte' [ 408.798212][ T6649] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 408.807217][ T6649] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 408.819220][ T6649] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 408.827606][ T6649] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #2: comm syz.0.1689: mark_inode_dirty error [ 408.839125][ T6649] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 408.847524][ T6649] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #2: comm syz.0.1689: mark_inode_dirty error [ 408.907310][ T6589] udc-core: couldn't find an available UDC or it's busy [ 408.914292][ T6589] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 408.922351][ T6589] udc-core: couldn't find an available UDC or it's busy [ 408.929467][ T6589] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 408.937687][ T6589] udc-core: couldn't find an available UDC or it's busy [ 408.944725][ T6589] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 409.287947][ T6615] udc-core: couldn't find an available UDC or it's busy [ 409.311308][ T6615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 409.325122][ T6660] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1692: Invalid block bitmap block 0 in block_group 0 [ 409.343700][ T6660] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1692: Failed to acquire dquot type 0 [ 409.356080][ T6660] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1692: Freeing blocks not in datazone - block = 0, count = 4096 [ 409.370096][ T6660] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1692: Invalid inode bitmap blk 0 in block_group 0 [ 409.383612][ T6660] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 409.392491][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 409.404698][ T6660] EXT4-fs (loop0): 1 orphan inode deleted [ 409.410507][ T6660] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 409.460416][ T6660] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.1692: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 409.574351][ T6615] udc-core: couldn't find an available UDC or it's busy [ 409.720584][ T6615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 410.135990][ T6615] udc-core: couldn't find an available UDC or it's busy [ 410.184605][ T6615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 410.196888][ T4680] usbhid 2-1:1.0: can't add hid device: -71 [ 410.202970][ T4680] usbhid: probe of 2-1:1.0 failed with error -71 [ 410.215196][ T4680] usb 2-1: USB disconnect, device number 5 [ 410.782961][ T15] usbhid 3-1:1.0: can't add hid device: -71 [ 410.795511][ T15] usbhid: probe of 3-1:1.0 failed with error -71 [ 410.827365][ T15] usb 3-1: USB disconnect, device number 8 [ 410.984422][ T6683] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 410.998452][ T6687] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1698: Invalid block bitmap block 0 in block_group 0 [ 411.012594][ T6687] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1698: Failed to acquire dquot type 0 [ 411.025192][ T6687] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.1698: Freeing blocks not in datazone - block = 0, count = 4096 [ 411.039299][ T6687] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1698: Invalid inode bitmap blk 0 in block_group 0 [ 411.052748][ T6687] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 411.061672][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 411.139190][ T6687] EXT4-fs (loop4): 1 orphan inode deleted [ 411.145006][ T6687] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 411.195907][ T6687] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.1698: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 411.296672][ T6683] ext4 filesystem being mounted at /349/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.619453][ T6683] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 411.637043][ T6683] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.1700: mark_inode_dirty error [ 411.800341][ T6683] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 411.859366][ T6683] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1700: mark_inode_dirty error [ 412.548666][ T6715] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1708: Invalid block bitmap block 0 in block_group 0 [ 412.635745][ T6715] __quota_error: 105 callbacks suppressed [ 412.635756][ T6715] Quota error (device loop0): write_blk: dquota write failed [ 412.648997][ T6715] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 412.659018][ T6715] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1708: Failed to acquire dquot type 0 [ 412.680990][ T6715] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1708: Freeing blocks not in datazone - block = 0, count = 4096 [ 412.695411][ T6715] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1708: Invalid inode bitmap blk 0 in block_group 0 [ 412.708976][ T6715] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 412.717793][ T6715] EXT4-fs (loop0): 1 orphan inode deleted [ 412.723557][ T6715] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 412.775362][ T6715] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.1708: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 412.794208][ T49] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 412.895286][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 413.220300][ T24] audit: type=1326 audit(1763157544.780:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 413.405686][ T24] audit: type=1326 audit(1763157544.800:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 413.520019][ T24] audit: type=1326 audit(1763157544.800:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 413.560958][ T24] audit: type=1326 audit(1763157544.800:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 413.966092][ T6745] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 413.976967][ T6745] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 414.004945][ T24] audit: type=1326 audit(1763157544.800:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 414.010719][ T6745] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 414.028985][ T24] audit: type=1326 audit(1763157544.800:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 414.060083][ T24] audit: type=1326 audit(1763157544.800:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 414.081458][ T6745] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #2: comm syz.1.1719: mark_inode_dirty error [ 414.126904][ T6745] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 414.148630][ T6745] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1719: mark_inode_dirty error [ 414.201092][ T6759] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 414.766187][ T6771] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1724: Invalid block bitmap block 0 in block_group 0 [ 414.779939][ T6771] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1724: Failed to acquire dquot type 0 [ 414.804999][ T6771] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.1724: Freeing blocks not in datazone - block = 0, count = 4096 [ 414.818695][ T6771] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1724: Invalid inode bitmap blk 0 in block_group 0 [ 414.837525][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 414.838185][ T6771] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 414.860347][ T6771] EXT4-fs (loop3): 1 orphan inode deleted [ 414.873285][ T6771] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 414.919491][ T6785] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 415.394203][ T6789] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1729: Invalid block bitmap block 0 in block_group 0 [ 415.408156][ T6789] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1729: Failed to acquire dquot type 0 [ 415.419819][ T6789] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.1729: Freeing blocks not in datazone - block = 0, count = 4096 [ 415.433723][ T6789] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1729: Invalid inode bitmap blk 0 in block_group 0 [ 415.446703][ T6789] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 415.455523][ T587] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 415.467005][ T6789] EXT4-fs (loop4): 1 orphan inode deleted [ 415.472742][ T6789] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 415.522271][ T6789] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.1729: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 416.248065][ T6800] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 416.257056][ T6800] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.301308][ T6800] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 416.313057][ T6810] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 416.323041][ T6800] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #2: comm syz.1.1733: mark_inode_dirty error [ 416.340773][ T6800] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 416.364357][ T6800] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1733: mark_inode_dirty error [ 416.680242][ T6815] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1737: Invalid block bitmap block 0 in block_group 0 [ 416.694357][ T6815] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1737: Failed to acquire dquot type 0 [ 416.706186][ T6815] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.1737: Freeing blocks not in datazone - block = 0, count = 4096 [ 416.720155][ T6815] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1737: Invalid inode bitmap blk 0 in block_group 0 [ 416.733396][ T6815] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 416.742417][ T6815] EXT4-fs (loop4): 1 orphan inode deleted [ 416.748214][ T6815] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 416.794792][ T6815] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.1737: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 416.813948][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 417.715768][ T24] kauditd_printk_skb: 68 callbacks suppressed [ 417.715780][ T24] audit: type=1326 audit(1763157549.260:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 417.760071][ T24] audit: type=1326 audit(1763157549.260:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 417.783623][ T24] audit: type=1326 audit(1763157549.260:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 417.809301][ T24] audit: type=1326 audit(1763157549.260:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 417.832929][ T24] audit: type=1326 audit(1763157549.260:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 417.870060][ T24] audit: type=1326 audit(1763157549.260:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 418.129461][ T24] audit: type=1326 audit(1763157549.260:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6833 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14efa676c9 code=0x7ffc0000 [ 418.168627][ T6849] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1743: Invalid block bitmap block 0 in block_group 0 [ 418.182644][ T6849] Quota error (device loop3): write_blk: dquota write failed [ 418.190278][ T6849] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 418.200466][ T6849] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1743: Failed to acquire dquot type 0 [ 418.212589][ T6849] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.1743: Freeing blocks not in datazone - block = 0, count = 4096 [ 418.226746][ T6849] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1743: Invalid inode bitmap blk 0 in block_group 0 [ 418.239958][ T6849] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 418.249107][ T6849] EXT4-fs (loop3): 1 orphan inode deleted [ 418.255032][ T6849] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 418.309941][ T49] Quota error (device loop3): remove_tree: Getting block too big (0 >= 9) [ 418.354474][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 419.558393][ T6873] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1752: Invalid block bitmap block 0 in block_group 0 [ 419.572631][ T6873] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1752: Failed to acquire dquot type 0 [ 419.585417][ T6873] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.1752: Freeing blocks not in datazone - block = 0, count = 4096 [ 419.599697][ T6873] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1752: Invalid inode bitmap blk 0 in block_group 0 [ 419.613427][ T6873] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 419.622361][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 419.635142][ T6873] EXT4-fs (loop2): 1 orphan inode deleted [ 419.640947][ T6873] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 419.687857][ T6873] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.1752: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 420.212293][ T6888] xt_bpf: check failed: parse error [ 420.733487][ T6895] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 420.746644][ T6895] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 420.888639][ T6895] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 420.913172][ T6895] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.1761: mark_inode_dirty error [ 420.948228][ T6895] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 420.956986][ T6895] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1761: mark_inode_dirty error [ 421.225771][ T6911] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1764: Invalid block bitmap block 0 in block_group 0 [ 421.239898][ T6911] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1764: Failed to acquire dquot type 0 [ 421.252114][ T6911] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1764: Freeing blocks not in datazone - block = 0, count = 4096 [ 421.266132][ T6911] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1764: Invalid inode bitmap blk 0 in block_group 0 [ 421.279171][ T6911] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 421.287955][ T587] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 421.299439][ T6911] EXT4-fs (loop0): 1 orphan inode deleted [ 421.305218][ T6911] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 422.510969][ T1637] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 422.757425][ T6927] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1770: Invalid block bitmap block 0 in block_group 0 [ 422.808324][ T6927] __quota_error: 22 callbacks suppressed [ 422.808338][ T6927] Quota error (device loop2): write_blk: dquota write failed [ 422.821507][ T6927] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 422.831522][ T6927] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1770: Failed to acquire dquot type 0 [ 422.870781][ T6927] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.1770: Freeing blocks not in datazone - block = 0, count = 4096 [ 422.886512][ T6927] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1770: Invalid inode bitmap blk 0 in block_group 0 [ 422.899990][ T49] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 422.909392][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 422.927001][ T6927] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 422.962643][ T6927] EXT4-fs (loop2): 1 orphan inode deleted [ 422.968436][ T6927] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 423.017625][ T6927] EXT4-fs error (device loop2): ext4_search_dir:1521: inode #2: block 16: comm syz.2.1770: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 423.077098][ T1637] usb 5-1: Using ep0 maxpacket: 32 [ 423.666133][ T24] audit: type=1326 audit(1763157555.120:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 423.698299][ T24] audit: type=1326 audit(1763157555.120:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 423.721904][ T24] audit: type=1326 audit(1763157555.120:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 423.746371][ T24] audit: type=1326 audit(1763157555.120:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 423.793020][ T24] audit: type=1326 audit(1763157555.120:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6941 comm="syz.3.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 424.007888][ T1637] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 424.379914][ T1637] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 424.390938][ T1637] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.399138][ T1637] usb 5-1: Product: syz [ 424.403368][ T1637] usb 5-1: Manufacturer: syz [ 424.408145][ T1637] usb 5-1: SerialNumber: syz [ 424.418093][ T6962] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 424.548052][ T6974] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 425.390513][ T24] audit: type=1326 audit(1763157556.950:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 425.415284][ T6988] udc-core: couldn't find an available UDC or it's busy [ 425.418292][ T24] audit: type=1326 audit(1763157556.950:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.0.1783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 425.445843][ T6988] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 425.457796][ T6988] udc-core: couldn't find an available UDC or it's busy [ 425.464806][ T6988] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 425.473219][ T6988] udc-core: couldn't find an available UDC or it's busy [ 425.480217][ T6988] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 425.796954][ T1637] usbhid 5-1:1.0: can't add hid device: -71 [ 425.798434][ T7012] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 425.803510][ T1637] usbhid: probe of 5-1:1.0 failed with error -71 [ 425.812167][ T7012] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.836699][ T7012] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 425.840681][ T1637] usb 5-1: USB disconnect, device number 10 [ 425.847734][ T7012] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.1794: mark_inode_dirty error [ 425.862350][ T7012] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 425.870812][ T7012] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1794: mark_inode_dirty error [ 426.027910][ T7019] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 427.080083][ T7026] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1797: Invalid block bitmap block 0 in block_group 0 [ 427.094184][ T7026] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1797: Failed to acquire dquot type 0 [ 427.106083][ T7026] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.1797: Freeing blocks not in datazone - block = 0, count = 4096 [ 427.120107][ T7026] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1797: Invalid inode bitmap blk 0 in block_group 0 [ 427.132996][ T7026] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 427.141840][ T7026] EXT4-fs (loop3): 1 orphan inode deleted [ 427.147606][ T7026] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 427.197565][ T7026] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.1797: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 427.226338][ T587] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 428.381169][ T7051] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.1802: Invalid block bitmap block 0 in block_group 0 [ 428.403695][ T7051] __quota_error: 29 callbacks suppressed [ 428.403722][ T7051] Quota error (device loop1): write_blk: dquota write failed [ 428.416999][ T7051] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 428.427277][ T7051] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1802: Failed to acquire dquot type 0 [ 428.462330][ T7060] xt_bpf: check failed: parse error [ 428.667086][ T7051] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.1802: Freeing blocks not in datazone - block = 0, count = 4096 [ 428.694858][ T7051] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1802: Invalid inode bitmap blk 0 in block_group 0 [ 428.715930][ T7051] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 428.746063][ T7051] EXT4-fs (loop1): 1 orphan inode deleted [ 428.751857][ T7051] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 428.804767][ T7051] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.1802: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 429.005504][ T587] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 429.014110][ T587] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 430.509462][ T7070] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1808: Invalid block bitmap block 0 in block_group 0 [ 430.523628][ T7070] Quota error (device loop4): write_blk: dquota write failed [ 430.531065][ T7070] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 430.541651][ T7070] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1808: Failed to acquire dquot type 0 [ 430.555042][ T7070] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.1808: Freeing blocks not in datazone - block = 0, count = 4096 [ 430.570207][ T7070] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1808: Invalid inode bitmap blk 0 in block_group 0 [ 430.584072][ T7070] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 430.592954][ T9] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 430.602693][ T7070] EXT4-fs (loop4): 1 orphan inode deleted [ 430.608544][ T7070] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 430.645487][ T7070] EXT4-fs error (device loop4): ext4_search_dir:1521: inode #2: block 16: comm syz.4.1808: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 430.697353][ T7069] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1807: Invalid block bitmap block 0 in block_group 0 [ 430.711602][ T7069] Quota error (device loop0): write_blk: dquota write failed [ 430.719060][ T7069] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 430.729119][ T7069] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1807: Failed to acquire dquot type 0 [ 430.742425][ T7069] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1807: Freeing blocks not in datazone - block = 0, count = 4096 [ 430.756684][ T7069] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1807: Invalid inode bitmap blk 0 in block_group 0 [ 430.770507][ T7069] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 430.779374][ T7069] EXT4-fs (loop0): 1 orphan inode deleted [ 430.785141][ T7069] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 431.302285][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 431.337505][ T9] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 431.346038][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 431.797734][ T7095] binder: Unknown parameter 'cont' [ 431.820003][ T7083] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1811: Invalid block bitmap block 0 in block_group 0 [ 431.834191][ T7083] Quota error (device loop3): write_blk: dquota write failed [ 431.841660][ T7083] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1811: Failed to acquire dquot type 0 [ 431.853149][ T7083] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.1811: Freeing blocks not in datazone - block = 0, count = 4096 [ 431.868843][ T7083] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1811: Invalid inode bitmap blk 0 in block_group 0 [ 431.881546][ T7083] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 431.890174][ T7083] EXT4-fs (loop3): 1 orphan inode deleted [ 431.895915][ T7083] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 431.909610][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 431.927793][ T7083] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.1811: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 431.952941][ T7091] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1812: Invalid block bitmap block 0 in block_group 0 [ 431.966732][ T7091] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1812: Failed to acquire dquot type 0 [ 431.978227][ T7091] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1812: Freeing blocks not in datazone - block = 0, count = 4096 [ 431.991747][ T7091] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1812: Invalid inode bitmap blk 0 in block_group 0 [ 432.004824][ T7091] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 432.013707][ T7091] EXT4-fs (loop0): 1 orphan inode deleted [ 432.019508][ T7091] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 432.037669][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 432.101286][ T7103] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 432.668492][ T7116] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 432.677661][ T7116] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 432.696375][ T7116] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 433.980231][ T7116] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #2: comm syz.1.1820: mark_inode_dirty error [ 434.016485][ T7116] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 434.063459][ T7116] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1820: mark_inode_dirty error [ 434.105152][ T7122] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1821: Invalid block bitmap block 0 in block_group 0 [ 434.119133][ T7122] __quota_error: 10 callbacks suppressed [ 434.119150][ T7122] Quota error (device loop2): write_blk: dquota write failed [ 434.132212][ T7122] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 434.142238][ T7122] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1821: Failed to acquire dquot type 0 [ 434.154932][ T7122] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.1821: Freeing blocks not in datazone - block = 0, count = 4096 [ 434.170274][ T7122] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1821: Invalid inode bitmap blk 0 in block_group 0 [ 434.183584][ T7122] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 434.192438][ T7122] EXT4-fs (loop2): 1 orphan inode deleted [ 434.198201][ T7122] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 434.212324][ T49] Quota error (device loop2): remove_tree: Getting block too big (0 >= 9) [ 434.549919][ T7123] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1819: Invalid block bitmap block 0 in block_group 0 [ 434.564211][ T7123] Quota error (device loop0): write_blk: dquota write failed [ 434.571688][ T7123] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 434.581728][ T7123] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1819: Failed to acquire dquot type 0 [ 434.594592][ T7123] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1819: Freeing blocks not in datazone - block = 0, count = 4096 [ 434.608083][ T7123] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1819: Invalid inode bitmap blk 0 in block_group 0 [ 434.620990][ T7123] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 434.629752][ T7123] EXT4-fs (loop0): 1 orphan inode deleted [ 434.635496][ T7123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 434.688732][ T7123] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.1819: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 434.735084][ T49] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 435.073437][ T49] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 435.082452][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 435.276934][ T329] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 435.716947][ T329] usb 5-1: Using ep0 maxpacket: 32 [ 435.957074][ T329] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 436.138877][ T7151] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 436.417261][ T329] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 436.512616][ T329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.959299][ T7162] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1829: Invalid block bitmap block 0 in block_group 0 [ 436.973353][ T7162] Quota error (device loop0): write_blk: dquota write failed [ 436.980834][ T7162] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 436.990873][ T7162] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1829: Failed to acquire dquot type 0 [ 437.004248][ T7162] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1829: Freeing blocks not in datazone - block = 0, count = 4096 [ 437.018536][ T7162] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1829: Invalid inode bitmap blk 0 in block_group 0 [ 437.031922][ T7162] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 437.040668][ T49] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 437.049833][ T7162] EXT4-fs (loop0): 1 orphan inode deleted [ 437.055560][ T7162] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 437.132709][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 437.636851][ T329] usb 5-1: Product: syz [ 437.706078][ T329] usb 5-1: Manufacturer: syz [ 437.711046][ T329] usb 5-1: SerialNumber: syz [ 437.736928][ T329] usb 5-1: can't set config #1, error -71 [ 437.745068][ T329] usb 5-1: USB disconnect, device number 11 [ 437.938293][ T7175] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 437.947501][ T7175] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.960224][ T7175] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 437.969003][ T7175] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #2: comm syz.2.1835: mark_inode_dirty error [ 437.980499][ T7175] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 437.988900][ T7175] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.1835: mark_inode_dirty error [ 437.989622][ T7177] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 438.010466][ T7177] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.028490][ T7177] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 438.037033][ T7177] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.1837: mark_inode_dirty error [ 438.048499][ T7177] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 438.056768][ T7177] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1837: mark_inode_dirty error [ 438.153705][ T24] audit: type=1326 audit(1763157569.710:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.0.1841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1e168b6c9 code=0x0 [ 438.304808][ T7204] xt_bpf: check failed: parse error [ 440.038065][ T7214] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1845: Invalid block bitmap block 0 in block_group 0 [ 440.052018][ T7214] Quota error (device loop4): write_blk: dquota write failed [ 440.059458][ T7214] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 440.069447][ T7214] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1845: Failed to acquire dquot type 0 [ 440.081873][ T7214] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.1845: Freeing blocks not in datazone - block = 0, count = 4096 [ 440.096137][ T7214] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1845: Invalid inode bitmap blk 0 in block_group 0 [ 440.109291][ T7214] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 440.118146][ T9] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 440.118280][ T7214] EXT4-fs (loop4): 1 orphan inode deleted [ 440.132563][ T7214] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 440.148298][ T9] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 440.278962][ T7217] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.1846: Invalid block bitmap block 0 in block_group 0 [ 440.293274][ T7217] Quota error (device loop1): write_blk: dquota write failed [ 440.300742][ T7217] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 440.310772][ T7217] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1846: Failed to acquire dquot type 0 [ 440.599484][ T7217] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.1846: Freeing blocks not in datazone - block = 0, count = 4096 [ 440.613262][ T7217] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1846: Invalid inode bitmap blk 0 in block_group 0 [ 440.626159][ T7217] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 440.634772][ T7217] EXT4-fs (loop1): 1 orphan inode deleted [ 440.640581][ T7217] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 440.696660][ T7217] EXT4-fs error (device loop1): ext4_search_dir:1521: inode #2: block 16: comm syz.1.1846: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 440.804295][ T24] audit: type=1326 audit(1763157572.360:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 440.853664][ T9] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 440.858530][ T24] audit: type=1326 audit(1763157572.420:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 440.901992][ T24] audit: type=1326 audit(1763157572.450:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 440.936891][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 440.962137][ T24] audit: type=1326 audit(1763157572.450:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7225 comm="syz.0.1849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e168b6c9 code=0x7ffc0000 [ 441.136374][ T7229] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 442.667899][ T7248] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1848: Invalid block bitmap block 0 in block_group 0 [ 442.682113][ T7248] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1848: Failed to acquire dquot type 0 [ 442.696930][ T7248] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.1848: Freeing blocks not in datazone - block = 0, count = 4096 [ 442.710876][ T7248] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1848: Invalid inode bitmap blk 0 in block_group 0 [ 442.723954][ T7248] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 442.732895][ T7248] EXT4-fs (loop3): 1 orphan inode deleted [ 442.738664][ T7248] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 442.800678][ T49] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 442.812165][ T7246] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #2: block 16: comm syz.3.1848: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 442.933494][ T7249] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.1853: Invalid block bitmap block 0 in block_group 0 [ 443.111186][ T7249] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1853: Failed to acquire dquot type 0 [ 443.123106][ T7249] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.1853: Freeing blocks not in datazone - block = 0, count = 4096 [ 443.137937][ T7249] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1853: Invalid inode bitmap blk 0 in block_group 0 [ 443.150939][ T7249] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 443.160382][ T7249] EXT4-fs (loop1): 1 orphan inode deleted [ 443.166142][ T7249] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 443.325743][ T49] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 443.809122][ T7282] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1861: Invalid block bitmap block 0 in block_group 0 [ 443.823272][ T7282] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1861: Failed to acquire dquot type 0 [ 443.835163][ T7282] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.1861: Freeing blocks not in datazone - block = 0, count = 4096 [ 443.849075][ T7282] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1861: Invalid inode bitmap blk 0 in block_group 0 [ 443.861989][ T7282] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 443.870870][ T7282] EXT4-fs (loop3): 1 orphan inode deleted [ 443.876617][ T7282] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 443.926739][ T587] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 444.850598][ T7296] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 444.866877][ T7296] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.915475][ T7296] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 444.929131][ T7296] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.1867: mark_inode_dirty error [ 444.960676][ T7296] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 444.996856][ T7296] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1867: mark_inode_dirty error [ 445.126912][ T329] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 445.305928][ T7318] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1872: Invalid block bitmap block 0 in block_group 0 [ 445.376860][ T329] usb 2-1: Using ep0 maxpacket: 32 [ 445.397130][ T7318] __quota_error: 82 callbacks suppressed [ 445.397140][ T7318] Quota error (device loop4): write_blk: dquota write failed [ 445.436885][ T7318] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 445.456868][ T7318] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1872: Failed to acquire dquot type 0 [ 445.477051][ T7318] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.1872: Freeing blocks not in datazone - block = 0, count = 4096 [ 445.528847][ T7318] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1872: Invalid inode bitmap blk 0 in block_group 0 [ 445.546946][ T587] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 445.570149][ T587] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 445.581746][ T7318] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 445.599977][ T7318] EXT4-fs (loop4): 1 orphan inode deleted [ 445.605720][ T7318] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 445.626987][ T329] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 445.816903][ T329] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 445.829246][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.845865][ T329] usb 2-1: Product: syz [ 445.854453][ T329] usb 2-1: Manufacturer: syz [ 445.863430][ T329] usb 2-1: SerialNumber: syz [ 446.238905][ T7325] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1874: Invalid block bitmap block 0 in block_group 0 [ 446.252987][ T7325] Quota error (device loop0): write_blk: dquota write failed [ 446.260435][ T7325] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 446.270467][ T7325] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1874: Failed to acquire dquot type 0 [ 446.282727][ T7325] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1874: Freeing blocks not in datazone - block = 0, count = 4096 [ 446.296571][ T7325] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1874: Invalid inode bitmap blk 0 in block_group 0 [ 446.309545][ T7325] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 446.318297][ T587] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 446.318378][ T7325] EXT4-fs (loop0): 1 orphan inode deleted [ 446.332759][ T7325] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 446.391617][ T587] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 446.403111][ T7325] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.1874: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 446.502356][ T7328] udc-core: couldn't find an available UDC or it's busy [ 446.529899][ T7328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 446.650755][ T7328] udc-core: couldn't find an available UDC or it's busy [ 447.037911][ T7328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 447.123787][ T7328] udc-core: couldn't find an available UDC or it's busy [ 447.160600][ T7328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 447.857798][ T329] usbhid 2-1:1.0: can't add hid device: -71 [ 447.866978][ T329] usbhid: probe of 2-1:1.0 failed with error -71 [ 448.010356][ T329] usb 2-1: USB disconnect, device number 6 [ 448.318535][ T7344] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1879: Invalid block bitmap block 0 in block_group 0 [ 448.332497][ T7344] Quota error (device loop0): write_blk: dquota write failed [ 448.339957][ T7344] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 448.350019][ T7344] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1879: Failed to acquire dquot type 0 [ 448.361921][ T7344] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1879: Freeing blocks not in datazone - block = 0, count = 4096 [ 448.375814][ T7344] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1879: Invalid inode bitmap blk 0 in block_group 0 [ 448.388824][ T7344] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 448.397602][ T7344] EXT4-fs (loop0): 1 orphan inode deleted [ 448.403341][ T7344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 448.476384][ T7344] EXT4-fs error (device loop0): ext4_search_dir:1521: inode #2: block 16: comm syz.0.1879: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 448.509316][ T9] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 448.976716][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 449.196901][ T5] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 449.446881][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 449.656933][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 449.802585][ T7352] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1881: Invalid block bitmap block 0 in block_group 0 [ 449.816591][ T7352] Quota error (device loop3): write_blk: dquota write failed [ 449.824149][ T7352] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1881: Failed to acquire dquot type 0 [ 449.836828][ T7352] EXT4-fs error (device loop3): ext4_free_blocks:5685: comm syz.3.1881: Freeing blocks not in datazone - block = 0, count = 4096 [ 449.850761][ T7352] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1881: Invalid inode bitmap blk 0 in block_group 0 [ 449.863824][ T7352] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 449.872667][ T7352] EXT4-fs (loop3): 1 orphan inode deleted [ 449.878433][ T7352] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 449.892421][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 449.956991][ T5] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 450.370283][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.378472][ T5] usb 3-1: Product: syz [ 450.382686][ T5] usb 3-1: Manufacturer: syz [ 450.387385][ T5] usb 3-1: SerialNumber: syz [ 450.453017][ T7358] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 450.473165][ T7358] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.499954][ T7358] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 450.520405][ T7358] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #2: comm syz.1.1883: mark_inode_dirty error [ 450.543883][ T7358] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 450.563650][ T7358] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1883: mark_inode_dirty error [ 450.618639][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 450.618651][ T24] audit: type=1326 audit(1763157582.180:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb70716c9 code=0x7ffc0000 [ 450.696723][ T24] audit: type=1326 audit(1763157582.210:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb70716c9 code=0x7ffc0000 [ 450.762980][ T24] audit: type=1326 audit(1763157582.210:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6bb70716c9 code=0x7ffc0000 [ 450.786949][ T24] audit: type=1326 audit(1763157582.210:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb70716c9 code=0x7ffc0000 [ 450.811325][ T24] audit: type=1326 audit(1763157582.210:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb70716c9 code=0x7ffc0000 [ 450.834836][ T24] audit: type=1326 audit(1763157582.210:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bb70716c9 code=0x7ffc0000 [ 450.858350][ T24] audit: type=1326 audit(1763157582.210:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb70716c9 code=0x7ffc0000 [ 450.881787][ T24] audit: type=1326 audit(1763157582.210:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb70716c9 code=0x7ffc0000 [ 450.905267][ T24] audit: type=1326 audit(1763157582.210:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6bb70716c9 code=0x7ffc0000 [ 450.928720][ T24] audit: type=1326 audit(1763157582.210:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7367 comm="syz.4.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb70716c9 code=0x7ffc0000 [ 450.928735][ T7349] udc-core: couldn't find an available UDC or it's busy [ 451.016864][ T7349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 451.088822][ T7349] udc-core: couldn't find an available UDC or it's busy [ 451.095784][ T7349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 451.117163][ T7349] udc-core: couldn't find an available UDC or it's busy [ 451.124135][ T7349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 451.306867][ T5] usbhid 3-1:1.0: can't add hid device: -71 [ 451.312869][ T5] usbhid: probe of 3-1:1.0 failed with error -71 [ 451.348201][ T5] usb 3-1: USB disconnect, device number 9 [ 451.437727][ T7383] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 451.456972][ T7383] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 451.484964][ T7383] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 451.493718][ T7383] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.1891: mark_inode_dirty error [ 451.506658][ T7383] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 451.515108][ T7383] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1891: mark_inode_dirty error [ 451.679544][ T7397] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 451.787800][ T375] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 452.226758][ T7420] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 452.235808][ T7420] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 452.251493][ T375] usb 1-1: Using ep0 maxpacket: 32 [ 452.258320][ T7420] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 452.266628][ T7420] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #2: comm syz.1.1903: mark_inode_dirty error [ 452.279647][ T7420] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 452.287989][ T7420] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1903: mark_inode_dirty error [ 452.456885][ T375] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 452.646980][ T375] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 452.662548][ T375] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.694456][ T375] usb 1-1: Product: syz [ 452.707318][ T375] usb 1-1: Manufacturer: syz [ 452.721689][ T375] usb 1-1: SerialNumber: syz [ 452.994348][ T7436] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1906: Invalid block bitmap block 0 in block_group 0 [ 453.066324][ T7436] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1906: Failed to acquire dquot type 0 [ 453.167013][ T7436] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.1906: Freeing blocks not in datazone - block = 0, count = 4096 [ 453.216873][ T375] usbhid 1-1:1.0: can't add hid device: -71 [ 453.222951][ T375] usbhid: probe of 1-1:1.0 failed with error -71 [ 453.249045][ T375] usb 1-1: USB disconnect, device number 8 [ 453.275214][ T7436] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1906: Invalid inode bitmap blk 0 in block_group 0 [ 453.289477][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 453.339779][ T7436] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 453.377655][ T7443] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 453.387020][ T7436] EXT4-fs (loop2): 1 orphan inode deleted [ 453.402127][ T7436] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 453.425446][ T7443] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 453.466941][ T7443] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 453.480601][ T7443] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #2: comm syz.1.1908: mark_inode_dirty error [ 453.512745][ T7443] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 453.532320][ T7443] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1908: mark_inode_dirty error [ 453.796837][ T464] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 454.226865][ T464] usb 1-1: Using ep0 maxpacket: 32 [ 454.436880][ T464] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 85, changing to 10 [ 454.616935][ T464] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.40 [ 454.656360][ T464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.676521][ T464] usb 1-1: Product: syz [ 454.696696][ T464] usb 1-1: Manufacturer: syz [ 454.706776][ T464] usb 1-1: SerialNumber: syz [ 455.217137][ T7449] udc-core: couldn't find an available UDC or it's busy [ 455.234779][ T7449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 455.256645][ T7449] udc-core: couldn't find an available UDC or it's busy [ 455.275511][ T7449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 455.296853][ T7449] udc-core: couldn't find an available UDC or it's busy [ 455.337399][ T7488] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 455.348520][ T7488] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 455.361023][ T7449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 455.399785][ T7488] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 455.410770][ T7488] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #2: comm syz.4.1922: mark_inode_dirty error [ 455.434420][ T7488] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 455.447002][ T7488] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.1922: mark_inode_dirty error [ 455.556946][ T464] usbhid 1-1:1.0: can't add hid device: -71 [ 455.567250][ T464] usbhid: probe of 1-1:1.0 failed with error -71 [ 455.588026][ T464] usb 1-1: USB disconnect, device number 9 [ 455.649593][ T24] kauditd_printk_skb: 97 callbacks suppressed [ 455.650039][ T24] audit: type=1400 audit(1763157587.200:3637): avc: denied { ioctl } for pid=7502 comm="syz.1.1927" path="socket:[40453]" dev="sockfs" ino=40453 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 455.950545][ T7505] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 455.959554][ T7505] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 455.978170][ T7505] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 455.986572][ T7505] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #2: comm syz.3.1928: mark_inode_dirty error [ 455.998120][ T7505] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 456.006561][ T7505] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1928: mark_inode_dirty error [ 456.101086][ T24] audit: type=1326 audit(1763157587.660:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.0.1931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1e168b6c9 code=0x0 [ 456.170749][ T7513] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.1929: Invalid block bitmap block 0 in block_group 0 [ 456.191675][ T24] audit: type=1326 audit(1763157587.700:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 456.202060][ T7513] Quota error (device loop1): write_blk: dquota write failed [ 456.233713][ T7513] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 456.243946][ T24] audit: type=1326 audit(1763157587.700:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 456.244231][ T7513] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1929: Failed to acquire dquot type 0 [ 456.279334][ T24] audit: type=1326 audit(1763157587.700:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 456.279398][ T7513] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.1929: Freeing blocks not in datazone - block = 0, count = 4096 [ 456.316066][ T24] audit: type=1326 audit(1763157587.700:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 456.339485][ T24] audit: type=1326 audit(1763157587.700:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 456.368342][ T24] audit: type=1326 audit(1763157587.700:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.3.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54653426c9 code=0x7ffc0000 [ 456.392726][ T7513] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1929: Invalid inode bitmap blk 0 in block_group 0 [ 456.405865][ T7513] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 456.414533][ T587] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:6: Failed to release dquot type 0 [ 456.426190][ T7513] EXT4-fs (loop1): 1 orphan inode deleted [ 456.432053][ T7513] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 457.689926][ T7553] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1940: Invalid block bitmap block 0 in block_group 0 [ 457.704019][ T7553] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1940: Failed to acquire dquot type 0 [ 457.715797][ T7553] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.1940: Freeing blocks not in datazone - block = 0, count = 4096 [ 457.729852][ T7553] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1940: Invalid inode bitmap blk 0 in block_group 0 [ 457.742792][ T7553] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 457.751991][ T7553] EXT4-fs (loop2): 1 orphan inode deleted [ 457.757842][ T7553] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 457.892970][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 458.798088][ T7564] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 458.807184][ T7564] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 458.910444][ T7564] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 458.960307][ T7564] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #2: comm syz.0.1946: mark_inode_dirty error [ 458.978856][ T7564] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 458.987219][ T7564] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #2: comm syz.0.1946: mark_inode_dirty error [ 459.643432][ T7589] xt_bpf: check failed: parse error [ 459.839916][ T7602] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1957'. [ 459.859303][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1959'. [ 459.868321][ T7604] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1959'. [ 459.905237][ T7610] FAULT_INJECTION: forcing a failure. [ 459.905237][ T7610] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 459.918522][ T7610] CPU: 0 PID: 7610 Comm: syz.1.1961 Not tainted syzkaller #0 [ 459.925892][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.935950][ T7610] Call Trace: [ 459.939245][ T7610] __dump_stack+0x21/0x24 [ 459.943576][ T7610] dump_stack_lvl+0x169/0x1d8 [ 459.948252][ T7610] ? show_regs_print_info+0x18/0x18 [ 459.953452][ T7610] dump_stack+0x15/0x1c [ 459.957599][ T7610] should_fail+0x3c1/0x510 [ 459.962020][ T7610] should_fail_usercopy+0x1a/0x20 [ 459.967039][ T7610] strncpy_from_user+0x24/0x2e0 [ 459.971885][ T7610] bpf_prog_load+0x15d/0x1420 [ 459.976561][ T7610] ? avc_has_perm+0x234/0x360 [ 459.981236][ T7610] ? avc_has_perm_noaudit+0x240/0x240 [ 459.986606][ T7610] ? map_freeze+0x320/0x320 [ 459.991109][ T7610] ? selinux_bpf+0xc7/0xf0 [ 459.995523][ T7610] ? security_bpf+0x82/0xa0 [ 460.000019][ T7610] __se_sys_bpf+0x442/0x680 [ 460.004514][ T7610] ? __x64_sys_bpf+0x90/0x90 [ 460.009102][ T7610] ? debug_smp_processor_id+0x17/0x20 [ 460.014464][ T7610] __x64_sys_bpf+0x7b/0x90 [ 460.018888][ T7610] do_syscall_64+0x31/0x40 [ 460.023302][ T7610] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 460.029189][ T7610] RIP: 0033:0x7f14efa676c9 [ 460.033597][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.053197][ T7610] RSP: 002b:00007f14ee4cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.061606][ T7610] RAX: ffffffffffffffda RBX: 00007f14efcbdfa0 RCX: 00007f14efa676c9 [ 460.069573][ T7610] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 460.077535][ T7610] RBP: 00007f14ee4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 460.085497][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.093462][ T7610] R13: 00007f14efcbe038 R14: 00007f14efcbdfa0 R15: 00007ffdc081cbc8 [ 460.316321][ T7611] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.1958: Invalid block bitmap block 0 in block_group 0 [ 460.447348][ T7611] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1958: Failed to acquire dquot type 0 [ 460.465550][ T7611] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz.2.1958: Freeing blocks not in datazone - block = 0, count = 4096 [ 460.479361][ T7611] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1958: Invalid inode bitmap blk 0 in block_group 0 [ 460.493527][ T7611] EXT4-fs error (device loop2) in ext4_free_inode:360: Corrupt filesystem [ 460.502948][ T7611] EXT4-fs (loop2): 1 orphan inode deleted [ 460.509185][ T9] EXT4-fs error (device loop2): ext4_release_dquot:6262: comm kworker/u4:1: Failed to release dquot type 0 [ 460.521727][ T7611] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 460.553443][ T54] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 461.057124][ T54] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 461.065771][ T54] usb 2-1: config 1 has no interface number 0 [ 461.072076][ T54] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 461.082756][ T54] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 461.597660][ T54] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 461.610327][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.618653][ T54] usb 2-1: Product: syz [ 461.622956][ T24] kauditd_printk_skb: 141 callbacks suppressed [ 461.622968][ T24] audit: type=1326 audit(1763157593.180:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba19e46c9 code=0x7ffc0000 [ 461.652794][ T24] audit: type=1326 audit(1763157593.180:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ba19e46c9 code=0x7ffc0000 [ 461.653267][ T54] usb 2-1: Manufacturer: syz [ 461.681591][ T54] usb 2-1: SerialNumber: syz [ 461.706898][ T7622] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 461.714099][ T7622] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 461.721425][ T24] audit: type=1326 audit(1763157593.180:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba19e46c9 code=0x7ffc0000 [ 461.747085][ T24] audit: type=1326 audit(1763157593.180:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ba19e46c9 code=0x7ffc0000 [ 461.774321][ T24] audit: type=1326 audit(1763157593.180:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba19e46c9 code=0x7ffc0000 [ 461.797912][ T24] audit: type=1326 audit(1763157593.180:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4ba19e46c9 code=0x7ffc0000 [ 461.829430][ T24] audit: type=1326 audit(1763157593.180:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba19e46c9 code=0x7ffc0000 [ 461.962192][ T24] audit: type=1326 audit(1763157593.180:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4ba19e46c9 code=0x7ffc0000 [ 461.987741][ T24] audit: type=1326 audit(1763157593.180:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba19e46c9 code=0x7ffc0000 [ 462.030455][ T7672] capability: warning: `syz.3.1982' uses deprecated v2 capabilities in a way that may be insecure [ 462.057676][ T24] audit: type=1326 audit(1763157593.180:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7657 comm="syz.2.1980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f4ba19e46c9 code=0x7ffc0000 [ 462.107739][ T7674] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1984'. [ 462.441074][ T7683] udc-core: couldn't find an available UDC or it's busy [ 462.448120][ T7683] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 462.607342][ T7685] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 462.616324][ T7685] ext4 filesystem being mounted at /400/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.631490][ T7685] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 462.639899][ T7685] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #2: comm syz.2.1987: mark_inode_dirty error [ 462.651411][ T7685] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 462.659939][ T7685] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.1987: mark_inode_dirty error [ 463.463282][ T464] usb 2-1: USB disconnect, device number 7 [ 463.519290][ T7705] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 463.528319][ T7705] ext4 filesystem being mounted at /396/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.544337][ T7705] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 463.552909][ T7705] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 463.664351][ T7716] device wg2 entered promiscuous mode [ 463.683873][ T7718] FAULT_INJECTION: forcing a failure. [ 463.683873][ T7718] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 463.700990][ T7718] CPU: 0 PID: 7718 Comm: syz.2.1996 Not tainted syzkaller #0 [ 463.708365][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 463.718417][ T7718] Call Trace: [ 463.721703][ T7718] __dump_stack+0x21/0x24 [ 463.726023][ T7718] dump_stack_lvl+0x169/0x1d8 [ 463.730684][ T7718] ? show_regs_print_info+0x18/0x18 [ 463.735864][ T7718] dump_stack+0x15/0x1c [ 463.740011][ T7718] should_fail+0x3c1/0x510 [ 463.744409][ T7718] should_fail_alloc_page+0x4f/0x60 [ 463.749591][ T7718] __alloc_pages_nodemask+0x109/0x5f0 [ 463.754958][ T7718] ? __kernel_text_address+0xa0/0x100 [ 463.760308][ T7718] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 463.765837][ T7718] ? unwind_get_return_address+0x4d/0x90 [ 463.771456][ T7718] ? stack_trace_save+0xe0/0xe0 [ 463.776292][ T7718] skb_page_frag_refill+0x1fe/0x3c0 [ 463.781475][ T7718] tun_get_user+0x730/0x3090 [ 463.786051][ T7718] ? __x64_sys_openat+0x136/0x160 [ 463.791073][ T7718] ? tun_do_read+0x1c00/0x1c00 [ 463.795821][ T7718] ? kstrtouint_from_user+0x1a0/0x200 [ 463.801179][ T7718] ? __fsnotify_parent+0x5f5/0x6c0 [ 463.806270][ T7718] ? avc_policy_seqno+0x1b/0x70 [ 463.811103][ T7718] ? selinux_file_permission+0x2a5/0x510 [ 463.816718][ T7718] ? fsnotify_perm+0x66/0x4b0 [ 463.821387][ T7718] tun_chr_write_iter+0x1bf/0x270 [ 463.826427][ T7718] vfs_write+0x725/0xd60 [ 463.830660][ T7718] ? __kasan_slab_free+0x11/0x20 [ 463.835590][ T7718] ? kernel_write+0x3c0/0x3c0 [ 463.840270][ T7718] ? __fget_files+0x2c4/0x320 [ 463.844931][ T7718] ? __fdget_pos+0x1f7/0x380 [ 463.849506][ T7718] ? ksys_write+0x71/0x240 [ 463.853905][ T7718] ksys_write+0x140/0x240 [ 463.858224][ T7718] ? __ia32_sys_read+0x90/0x90 [ 463.862974][ T7718] ? debug_smp_processor_id+0x17/0x20 [ 463.868330][ T7718] __x64_sys_write+0x7b/0x90 [ 463.872906][ T7718] do_syscall_64+0x31/0x40 [ 463.877303][ T7718] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 463.883174][ T7718] RIP: 0033:0x7f4ba19e317f [ 463.887571][ T7718] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 463.907160][ T7718] RSP: 002b:00007f4ba044c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 463.915554][ T7718] RAX: ffffffffffffffda RBX: 00007f4ba1c3afa0 RCX: 00007f4ba19e317f [ 463.923509][ T7718] RDX: 0000000000000056 RSI: 00002000000001c0 RDI: 00000000000000c8 [ 463.931468][ T7718] RBP: 00007f4ba044c090 R08: 0000000000000000 R09: 0000000000000000 [ 463.939423][ T7718] R10: 0000000000000056 R11: 0000000000000293 R12: 0000000000000001 [ 463.947380][ T7718] R13: 00007f4ba1c3b038 R14: 00007f4ba1c3afa0 R15: 00007ffd55629c08 [ 463.960299][ T7723] FAULT_INJECTION: forcing a failure. [ 463.960299][ T7723] name failslab, interval 1, probability 0, space 0, times 1 [ 463.990150][ T7723] CPU: 0 PID: 7723 Comm: syz.1.1998 Not tainted syzkaller #0 [ 463.997531][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.007580][ T7723] Call Trace: [ 464.010869][ T7723] __dump_stack+0x21/0x24 [ 464.015196][ T7723] dump_stack_lvl+0x169/0x1d8 [ 464.019866][ T7723] ? thaw_kernel_threads+0x220/0x220 [ 464.025131][ T7723] ? show_regs_print_info+0x18/0x18 [ 464.030304][ T7723] ? proc_fail_nth_read+0x210/0x210 [ 464.035477][ T7723] dump_stack+0x15/0x1c [ 464.039615][ T7723] should_fail+0x3c1/0x510 [ 464.044038][ T7723] ? getname_flags+0xb9/0x500 [ 464.048715][ T7723] __should_failslab+0xa4/0xe0 [ 464.053483][ T7723] should_failslab+0x9/0x20 [ 464.057988][ T7723] kmem_cache_alloc+0x3d/0x2e0 [ 464.062749][ T7723] getname_flags+0xb9/0x500 [ 464.067266][ T7723] ? mutex_trylock+0xa0/0xa0 [ 464.071854][ T7723] user_path_at_empty+0x2f/0x50 [ 464.076715][ T7723] __se_sys_quotactl+0x11a/0xa90 [ 464.081647][ T7723] ? ksys_write+0x1eb/0x240 [ 464.086145][ T7723] ? __x64_sys_quotactl+0xb0/0xb0 [ 464.091168][ T7723] ? debug_smp_processor_id+0x17/0x20 [ 464.096540][ T7723] __x64_sys_quotactl+0x9b/0xb0 [ 464.101392][ T7723] do_syscall_64+0x31/0x40 [ 464.105807][ T7723] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 464.111697][ T7723] RIP: 0033:0x7f14efa676c9 [ 464.116114][ T7723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.135707][ T7723] RSP: 002b:00007f14ee4cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 464.144100][ T7723] RAX: ffffffffffffffda RBX: 00007f14efcbdfa0 RCX: 00007f14efa676c9 [ 464.152050][ T7723] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000201 [ 464.159997][ T7723] RBP: 00007f14ee4cf090 R08: 0000000000000000 R09: 0000000000000000 [ 464.167955][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.175931][ T7723] R13: 00007f14efcbe038 R14: 00007f14efcbdfa0 R15: 00007ffdc081cbc8 [ 464.224535][ T7734] xt_bpf: check failed: parse error [ 464.411155][ T7741] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 464.529507][ T7749] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.2005: Invalid block bitmap block 0 in block_group 0 [ 464.622157][ T7749] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.2005: Failed to acquire dquot type 0 [ 464.675544][ T7749] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.2005: Freeing blocks not in datazone - block = 0, count = 4096 [ 464.730399][ T7749] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2005: Invalid inode bitmap blk 0 in block_group 0 [ 464.746880][ T463] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 464.782093][ T7749] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 464.836935][ T7749] EXT4-fs (loop1): 1 orphan inode deleted [ 464.853260][ T7749] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 464.901106][ T7762] device wg2 entered promiscuous mode [ 465.609324][ T7777] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.2013: Invalid block bitmap block 0 in block_group 0 [ 465.623275][ T7777] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.2013: Failed to acquire dquot type 0 [ 465.635401][ T7777] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.2013: Freeing blocks not in datazone - block = 0, count = 4096 [ 465.649386][ T7777] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2013: Invalid inode bitmap blk 0 in block_group 0 [ 465.662342][ T7777] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 465.671203][ T7777] EXT4-fs (loop4): 1 orphan inode deleted [ 465.676962][ T7777] EXT4-fs (loop4): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 465.701659][ T463] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:5: Failed to release dquot type 0 [ 466.147661][ T7783] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2015'. [ 466.219954][ T7786] FAULT_INJECTION: forcing a failure. [ 466.219954][ T7786] name failslab, interval 1, probability 0, space 0, times 0 [ 466.245639][ T7786] CPU: 0 PID: 7786 Comm: syz.3.2017 Not tainted syzkaller #0 [ 466.253035][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 466.263086][ T7786] Call Trace: [ 466.266375][ T7786] __dump_stack+0x21/0x24 [ 466.270700][ T7786] dump_stack_lvl+0x169/0x1d8 [ 466.275373][ T7786] ? thaw_kernel_threads+0x220/0x220 [ 466.280659][ T7786] ? show_regs_print_info+0x18/0x18 [ 466.285852][ T7786] ? proc_fail_nth_read+0x210/0x210 [ 466.291045][ T7786] dump_stack+0x15/0x1c [ 466.295195][ T7786] should_fail+0x3c1/0x510 [ 466.299615][ T7786] ? getname_flags+0xb9/0x500 [ 466.304298][ T7786] __should_failslab+0xa4/0xe0 [ 466.309059][ T7786] should_failslab+0x9/0x20 [ 466.313559][ T7786] kmem_cache_alloc+0x3d/0x2e0 [ 466.318345][ T7786] getname_flags+0xb9/0x500 [ 466.322847][ T7786] getname+0x19/0x20 [ 466.326732][ T7786] do_sys_openat2+0xd9/0x6d0 [ 466.331342][ T7786] ? __kasan_check_write+0x14/0x20 [ 466.336448][ T7786] ? fput_many+0x15a/0x1a0 [ 466.340853][ T7786] ? do_sys_open+0xe0/0xe0 [ 466.345267][ T7786] ? fput+0x1a/0x20 [ 466.349069][ T7786] ? ksys_write+0x1eb/0x240 [ 466.353562][ T7786] ? __ia32_sys_read+0x90/0x90 [ 466.358338][ T7786] __x64_sys_openat+0x136/0x160 [ 466.363185][ T7786] do_syscall_64+0x31/0x40 [ 466.367599][ T7786] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 466.373481][ T7786] RIP: 0033:0x7f54653426c9 [ 466.377887][ T7786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.397483][ T7786] RSP: 002b:00007f5463daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 466.405894][ T7786] RAX: ffffffffffffffda RBX: 00007f5465598fa0 RCX: 00007f54653426c9 [ 466.413860][ T7786] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 466.421827][ T7786] RBP: 00007f5463daa090 R08: 0000000000000000 R09: 0000000000000000 [ 466.429802][ T7786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.437766][ T7786] R13: 00007f5465599038 R14: 00007f5465598fa0 R15: 00007ffcd86b5228 [ 466.749182][ T7806] xt_bpf: check failed: parse error [ 466.776833][ T1433] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 467.026845][ T1433] usb 4-1: Using ep0 maxpacket: 16 [ 467.226906][ T1433] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 34159, setting to 1024 [ 467.238114][ T1433] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 467.248318][ T1433] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 467.258863][ T7791] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 467.267029][ T7791] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 467.276107][ T7791] F2FS-fs (loop4): invalid crc value [ 467.283217][ T7791] F2FS-fs (loop4): Found nat_bits in checkpoint [ 467.311822][ T7791] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 467.318981][ T7791] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 467.333444][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2018'. [ 467.397087][ T7815] netlink: 'syz.0.2026': attribute type 12 has an invalid length. [ 467.426876][ T1433] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.450423][ T1433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.465448][ T7819] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2028'. [ 467.467146][ T1433] usb 4-1: Product: syz [ 467.485518][ T1433] usb 4-1: Manufacturer: syz [ 467.497289][ T1433] usb 4-1: SerialNumber: syz [ 467.507063][ T7821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2029'. [ 467.754590][ T24] kauditd_printk_skb: 44 callbacks suppressed [ 467.754603][ T24] audit: type=1400 audit(1763157599.310:3827): avc: denied { write } for pid=7829 comm="syz.2.2031" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 467.788594][ T7830] FAULT_INJECTION: forcing a failure. [ 467.788594][ T7830] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 467.802270][ T7830] CPU: 0 PID: 7830 Comm: syz.2.2031 Not tainted syzkaller #0 [ 467.809631][ T7830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 467.819679][ T7830] Call Trace: [ 467.822969][ T7830] __dump_stack+0x21/0x24 [ 467.827295][ T7830] dump_stack_lvl+0x169/0x1d8 [ 467.831970][ T7830] ? show_regs_print_info+0x18/0x18 [ 467.837171][ T7830] dump_stack+0x15/0x1c [ 467.841317][ T7830] should_fail+0x3c1/0x510 [ 467.845724][ T7830] should_fail_alloc_page+0x4f/0x60 [ 467.850913][ T7830] __alloc_pages_nodemask+0x109/0x5f0 [ 467.856281][ T7830] ? kasan_set_track+0x4a/0x70 [ 467.861041][ T7830] ? kasan_set_free_info+0x23/0x40 [ 467.866152][ T7830] ? __kasan_slab_free+0x11/0x20 [ 467.871200][ T7830] ? slab_free_freelist_hook+0xc5/0x190 [ 467.876772][ T7830] ? kmem_cache_free+0x100/0x2d0 [ 467.881701][ T7830] ? putname+0xfe/0x150 [ 467.885861][ T7830] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 467.891403][ T7830] ? kstrtouint_from_user+0x1a0/0x200 [ 467.896778][ T7830] handle_pte_fault+0x1719/0x3750 [ 467.901801][ T7830] __handle_speculative_fault+0xdd6/0x12c0 [ 467.907598][ T7830] ? finish_fault+0xa70/0xa70 [ 467.912275][ T7830] ? mutex_lock+0x8c/0xe0 [ 467.916604][ T7830] ? mutex_trylock+0xa0/0xa0 [ 467.920980][ T24] audit: type=1400 audit(1763157599.480:3828): avc: denied { read append } for pid=7832 comm="syz.0.2032" name="cpuacct.usage_percpu" dev="incremental-fs" ino=2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.921202][ T7830] ? __fget_files+0x2c4/0x320 [ 467.950750][ T7830] do_user_addr_fault+0x7e7/0xc80 [ 467.954212][ T24] audit: type=1400 audit(1763157599.510:3829): avc: denied { open } for pid=7832 comm="syz.0.2032" path="/387/bus/cpuacct.usage_percpu" dev="incremental-fs" ino=2203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.955767][ T7830] ? ksys_write+0x1eb/0x240 [ 467.955778][ T7830] ? do_kern_addr_fault+0x80/0x80 [ 467.955789][ T7830] ? debug_smp_processor_id+0x17/0x20 [ 467.955800][ T7830] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 467.955810][ T7830] exc_page_fault+0x5a/0xc0 [ 467.955820][ T7830] ? asm_exc_page_fault+0x8/0x30 [ 467.955830][ T7830] asm_exc_page_fault+0x1e/0x30 [ 467.955839][ T7830] RIP: 0033:0x7f4ba18ab92a [ 467.955850][ T7830] Code: b2 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 bf 00 00 c0 fe 41 56 41 55 41 54 45 31 e4 55 53 48 81 ec 08 1b 00 00 <48> 89 7c 24 78 48 8d 9c 24 f0 06 00 00 48 89 74 24 70 48 89 54 24 [ 467.955856][ T7830] RSP: 002b:00007f4ba044a4f0 EFLAGS: 00010206 [ 467.955868][ T7830] RAX: 00007f4ba18ab910 RBX: 00007f4ba1c3afa0 RCX: 0000200000000000 [ 467.955874][ T7830] RDX: 0000200000fe8000 RSI: 000000000000000a RDI: 0000000000000009 [ 467.955879][ T7830] RBP: 00007f4ba044c090 R08: 0000000000000001 R09: 0000000000000000 [ 467.955893][ T7830] R10: 0000000000000009 R11: 0000200000fe8000 R12: 0000000000000000 [ 468.016916][ T1433] cdc_ncm 4-1:1.0: bind() failure [ 468.020411][ T7830] R13: 00007f4ba1c3b038 R14: 00007f4ba1c3afa0 R15: 00000000fec00000 [ 468.021166][ T7830] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 468.040386][ T281] ------------[ cut here ]------------ [ 468.107550][ T1433] cdc_ncm 4-1:1.1: bind() failure [ 468.119668][ T1433] usb 4-1: USB disconnect, device number 7 [ 468.129877][ T281] WARNING: CPU: 1 PID: 281 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 468.142081][ T281] Modules linked in: [ 468.146020][ T281] CPU: 1 PID: 281 Comm: syz-executor Not tainted syzkaller #0 [ 468.155355][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.159917][ T7841] FAULT_INJECTION: forcing a failure. [ 468.159917][ T7841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.176906][ T281] RIP: 0010:drop_nlink+0xc5/0x110 [ 468.179246][ T7841] CPU: 0 PID: 7841 Comm: syz.2.2037 Not tainted syzkaller #0 [ 468.187101][ T281] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 93 22 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bb 30 b8 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 468.190814][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.220617][ T7841] Call Trace: [ 468.223908][ T7841] __dump_stack+0x21/0x24 [ 468.226889][ T281] RSP: 0018:ffffc90000c07cd0 EFLAGS: 00010293 [ 468.228232][ T7841] dump_stack_lvl+0x169/0x1d8 [ 468.228235][ T281] [ 468.228250][ T281] RAX: ffffffff81ab74e5 RBX: ffff888115ec3320 RCX: ffff88811e2da780 [ 468.234296][ T7841] ? show_regs_print_info+0x18/0x18 [ 468.246822][ T281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.249217][ T7841] dump_stack+0x15/0x1c [ 468.254392][ T281] RBP: ffffc90000c07cf8 R08: 0000000000000004 R09: 0000000000000003 [ 468.262339][ T7841] should_fail+0x3c1/0x510 [ 468.262349][ T7841] should_fail_usercopy+0x1a/0x20 [ 468.262367][ T7841] strncpy_from_user+0x24/0x2e0 [ 468.276927][ T281] R10: fffff52000180f88 R11: 1ffff92000180f88 R12: dffffc0000000000 [ 468.278853][ T7841] __se_sys_add_key+0xc9/0x3f0 [ 468.283859][ T281] R13: 1ffff11022bd866d R14: ffff888115ec3368 R15: 0000000000000000 [ 468.288718][ T7841] ? fput+0x1a/0x20 [ 468.288729][ T7841] ? __x64_sys_add_key+0xd0/0xd0 [ 468.288740][ T7841] __x64_sys_add_key+0xbf/0xd0 [ 468.288758][ T7841] do_syscall_64+0x31/0x40 [ 468.307161][ T281] FS: 0000555560825500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 468.309420][ T7841] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 468.313199][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.318111][ T7841] RIP: 0033:0x7f4ba19e46c9 [ 468.318122][ T7841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.318129][ T7841] RSP: 002b:00007f4ba044c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 468.323142][ T281] CR2: 000000110c36c13e CR3: 000000012598b000 CR4: 00000000003506a0 [ 468.327270][ T7841] RAX: ffffffffffffffda RBX: 00007f4ba1c3afa0 RCX: 00007f4ba19e46c9 [ 468.327278][ T7841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 468.327286][ T7841] RBP: 00007f4ba044c090 R08: 000000000ddecef3 R09: 0000000000000000 [ 468.327292][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.327307][ T7841] R13: 00007f4ba1c3b038 R14: 00007f4ba1c3afa0 R15: 00007ffd55629c08 [ 468.336547][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 468.446313][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 468.454746][ T281] Call Trace: [ 468.458113][ T281] shmem_rmdir+0x5b/0x90 [ 468.462370][ T281] vfs_rmdir+0x1b3/0x3e0 [ 468.466998][ T281] incfs_kill_sb+0xfe/0x210 [ 468.471519][ T281] deactivate_locked_super+0xa0/0x100 [ 468.476974][ T281] deactivate_super+0xaf/0xe0 [ 468.481787][ T281] cleanup_mnt+0x446/0x500 [ 468.486337][ T281] __cleanup_mnt+0x19/0x20 [ 468.490957][ T281] task_work_run+0x127/0x190 [ 468.495561][ T281] exit_to_user_mode_loop+0xcb/0xe0 [ 468.498035][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2040'. [ 468.501182][ T281] exit_to_user_mode_prepare+0x76/0xa0 [ 468.515173][ T281] syscall_exit_to_user_mode+0x1d/0x40 [ 468.528251][ T281] do_syscall_64+0x3d/0x40 [ 468.569596][ T7851] xt_bpf: check failed: parse error [ 468.569779][ T281] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 468.581666][ T281] RIP: 0033:0x7fd1e168c9f7 [ 468.590895][ T281] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 468.616905][ T281] RSP: 002b:00007ffc1c6e6858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 468.635535][ T281] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd1e168c9f7 [ 468.638355][ T7853] process 'syz.3.2041' launched '/dev/fd/9' with NULL argv: empty string added [ 468.653809][ T24] audit: type=1400 audit(1763157600.210:3830): avc: denied { execute_no_trans } for pid=7852 comm="syz.3.2041" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1732 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 468.665805][ T281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1c6e6910 [ 468.710458][ T281] RBP: 00007ffc1c6e6910 R08: 0000000000000000 R09: 0000000000000000 [ 468.726942][ T281] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1c6e79a0 [ 468.734931][ T281] R13: 00007fd1e170dd7d R14: 00000000000723d9 R15: 00007ffc1c6e79e0 [ 468.745280][ T281] ---[ end trace c477a3625eeffb23 ]--- [ 468.750808][ T281] ================================================================== [ 468.758880][ T281] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 468.765119][ T281] Write of size 4 at addr 0000000000000170 by task syz-executor/281 [ 468.773079][ T281] [ 468.775408][ T281] CPU: 0 PID: 281 Comm: syz-executor Tainted: G W syzkaller #0 [ 468.784245][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.794298][ T281] Call Trace: [ 468.797590][ T281] __dump_stack+0x21/0x24 [ 468.801917][ T281] dump_stack_lvl+0x169/0x1d8 [ 468.806587][ T281] ? thaw_kernel_threads+0x220/0x220 [ 468.811868][ T281] ? show_regs_print_info+0x18/0x18 [ 468.817065][ T281] ? _raw_spin_lock+0x8e/0xe0 [ 468.821753][ T281] ? _raw_spin_trylock_bh+0x130/0x130 [ 468.827120][ T281] ? ihold+0x20/0x60 [ 468.831008][ T281] kasan_report+0xd8/0x130 [ 468.835416][ T281] ? ihold+0x20/0x60 [ 468.839302][ T281] kasan_check_range+0x280/0x290 [ 468.844236][ T281] __kasan_check_write+0x14/0x20 [ 468.849168][ T281] ihold+0x20/0x60 [ 468.852882][ T281] vfs_rmdir+0x247/0x3e0 [ 468.857123][ T281] incfs_kill_sb+0xfe/0x210 [ 468.861624][ T281] deactivate_locked_super+0xa0/0x100 [ 468.866990][ T281] deactivate_super+0xaf/0xe0 [ 468.871661][ T281] cleanup_mnt+0x446/0x500 [ 468.876068][ T281] __cleanup_mnt+0x19/0x20 [ 468.880477][ T281] task_work_run+0x127/0x190 [ 468.885082][ T281] exit_to_user_mode_loop+0xcb/0xe0 [ 468.890279][ T281] exit_to_user_mode_prepare+0x76/0xa0 [ 468.895734][ T281] syscall_exit_to_user_mode+0x1d/0x40 [ 468.901186][ T281] do_syscall_64+0x3d/0x40 [ 468.905612][ T281] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 468.911497][ T281] RIP: 0033:0x7fd1e168c9f7 [ 468.915915][ T281] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 468.935521][ T281] RSP: 002b:00007ffc1c6e6858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 468.943930][ T281] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd1e168c9f7 [ 468.951904][ T281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1c6e6910 [ 468.959877][ T281] RBP: 00007ffc1c6e6910 R08: 0000000000000000 R09: 0000000000000000 [ 468.967848][ T281] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1c6e79a0 [ 468.975823][ T281] R13: 00007fd1e170dd7d R14: 00000000000723d9 R15: 00007ffc1c6e79e0 [ 468.983792][ T281] ================================================================== [ 468.991856][ T281] Disabling lock debugging due to kernel taint [ 468.999126][ T281] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 469.001151][ T24] audit: type=1400 audit(1763157600.560:3831): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 469.006922][ T281] #PF: supervisor write access in kernel mode [ 469.006928][ T281] #PF: error_code(0x0002) - not-present page [ 469.006940][ T281] PGD 11de6f067 P4D 11de6f067 PUD 0 [ 469.006960][ T281] Oops: 0002 [#1] PREEMPT SMP KASAN [ 469.006971][ T281] CPU: 0 PID: 281 Comm: syz-executor Tainted: G B W syzkaller #0 [ 469.006983][ T281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 469.052601][ T24] audit: type=1400 audit(1763157600.560:3832): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.060020][ T281] RIP: 0010:ihold+0x26/0x60 [ 469.060032][ T281] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 d1 28 b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 80 1a f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 469.060039][ T281] RSP: 0018:ffffc90000c07d10 EFLAGS: 00010246 [ 469.060049][ T281] RAX: ffff88811e2da700 RBX: 0000000000000000 RCX: 0000000000000286 [ 469.060061][ T281] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 469.089603][ T24] audit: type=1400 audit(1763157600.560:3833): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.091522][ T281] RBP: ffffc90000c07d20 R08: 0000000000000004 R09: 0000000000000003 [ 469.091532][ T281] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 1ffff1102206764a [ 469.091538][ T281] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 469.091546][ T281] FS: 0000555560825500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 469.091560][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.098270][ T24] audit: type=1400 audit(1763157600.560:3834): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.115627][ T281] CR2: 0000000000000170 CR3: 000000012598b000 CR4: 00000000003506b0 [ 469.115637][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.115644][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.115648][ T281] Call Trace: [ 469.115664][ T281] vfs_rmdir+0x247/0x3e0 [ 469.115683][ T281] incfs_kill_sb+0xfe/0x210 [ 469.154274][ T24] audit: type=1400 audit(1763157600.560:3835): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 469.159011][ T281] deactivate_locked_super+0xa0/0x100 [ 469.159021][ T281] deactivate_super+0xaf/0xe0 [ 469.159037][ T281] cleanup_mnt+0x446/0x500 [ 469.184459][ T24] audit: type=1400 audit(1763157600.560:3836): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 469.191830][ T281] __cleanup_mnt+0x19/0x20 [ 469.191841][ T281] task_work_run+0x127/0x190 [ 469.191854][ T281] exit_to_user_mode_loop+0xcb/0xe0 [ 469.191863][ T281] exit_to_user_mode_prepare+0x76/0xa0 [ 469.191881][ T281] syscall_exit_to_user_mode+0x1d/0x40 [ 469.337724][ T281] do_syscall_64+0x3d/0x40 [ 469.342133][ T281] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 469.348022][ T281] RIP: 0033:0x7fd1e168c9f7 [ 469.352433][ T281] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 469.372029][ T281] RSP: 002b:00007ffc1c6e6858 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 469.380434][ T281] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd1e168c9f7 [ 469.388385][ T281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1c6e6910 [ 469.396340][ T281] RBP: 00007ffc1c6e6910 R08: 0000000000000000 R09: 0000000000000000 [ 469.404299][ T281] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1c6e79a0 [ 469.412280][ T281] R13: 00007fd1e170dd7d R14: 00000000000723d9 R15: 00007ffc1c6e79e0 [ 469.420234][ T281] Modules linked in: [ 469.424113][ T281] CR2: 0000000000000170 [ 469.428267][ T281] ---[ end trace c477a3625eeffb24 ]--- [ 469.433710][ T281] RIP: 0010:ihold+0x26/0x60 [ 469.438194][ T281] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 d1 28 b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 80 1a f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 51 [ 469.457794][ T281] RSP: 0018:ffffc90000c07d10 EFLAGS: 00010246 [ 469.463847][ T281] RAX: ffff88811e2da700 RBX: 0000000000000000 RCX: 0000000000000286 [ 469.471807][ T281] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 469.479772][ T281] RBP: ffffc90000c07d20 R08: 0000000000000004 R09: 0000000000000003 [ 469.487727][ T281] R10: fffffbfff0d8ee48 R11: 1ffffffff0d8ee48 R12: 1ffff1102206764a [ 469.495680][ T281] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 469.503634][ T281] FS: 0000555560825500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 469.512542][ T281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.519112][ T281] CR2: 0000000000000170 CR3: 000000012598b000 CR4: 00000000003506b0 [ 469.527070][ T281] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 469.535017][ T281] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 469.542971][ T281] Kernel panic - not syncing: Fatal exception [ 469.549300][ T281] Kernel Offset: disabled [ 469.553624][ T281] Rebooting in 86400 seconds..