last executing test programs:

17.253537421s ago: executing program 1 (id=579):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="9b03397272edd9fd7b0b7345d3ed", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c)

16.309875621s ago: executing program 1 (id=582):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x30d800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
flistxattr(0xffffffffffffffff, &(0x7f0000000000)=""/32, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
getrandom(&(0x7f0000000100)=""/56, 0x38, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = creat(&(0x7f0000000140)='./bus\x00', 0xc)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
userfaultfd(0x80801)
write$cgroup_int(r4, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

15.250253947s ago: executing program 2 (id=585):
r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
read$usbmon(r0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40200, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600))
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141437000000000000000000000000000000000000000092010000000000000600000000000000ffff00000000020000000800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffbf000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c)
listen(r8, 0x0)
listen(r7, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

14.196099962s ago: executing program 0 (id=588):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

14.195507772s ago: executing program 2 (id=589):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x109, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x33, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x5, 0x5], [0x6, 0x1e, 0x6, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x2f7, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x12, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0x200, 0x5, 0x7, 0x6, 0x2, 0x1, 0x6, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd5, 0x7, 0x20, 0x7, 0x4, 0x8, 0x437, 0x7, 0x9, 0xe8b, 0x5, 0x8, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0xf5e, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x2, 0x7, 0x6d7e, 0x3, 0x4, 0x1008001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffe, 0x2005, 0x7, 0x4, 0x2000ea, 0x9, 0x5, 0x2, 0x100000d9, 0x0, 0x7ff, 0x401, 0x5], [0xc, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x9, 0x4, 0x50, 0x8, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x403e, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f8, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7ffd, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0xffffffff, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]})
ioctl$UI_DEV_CREATE(r0, 0x5501)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r1 = socket$key(0xf, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @IFLA_BROADCAST={0xa}]}, 0x5c}}, 0xc080)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r5, 0x805, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000}, 0x5b353622bf71e4b6)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$selinux_access(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723ae6ffffffffffffff3a73302030"], 0x56)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="bb80193522512efa66a527420000000000000000ba8e1ca4309894940a000049fd169ae2cd74", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r9}, 0x18)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0209000002"], 0x10}, 0x1, 0xfdffffff}, 0x0)

6.844811634s ago: executing program 4 (id=593):
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000"], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffff7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
pipe2(&(0x7f0000000200), 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.835894575s ago: executing program 1 (id=594):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r0, 0xfffffffffffffffe, 0x39)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x164)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x9, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000380)={'gretap0\x00', <r7=>0x0, 0x40, 0x8, 0x2571, 0x9dc, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x65, 0x0, 0x80, 0x2b, 0x0, @multicast1, @multicast2, {[@end]}}}}})
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x14b0, 0x12, 0x200, 0x70bd29, 0x25dfdbff, {0x11, 0x81, 0x2, 0xa, {0x4e22, 0x4e21, [0x80000000, 0xda, 0x3, 0x80], [0x5, 0x1, 0x8, 0x9], r7, [0x3c38, 0xb]}, 0x8, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "067916ffff5fcb46ab2ca771d542101eee590f8430f1541e27e5d0520b5e4c87172e57bdcc5d70efab714aa7396df30faec0f27bac337441194d602cd87bb141eb3a2495aeca0a6e56fc7a9692272f8c2c9e739a63060e41be46784f91e48233ebe53d6e2b4b3c79e237ea51cf9ac81abfb862304c133a"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "91cd2d3f0827613fce7958f824464e2650bfee5d842acc4c8e1b9047de8a0392"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "ed49cdc3d11e2a3b3a3cf33919fbc29365cfbb092a4d44eb8305a8b1654ec580099ab9eae2a0ba07eb329671dda892568c874d828974e337795f8d6ab7383bb00530c0fc79144de8929052c6bf1bdefc3da6454d7059397bd1e2fa1af1ec9d797b831a620010a4e168503b5bf3b245af7be0207eb4d57d0397c0cc1b0f67407213a26bb571e32e2b1fa6d5442a9b4b4b236ce5c95a02d5f0cc8305c073fed00cf9422fc17da9860afdfc2c90a99d1acbbcd5b9706cbeaddf5ed0cb062c4b5867ed7c593294420ac4bba2e86cb07b9f5d8d198e43d4330376cd470ffdb4882a"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "54513592bea095dd0e6a1ee0d6f8a6e662b9f394063d06ad40db9e2124970a4a24e535b166b7bbadcc7777125f9bb70d4d7e5fa3eac5df5354"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "fd21897b05e10c8695e925b20fbb827065b95f2118"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "1a91efc58afc6eb03008091cfa383067047df18ed145945989bc65a8f1fff717a14b43fd3e4c3ddd2f3c0a7d6b6cd0afeadfb4a1f1904fd71ff88c6216bc8ea67f8706d3df136d1f48f20088f46bd56a947d808c7cbecbe472f4ab655864731666ceb75cdcbc5546a441661b28fffc7700ae231d4d56902a2a692911a49722b31aca1ba1ff1c98661eb4a1e0e9f5855bdc97ded0785979135dd019ef7083ded25c29eb897dee467daab03a3a1fab757ba52af291d00087b57d0d0e6fe1801733"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "7a3a9f187e9be2f0d6861b4d25aac13b1f50c261168ab3a0f15b5ac71bd35558d7af02996745ef97fe31a070489cbc06173f3b6769ca8a761db93d1f5f0b3246063c2b8b4930bbf15dea841b3d227d95b3856f74fbac1762b2fe2a557ab710aa1a7a785c06a9cd21b3e902c2ad6ecf727e8b90f316bc9fcd27bf1c4a4a150c2e42416b51ccdfe460730609053df16b70c91e03f1567f697622cc5f85cc0527aea2c37ba36f94ab0360520fc299ea9571dcab"}]}, 0x14b0}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f0000000200)=r6}, 0x20)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0)

6.765347884s ago: executing program 2 (id=595):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

6.730492149s ago: executing program 0 (id=596):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
lseek(r0, 0x96, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = open(&(0x7f0000001b80)='.\x00', 0x2000, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000088)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x2f318d099e60314b, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x0, 0xfff, r2})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==")
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c900200ff040000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000b46700000000000000000000000500a9b9c1d800000000000000000000030000000000000000000000002e0000000000000000000000000000000000000000000000000000000000000000000000fffffffffcffffff090000020000000004000000001000"/194])
write$cgroup_subtree(r8, &(0x7f0000000700)=ANY=[@ANYBLOB='E'], 0x31)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.376562844s ago: executing program 3 (id=597):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
getdents64(r0, 0xfffffffffffffffe, 0x39)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100ffff0000000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x164)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x9, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@verity_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000380)={'gretap0\x00', <r7=>0x0, 0x40, 0x8, 0x2571, 0x9dc, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x65, 0x0, 0x80, 0x2b, 0x0, @multicast1, @multicast2, {[@end]}}}}})
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x14b0, 0x12, 0x200, 0x70bd29, 0x25dfdbff, {0x11, 0x81, 0x2, 0xa, {0x4e22, 0x4e21, [0x80000000, 0xda, 0x3, 0x80], [0x5, 0x1, 0x8, 0x9], r7, [0x3c38, 0xb]}, 0x8, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "9d41a1d4d5c9bd32897b391d71a3afb5099b370d4766e69f8185e5e464b735dd45fa22574f366f6f17a842b1ec6384819271842e70168dd4e2cd287d992e6409b26b75661dfee9ea642fe8a95e47e3e7191683554e46b9e220f8e074b78cf144106fc409ce94caddc7323e9cc50a6d2aa6a89d72f2373ef991e0fdc2a226e8b0417e10a509af61bb761017ff10a184ed8df6f2a474ed80d2ea89a43edc4dcf7c7b2062ea87652985dab3cce4f5283d0629e3909558d40728915d57fea7f567f1fc2c3066ec6978800fb2f7e1583ee96e3348317e0f6fa1baddfaee3675090895c0edbc3081a899115df644d03685f515cc0b644d8659d685313ed44698b0b52b109cf9a536f8db004a74b3ded31a85de669dc01c6a58f1ff12ca0e08ccea2c3c06edb5c7520a734804367ba490d0a7323e5317db2fb9bba35376cb04f90aa88d9fea22d5267d85ef0b527a4f10a325a0391d476f71097e3142577b6a0983ccd4bfccde4e39eba4e537f041121b7c21349d5ab24b53b57d6819c9c70c784e55ac641da657313f420a5fbe5e4c3e4415fb7bd6a6ac25ef10733d3edb3d4ae9b4b5c308cb52606914a5425339252076a2402780d486f448c38e04eec2fc2be0f7adc22de817f1635bd9bd298b900c25f488c6bd02a8e59b68137a664066413d32502c9561a5681faa66d5f46b4d9a023ff63f16b10a1a0abc0ecc627793aa37f3176d3c479f292133163aa835ecf2aa4f66b8f251ccf93aa211e1e75d44176fe9de4a4a70eb6a02f7de17c8c1c2e875016c69c59780d1f154e303a7cfe2e235e4dbe8343f825411441d5185077d444368015063095a4a1c61ac2b578d8187a697c2e2dbf21d392f3b08ad7b75ed0db838d670f7d926b41f8a266b1cd5a6c9505a672ec0b10182c22595105b7ab36ffccfe71de84b166ebe1324d7883cf77aa24dc867f13cc3ab0fd975a325e83a852dd0cdcc465d1998194c349e22c7f1b212bab2afec89a31abf258ac0428b8706990b9e565fa0db4e305cecb9baeb2db6f4d63606d7620c584757df2491655107c52abf471f3ad593e8f294ef7933479a6a7fbb16a200386f448f96c198476cbce83e1dfbfed2a0733049c57392a7dde25a9c4c92e8593d3672bab2c4d9c9b58200de1c277bc9805a0bbdd5d905fe37ccf10bc15925f618286a03b1d948780567d74bb0e74c81c5dc2b96765c25cc9f2efa6f799d49093f52251cac21df36619b0c84fd5fa2f85c752b2e4ed2bb8342d83af53ec326be2c3028688f5ce6c16676718298ba469be0ba3e66780bdb6073bd188a6fd140bd7194f4ad1f7652d74c9b9f4387e5af60aecd29401bcd1e90f2bd5102909aab9597053dff8325e034e26dd347580d6138dc5998273e53874f03d55b456fbbfcb7d11b903abbab18072a72cbef510cad8387fb69bb941e00cfaf3abc7bedc812719a3ea78e34e8299f54bd3daaa73beb28f48132d293858494724db395004ae415c403cf0a06eefe22b302d6e2620995913fd99e863518043f0bf2b4510bb28821319f047292ca4453983a0be74bd70b2f1123e479d01450dc233d5befb9ed2eecabe60f41d11f9212bf497e60276bee16027af537fe947f234dd085ebcf48d08e625e6d094616947e6cb7d9a65e045ba6901d850b6b372bc8a39b5a4c6acdf9c9f0f1ff5bb7fd1259a5b7261adad2da9b088df6a1d97704d35ff332622663d7cc99dd0931ed97420b9eabf627728874d149b690636a9ffa86fe32c83a7518bf63ba9f7e2d389ace3bbfffa5436358071325902eb41244e70f82ccc093574249702f96d5de5fba063a54dd0b8a4834262c0ab48bdb2d57b01a516678ef5993c58f43b3a7bc92d6100c9b0c5951ec60eabf64f55fbcc4c1da2cd8a7d90de9396ca2e986307daac67e5647d11d74982aed5eb41a9199620cfe8ced02b9c7feedd7439e55b27b3a685bbd980b7b78eab7c0cf5fdc2fd4b463c66ff419e5caf30fc42c4c7435a8fbd75d35a54eaea2124b1150e96e1b43e24c15cb4a5dc39a0083fb73cffb2136e4b3af31307ae70b33b74fbfa51b8875b7ddcab287a0269fb724db1aed2daaa2c2b8ad656f6c7830c2c95b3442c40c5704a91b84e3d8a035eb9847a002711e20c0506060fc6fb560f4bbb49f1ef805f63914fb41f9d78a1414a31678a7193e4d2b651b33ab2210477906a3f73e58d7f1ab7d4bf9f8a5e09c24f3c9bd3248b40e010d8c928825add1fdbbcca2e8dbdbe5101a2513e2f752c90de917bcdbf52f1b67dcc8049ea4972a1996bdf39e5242c59baa952e91034c0a3dab9c889c5ba8c6828bab524a2aad6102ea15ccc5d0274601bffdce0a4ba17cc3cecd84d32ee636c3b3857972cbfc48d489a10305ebfa6ac1001669285a9fb9549a6c43f0ede0ae0e279fae0556440e720bb30c97b474f14b358fd26e8b69a0f862a3fba5b55d599449f089fc05014d0ba63ade95e364a83642dbfb36f45747789257bd93b0ce536e9828873cbc7efe39463fd7be877c8a57eb1903fc56bc1f2eee84a4911d54bdf44c6ea0f920f265e6ef3e1e069dba17c530387b27dd8436aa51d33dd54789c589ed89eaa4eecd532598c51274c3ab1eaefb938ac5505f23e9bc1e864167091480df55e413873bb52114fd3d4d09aa425f4eec4bd15e38ee6d6307ec8a7330a17fa2e4ea0b9d8e953e63d8a73c2837d51e32a6fcb9c21a06f5c879587f6c8dba1c11cb99da649d8dddad8e317932ebaaf79ddf5e204bd8e581412b8a8a3669a5313f565e3a45ce38e442f8215d818742ba0cb38db0bf1e43fb494e52614930af5aa6f227deea045457b83203d7d58a12bd5bb9e4a2e1d0f45dd0d38653ca8c607f94778149e59669938ae3402caff4b09f836373e4ff577e8235ba0fd3dfbe613e071d497ee361f0d77ead2ac01a930c9abffef5401fbfaa89c20a2c4cb0407dcf7295a8e79f0e460005851501e19f8e6fa4726dc24423b8ec6c38c78493e36c6f0e5c8ffa7ab154de9e5c3c7f475e43287c204ebc9d9b4f59388da4568b57d6a77b82976de1a5b1f4105a45446265dc1fcb9bdd8fec39b28808210aeff13638e2aac52e21669317c1c16a62345b529ed44225ad912c2dab77f56a6927a94e5287c0a27d02b876f27c3f34c9ddcdfb054fc76ee762874f0ce480ca957d064809ce655efdb85d20212d111514238990316e5774fd737f67c722243d0532bd0c4dc543d42cb09f2aa57dfed3d9724e344e6096fd9fdbe99eeb0400ced32e0d5d02d73f3169ca290dc98a364151c347d00996cdda8cd5e8835a537a7953df1d7428568b48fbfb426dcb50c3a09f10b15977bfab6ecb9c3ee786d957c318c6d0350d26972cae2a41435dff2b44f74f011e3b57891259e6b69adf436342ee5ad304538f961c1a6eae02823f9856934211a21c06e0f6aa75f1185002c74d308dce27eecaa9b540cb5d3f5e4b4d1b96cd9b10e43476358a7f81897dd4e048abc93e6fd37d2a263934cce24ebf7432b773d1ecaea1730b73dc3aa6e455832bbf3d0e6f7ba734b17985f01c8e70bc2707bdb5db663c756217bfd36415e9a7699580b043ad4339f14e61100d4475b156b7381d6803eba4a1f5788985abe6a8895e0fdbf3658eb6f438e5aa22832dfd212b55b650170e8acde228e86c0813d988a39bf3f62baf89f5b876d93cdb13857d5029692f31830f6febddcc36ca9b244af36a9d11d80b372cb8b033a87b11bd98efc7ba80d4918a0b10ad81c0c692b93a17d60e625c4274d3913c48a7715ef08d0208ede09f128e8c5d392e588c4449c5a244828e728f9b88de498338185687dd4f122c5c96933c167885ef162bcb84159f2ab1077ff391052f0530d6681b301cc7f22781974f9e78e3d6d01c3c864d198842caa79329230b795581ec9bf5b0c97021a2ea8e4743114165bea2a49792c717f8f4eebe1101a4847e53eb26d653099ef0d34f17ef69e7827b8ebb843adf1a7d61866fefc48d22a3adee7b01eb1b72672b0be0432cfc9e56bf35b60603f8939f329ec01e7c6d8886404809991929edab2c2b25658324866938dea05e00518aaf0e35b7f575573b208a0772b4c96ffdbc419eeb716e09d707a24f1eac7bdf90c7fc24bc5814c3f3d539bb4b4afdd40afe5fa717f92a1d00a879c0a2faecd7446d1f7d16362a5a89889fa6faa94fe5e9d6549dfa4e1dfe67251d310a127019a0a31f473a832ebfeb40bac94c15570f7b65a048ec5e0906eaece69f1019cc5e1e779bf77a112e6cb8e791d9535bd5dde05c9ae5e7ad7320cd816a6dd2ee6342e1563f4991b537fc83dd9ea51dedf2b22895b208d92234468b230508d1bf071fffd3dc60a6cc4115a21b4f5edd7bf96c978d4f4d351063d001fede54d2d18516dbaf759a878877de762347dbc426c32bff51540d04fc94df854759a55ef24183be6e5c6fd8689e7472e779452315105608c3cd7639a299164db3a90fb3585d53cd0c9834047a286342bcb2c4d24caa9c0be57d4d3ccbe3e2a51cbda5c45e238577a5f255d2c78220d57782b59bb67f6a276dd64faf99459a466654d67195cd9ad853736576068549b61858c5ad1bcf0909685ea01ccb0d39cf99c27b90dfce9227527303a42fd3dc9726348e116e0a5a6026647c968da0bac9f216ea6598a59a8025de28577749fcfe1705a38628764092f3829cdf24f24d7409ccb4d0e97208515246b988cdb43a769153db71edef24e7f1fb5ef7f56bbaf878ec6b9b63c813f5da58f6e15e346f495680caefc7824e87fc516029cecc891fdce2e9805bb98b42f74542cc16fd3863049b44cb35454b22af41ab87c7d185f7ee7535ca5df52ad46a493c66fd30bcb9faa225119e74cfbaf91779773176c6ba01f169cbd6443d3c3d833e6bb9396b68e665c63fde871130a3d117bb55eb08890e5522149b070a1935a38d4424f181bad16ec68b3b04ca571af25fd6e50f5c515867777228fb5fd0068d1bf9318e010f09540dc68db3d99086f98bfdcf4cd48410e7d788fe454ec780a47bb2c1e82a4369981094b57d8f70d4c2d9777575b0211c490fb6f74216e4b23abc1f0ee3dd8e2fd218c927f9ed6ef29b331891d39e275d3164f53e4b0d9b83e9766f266123a28a5240c77041a96f8fbf3fa4557f02f1b4c452b8520a63a4c645e21560ca5066bd8100d7730de120f5001f65015c895b690c6c03d354451eff0fe778c9dd73a1464d53b1c4c98cb824b87e4dcace31bb984e75f796b54f7f2f939e01ef0fecea01ddb5908f02448e904b883aff98beb3c18bc3b98162467f8d13a98059ca5ef00353793824f20fcde6acdc30de3a3e3564e1211fe88fd2d7ef4ff6d9ff485119031d3ac41cc506454e53c9e6dd13341dccaf196bea122a7f82dccc537fef224b06c6828d08686dbc9dd05315f75b2e9198400aa6615056e3e33939dffcbe2bc87ae1f62b85004c7e435356882d47b37750aa62f898b9203fe2f54062ec6e6ac55beb42d3ff98ac3400ff80030fe12b16b975b8d86c0ac1cf4eb817b6ed517e19f6584a7b2f939d572763250707ae3f59327251e94a7c5f3467af88ec1a3bd31baf457e59f3f73b371a5d07dde484d6ec8eb2e8b67ad7be66101b99dd823918883b623d3d7ae53c4cd090bd6ccd782fc8cdeb5d11491a453cd4d3189f3837fcc34e0657f8ffcc84f5c1399b7151dfc24d66391ed62d4fc77a172312da609bf439d88af2bf94b849cbee68c7284fc503530a6ce911085a0144c98cbf821f497b1a8293eff7f3fb43ce509997223e887830a129db1e9413"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "067916ffff5fcb46ab2ca771d542101eee590f8430f1541e27e5d0520b5e4c87172e57bdcc5d70efab714aa7396df30faec0f27bac337441194d602cd87bb141eb3a2495aeca0a6e56fc7a9692272f8c2c9e739a63060e41be46784f91e48233ebe53d6e2b4b3c79e237ea51cf9ac81abfb862304c133a"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "91cd2d3f0827613fce7958f824464e2650bfee5d842acc4c8e1b9047de8a0392"}, @INET_DIAG_REQ_BYTECODE={0xe3, 0x1, "ed49cdc3d11e2a3b3a3cf33919fbc29365cfbb092a4d44eb8305a8b1654ec580099ab9eae2a0ba07eb329671dda892568c874d828974e337795f8d6ab7383bb00530c0fc79144de8929052c6bf1bdefc3da6454d7059397bd1e2fa1af1ec9d797b831a620010a4e168503b5bf3b245af7be0207eb4d57d0397c0cc1b0f67407213a26bb571e32e2b1fa6d5442a9b4b4b236ce5c95a02d5f0cc8305c073fed00cf9422fc17da9860afdfc2c90a99d1acbbcd5b9706cbeaddf5ed0cb062c4b5867ed7c593294420ac4bba2e86cb07b9f5d8d198e43d4330376cd470ffdb4882a"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "54513592bea095dd0e6a1ee0d6f8a6e662b9f394063d06ad40db9e2124970a4a24e535b166b7bbadcc7777125f9bb70d4d7e5fa3eac5df5354"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "fd21897b05e10c8695e925b20fbb827065b95f2118"}, @INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "1a91efc58afc6eb03008091cfa383067047df18ed145945989bc65a8f1fff717a14b43fd3e4c3ddd2f3c0a7d6b6cd0afeadfb4a1f1904fd71ff88c6216bc8ea67f8706d3df136d1f48f20088f46bd56a947d808c7cbecbe472f4ab655864731666ceb75cdcbc5546a441661b28fffc7700ae231d4d56902a2a692911a49722b31aca1ba1ff1c98661eb4a1e0e9f5855bdc97ded0785979135dd019ef7083ded25c29eb897dee467daab03a3a1fab757ba52af291d00087b57d0d0e6fe1801733"}, @INET_DIAG_REQ_BYTECODE={0x101, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb6, 0x1, "7a3a9f187e9be2f0d6861b4d25aac13b1f50c261168ab3a0f15b5ac71bd35558d7af02996745ef97fe31a070489cbc06173f3b6769ca8a761db93d1f5f0b3246063c2b8b4930bbf15dea841b3d227d95b3856f74fbac1762b2fe2a557ab710aa1a7a785c06a9cd21b3e902c2ad6ecf727e8b90f316bc9fcd27bf1c4a4a150c2e42416b51ccdfe460730609053df16b70c91e03f1567f697622cc5f85cc0527aea2c37ba36f94ab0360520fc299ea9571dcab"}]}, 0x14b0}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f0000000200)=r6}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0)
ioctl$SNAPSHOT_FREE(r8, 0x3305)

1.376143784s ago: executing program 2 (id=598):
r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
read$usbmon(r0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40200, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600))
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141437000000000000000000000000000000000000000092010000000000000600000000000000ffff00000000020000000800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffbf000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c)
listen(r8, 0x0)
listen(r7, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

1.375564194s ago: executing program 3 (id=599):
r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
read$usbmon(r0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40200, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600))
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141437000000000000000000000000000000000000000092010000000000000600000000000000ffff00000000020000000800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffbf000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c)
listen(r8, 0x0)
listen(r7, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

1.375423294s ago: executing program 4 (id=600):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10)
ioctl$UI_SET_PHYS(r0, 0x4004556e, &(0x7f0000000dc0)='syz1\x00')

1.375272865s ago: executing program 0 (id=601):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0xfc, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (fail_nth: 1)

1.368281585s ago: executing program 4 (id=602):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file1/file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000004c0)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="0000000000000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005"], 0x50)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24)
syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

1.368093945s ago: executing program 0 (id=603):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0xfc, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000900)={0x18, 0x0, 0x0, {0xfffffffffffffffd}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
mkdir(&(0x7f0000000580)='./file0\x00', 0xe0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000180)=ANY=[@ANYBLOB='inode32,nr_inodes=g'])
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r4}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000)
chdir(&(0x7f0000000040)='./file0\x00')
r6 = fsopen(&(0x7f0000000300)='vxfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x1)
fchdir(r7)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8)
r9 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r9, 0x0, 0x0)

1.367954665s ago: executing program 0 (id=604):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0xfc, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000900)={0x18, 0x0, 0x0, {0xfffffffffffffffd}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10)
mkdir(&(0x7f0000000580)='./file0\x00', 0xe0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000180)=ANY=[@ANYBLOB='inode32,nr_inodes=g'])
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000)
chdir(&(0x7f0000000040)='./file0\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r4, 0x0, 0x0)

1.367600625s ago: executing program 3 (id=605):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="9251426fba487c39b1ee47b682c54c4e187b240232ba35698370724332ec3f54b1adb8eefa8931a721a3aeb2690c8c3df51690929b58d1bb3316d57a6dacbce899c93acb3bfdbe58362ff959bac37688c64d49e00f1f4a33b74022eabb26ad29ee2ae8a5b6fee87c172334f30b949b7085e47d64fc029a71a1a2201898c4020ff84fa2360293407155ec763aa86240e0b2fd5eb833", 0x95, 0xfffffffffffffff9)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8)
r3 = getegid()
keyctl$chown(0x4, r0, r2, r3)
keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000280)='user\x00', &(0x7f00000002c0))
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x20}, 0x18)
r5 = syz_clone3(&(0x7f0000000600)={0x10000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x3}, &(0x7f0000000440)=""/196, 0xc4, &(0x7f0000000540)=""/69, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58)
sched_setaffinity(r5, 0x8, &(0x7f0000000680)=0x2)
userfaultfd(0x80001)
ptrace$PTRACE_SETSIGMASK(0x420b, r5, 0x8, &(0x7f00000006c0)={[0x7]})
setresuid(r2, r2, r2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x4, [@restrict={0x2}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x1}, @union={0xc, 0x2, 0x0, 0x5, 0x0, 0x2, [{0xf, 0x0, 0xc}, {0x6, 0x5, 0x9}]}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x1, 0x9}, @enum64={0xf, 0x6, 0x0, 0x13, 0x0, 0x4, [{0x1, 0x2, 0x9}, {0x8, 0x8, 0x3}, {0xc, 0x0, 0x3}, {0x9, 0x3a9f, 0x17}, {0x1, 0x7, 0xe9}, {0x9, 0x0, 0xa}]}, @float={0x5, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000a00)=""/62, 0xc8, 0x3e, 0x1, 0x0, 0x10000}, 0x28)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x101800)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x1b, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8e1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa4, '\x00', 0x0, @fallback=0xa, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x1, 0xb, 0x10, 0x3}, 0x10, 0xffffffffffffffff, r8, 0x9, 0x0, &(0x7f0000000b00)=[{0x2, 0x5, 0xd, 0x5}, {0x5, 0x1, 0x2, 0xe}, {0x1, 0x2, 0x3, 0x5}, {0x4, 0x3, 0x7, 0xc}, {0x2, 0x1, 0x3, 0x2}, {0x1, 0x3, 0x7, 0x3}, {0x5, 0x1, 0x8, 0xc}, {0x2, 0x4, 0x10, 0x9}, {0x0, 0x2, 0x2, 0xb}], 0x10, 0xb63}, 0x94)
getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000c80)={'mangle\x00', 0x0, [0x6, 0x5, 0x8000, 0x7, 0x101]}, &(0x7f0000000d00)=0x54)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f0000000d40))
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80), 0x10002, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000e40)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, <r10=>0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000f40)=0xe8)
mount$9p_fd(0x0, &(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), 0x2000, &(0x7f0000000f80)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}, {@access_client}, {@cachetag={'cachetag', 0x3d, 'user\x00'}}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@cache_none}], [{@uid_eq}, {@uid_gt={'uid>', r10}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@seclabel}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}})
read$FUSE(r8, &(0x7f0000001080)={0x2020, 0x0, <r11=>0x0}, 0x2020)
statx(r8, &(0x7f00000030c0)='./file0/file0\x00', 0x0, 0x2, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
write$FUSE_ATTR(r8, &(0x7f0000003200)={0x78, 0xfffffffffffffffe, r11, {0x9, 0x2, 0x0, {0x0, 0x40, 0x0, 0x5, 0x4, 0xf3, 0x9, 0x3, 0x2, 0x2000, 0xa5, r2, r12, 0x7, 0x7}}}, 0x78)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004540)={r7, 0x20, &(0x7f0000004500)={&(0x7f0000003480)=""/70, 0x46, <r13=>0x0, &(0x7f0000003500)=""/4096, 0x1000}}, 0x10)
r14 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000004580), 0x200, 0x0)
r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000045c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', r1, r8, 0x5, 0x5, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000004680)={0x15, 0xd, &(0x7f0000003280)=@raw=[@call={0x85, 0x0, 0x0, 0x3a}, @map_val={0x18, 0x0, 0x2, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0xff, 0xe, 0xe, 0x5, 0x4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000003300)='GPL\x00', 0x1, 0xa8, &(0x7f0000003340)=""/168, 0x41100, 0x2, '\x00', r9, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000003400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000003440)={0x1, 0x0, 0x8, 0x2ff380}, 0x10, r13, r14, 0x0, &(0x7f0000004640)=[r15], 0x0, 0x10, 0xfffffffb}, 0x94)
r16 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r16, 0x89f0, &(0x7f0000004840)={'gretap0\x00', &(0x7f0000004740)={'sit0\x00', r9, 0x700, 0x8000, 0x1c000000, 0x291, {{0x31, 0x4, 0x3, 0x33, 0xc4, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast2, @private=0xa010102, {[@generic={0x89, 0x9, "7ba2937054c4cd"}, @timestamp_addr={0x44, 0xc, 0x19, 0x1, 0x0, [{@empty, 0x7}]}, @timestamp={0x44, 0x20, 0x9c, 0x0, 0x5, [0x0, 0x1, 0x5, 0x10000, 0x0, 0x7c3, 0x3]}, @lsrr={0x83, 0xb, 0xf2, [@rand_addr=0x64010101, @empty]}, @ssrr={0x89, 0xb, 0xfa, [@local, @dev={0xac, 0x14, 0x14, 0x44}]}, @rr={0x7, 0xb, 0xfb, [@remote, @dev={0xac, 0x14, 0x14, 0x28}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x3, 0xcc}, @cipso={0x86, 0x50, 0x0, [{0x7, 0xd, "e79a9d3233c99c87873371"}, {0x7, 0x7, '\f:9\b\''}, {0x1, 0xd, "530edcc9f380232ba57dcf"}, {0x7, 0xa, "9e6b05ca555c08fa"}, {0x2, 0x12, "df85f1705edc28ca98bd78fa24f3d394"}, {0x6, 0xd, "bdba71935485c8c9e4fe5d"}]}]}}}}})
sendto$inet6(0xffffffffffffffff, &(0x7f00000048c0)="ab368fd046814ec36831ae96f5176bef04a9863ffb1b2f789cd26418188c90d08891aede114d4a6620827358620b1bbf638fdb8f42fcc5df0da81af75bd10a4b9ae7abead7abd4cb5605354e1d8d8706cfc5dc36eca8a3bec9157cad66cc6651d51830e9498e04205329cd65d01db25ee4cfb5574892fe19afa9445fd7a15098ef6baf2744b5e1c1cb540cc355ba0d455d5a0e05ddf5426711b789808b350ff3999fcd64bf427de5ee8b124865dc07", 0xaf, 0x0, &(0x7f0000004980)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x2}, 0x1c)

1.367166735s ago: executing program 2 (id=606):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)

1.366139425s ago: executing program 1 (id=607):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setrlimit(0x7, &(0x7f0000000180)={0x200, 0x9})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x4)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
close_range(r5, 0xffffffffffffffff, 0x0)

1.365778595s ago: executing program 3 (id=608):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@nogrpid}, {@noblock_validity}, {@discard}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@jqfmt_vfsold}, {@data_writeback}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'user_u'}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket(0x10, 0x3, 0x7)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0xc4}}, 0x80)
syz_emit_ethernet(0x28, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="140000000400000004000000020002"], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

1.184053399s ago: executing program 0 (id=609):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000212000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

396.27958ms ago: executing program 1 (id=610):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6082dc05000811ff20010000000000000000000000000002fe8000000000000000000000000000aa4e224e20000890787a1ebd377a868468679d890e644cba4378186f7d24f23a199dbd7c8ddeae7ecc4b075038d8f30b5872db6fde6aae36bad680244e4b6e65717eb290f0744a1ec4344a6327d14b93510786d1a096d1200cd8a42d807b75b4b9d1825a4be18d566f28d58b85b600af986097269effa8ee843d32c43ca56849d0f2e141b349dc7727cdb7db7aba8cab84fd4571a2ea5848dab3bf9b4080ea6483616af1837c5120512cdf470bcbd54aadc7b53ba3aa61dd2e71"], 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x40)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)

381.504382ms ago: executing program 3 (id=611):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
socket(0x400000000010, 0x3, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/72, 0x48, <r1=>0x0, &(0x7f00000002c0)=""/254, 0xfe}}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x800, 0x5)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000005c80)=@base={0x9, 0x6, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000950000000000000018e66cf776a0a771f9f48ac4de0eb6833934d965f32655b819d05a32ef3adef7b628aef8cd99555cf0b71d243ec21574d52d2d3471d7e39885ad6a0179c6717bb1fb2312a56e4c4fff3ca5b1fd9186ca275c9f8ef0b838ec4c46"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)=r2}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x26, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @alu={0x7, 0x1, 0x9, 0x7, 0x4, 0x30, 0x8}, @alu={0x7, 0x0, 0xc, 0x3, 0x12, 0xc, 0x8}, @call={0x85, 0x0, 0x0, 0xad}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r6], 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r8}, 0x10)
sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000800))
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x1, 0x4, 0x7fe2, 0x80, 0x56e60, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @value=r3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r11}, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ")
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

364.338634ms ago: executing program 2 (id=612):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00')
lseek(r0, 0x96, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = open(&(0x7f0000001b80)='.\x00', 0x2000, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x20000088)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x2f318d099e60314b, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x0, 0xfff, r2})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==")
r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000004c900200ff040000030001000000000000000000000000000000000000000000000000000000000000000000000000000000000000b46700000000000000000000000500a9b9c1d800000000000000000000030000000000000000000000002e0000000000000000000000000000000000000000000000000000000000000000000000fffffffffcffffff090000020000000004000000001000"/194])
write$cgroup_subtree(r8, &(0x7f0000000700)=ANY=[@ANYBLOB='E'], 0x31)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

363.754734ms ago: executing program 4 (id=613):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10)
ioctl$UI_SET_PHYS(r0, 0x4004556e, &(0x7f0000000dc0)='syz1\x00')

293.410923ms ago: executing program 4 (id=614):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)

199.616945ms ago: executing program 3 (id=615):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r5, 0xffffffffffffffff, 0x0) (fail_nth: 1)
prlimit64(0x0, 0xe, 0x0, 0x0)

70.821091ms ago: executing program 1 (id=616):
r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
read$usbmon(r0, 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x40200, 0x0)
ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000600))
syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141437000000000000000000000000000000000000000092010000000000000600000000000000ffff00000000020000000800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffbf000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r8, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c)
listen(r8, 0x0)
listen(r7, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

0s ago: executing program 4 (id=617):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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")
syz_mount_image$fuse(&(0x7f0000000700), &(0x7f00000000c0)='./file0\x00', 0x30c407a, &(0x7f00000006c0)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f00000105c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x1, 0x105e7, &(0x7f0000010600)="$eJzs3M1uG1UYBuDPDW3aUkqF+sOOkRBSImGrTtKKCgkCtAKkpor4WbABHHtiubU9IXackDVILLiN7hAbFlwBG+4DCSE2ILEDgTwzqZqqEil1k5Y8jzR5zxyf+XzGycLHE08Ah9aZ5I/fK3E6TkTEVEScisjblXLLLRbxfES8EBFH7toqZf+djmMRcTIiTo+LFzUr5UPffvb9X6Pt61/dfvWXj6/c/q1ycGcN7LfX79l/KSJ6a0V7s1dk1i7yZtnfGHXy7C2Myiwe6N0q97MiN9OVvMJmY2dcI8/5djE+W9sYjHO122iOs91ZzfvX+sUTDkbtnTr5ATcb6/l+K13JszPI8mxvF/PaKnN7MCzqtMp6n+flYzjcyaI/3UqL81m7lWezPyz7i7pZK90a56jM8umimXVb+TxWHuilfqJc7/Q3tpJRuj7oZP3kUq3+Sq1+uVpfz1rpMF2oNnqtywvJTLs7HlYdpo3eYjvL2t201sx6s8lMu9ms1uvJzNV0pdPoJ/V6bb52sXpptmy9nLx948Ok20pmxvlmp78x7HQHyWq2nhRHzCZztfkrs8mL9eT9peVk+b1r15aWP/jk6kc33lh6961y0M60pvO/iWG6kMzMXZybq9YvVufqs4fn/O9Ma4LnDw/FO0mABzb59f+U9T/wr6z/d6//p63/D+X697CfPzwU7yQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6tn45+907eOFPsP132P1N2PRcRFyLifESci4i/72Mqju2qeTYiKmX7fuOP3jOHHyqRVxgfM11uJyNisdz+fPZRvwoAAADw//XNj198GTE1buY/XjvoCbGfyg9tjk+qXv6Rz1OTqnY2L7Y1oWrndkpOxPmIOHrm1wlVuxARR059OqFqezK1K47fFZUijuznbAAAgP2xeyUwsdUbAAAAj52v9zhu+hHPg32WX68t/xe/vBZc/o7LC4Indu0BAAAAT6DKQU8AAAAA2LP/+l3dfP0/6fv//ez+fwAAAPBYKe7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zcPY7aQBQH8AeOQz4VFPFxFaooJQWHyBFS5gDJbdJxhCgS4hykyxEiiBjPFl5RrNZjvIt+P8m8GQv+PKAaDzIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAn/7U2/XP/fcfXXOOv06dlPk0AAAAwCWHertOg2kzf5vPv8+nPkbEMiIWETGPiEtr9ypetjJnETHK40vPr+/18DsiJZxfM8nHm4j4nI9/H/r+FgAAAOB27XerTUR1HqaHT0M3xDXlizavSuWlSz4vSqXNUti3Qmnzu8giFhFRT/8WSltGxPjdl0JpD1Ll0vrt02TUlPE1uwEAAK6japViqzcAAACenK9DN8Aw0n5t/i9+3gueNCVvC75uzQAAAIBnaDR0AwAAAEDv0vrf/f8AAADgtjX3/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBPh3q73u9Wm645x1M3j3rTcdeuAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/rM/LycQAmEQBnvXd06D+YclDRqDB6tA+PgbDwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzL7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhvvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNifuxMIgSAIg33nf06L+YclDRqDCFWw8DHDPCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMUOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX25942YSCM4/DrS6LEbTJCeisfM9BQIRiBDwnJkmdgABaioaK1WARWAAnONaLADc/T/H/FSXcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyn080TLxFRROoyRRquvg6vEfEWad22g/dLFpvjvvm45mS7G+X8jPF3GRFlFH18BwCgd1W3ORbLev6T9zfvX97/vNW0qWf3XFI+4OEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGbn/l2biOIAgH/T/GhqJxcXF0GhXTSm/kqhg4tQEcTFwbG0sRRTLW0FW0Ss/4Hgn6FTV/8GdwcHnQTpoCKCk6S5NKcEDK29C+3nA+/u+1577967IfC99xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtrMV4924EKXoxR3vvz6d73f+8v3dqW6597a0ku6z3Us5Iu4vtZoXs5rIEHr2V31tY/PBXKvVXD3EYDTieVb3SoJKHLCfahzSCKv/o59KZPAM9xFEDMUwBKkgivu7PJ/PJwAAjq5yUtp5/cfy9my7rTAT7Wwxlf9HTKTiGDD///n6xc30vdL5fz2zGQ6/2vrySm1tY/P80vLcYnOx+bA+PX35SuPa1al6bfddSe24vzEBAADgoCpJSef/IzMRO1vX9/6n/bcTqTgGzP8f37pzut1WTa4pyv/76i365T0SAACA4+3kmR/fCn3aC5VKPJlbX1+td4579anOMYeh/tvdP6ujSUnn/8WZnMYGAAAAZGpnqzAeEdvd+kJy7rv+P9m7Lr3+/+FV6Xa6z2JEjCXr/xfmH7UWMpnJ8MviS8h5zxEAAIB8jSUlvf5f3t3/3/vNv5GImDzbibutg+z/nzj35nP6Xun9/5cym+FwGml0nsfuuRFRauQ9IgAAAI6yalLa+f+ncsyu/np5o2L/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2bF7lIiBKADAyc5GK3FBsLHxBKKd1YKF4D1EQfAIXsE7eAfvkVK0tJYtxMJW3iSjyzYLFok/3weT9xKGzMtUeQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACstTj5ylNcZl0+6Z89vt6cR3xaieHlrd2NEXk9ZNG/UH08dgUAAAD8B6n091VVPTf3ZxEn89z/N2VO9Px3W11e+vnVvr/E0vvH2EsP758Lzbp14qWXV9cXh4N94c+3vXbGNO98PntJ5RBmZ9Hk/axv2/Z0I6ebAxQLAHzLQYl9Uv6HIh6NWRgAf9n+8s20H9VS/5/mo9QFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKiPAAAA//+28mhV")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x11, 0x0, "efe21a000000000008d6a4ae6dddfbd1ce5d29c2cb5e5ca9000fff7f0000117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts.
[   50.035989][   T28] audit: type=1400 audit(1768568125.495:64): avc:  denied  { mounton } for  pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   50.039024][  T274] cgroup: Unknown subsys name 'net'
[   50.058754][   T28] audit: type=1400 audit(1768568125.495:65): avc:  denied  { mount } for  pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   50.086017][   T28] audit: type=1400 audit(1768568125.515:66): avc:  denied  { unmount } for  pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   50.086364][  T274] cgroup: Unknown subsys name 'devices'
[   50.227973][  T274] cgroup: Unknown subsys name 'hugetlb'
[   50.233691][  T274] cgroup: Unknown subsys name 'rlimit'
[   50.338470][   T28] audit: type=1400 audit(1768568125.795:67): avc:  denied  { setattr } for  pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   50.361698][   T28] audit: type=1400 audit(1768568125.795:68): avc:  denied  { mounton } for  pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   50.386525][   T28] audit: type=1400 audit(1768568125.795:69): avc:  denied  { mount } for  pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   50.410917][  T276] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   50.419754][   T28] audit: type=1400 audit(1768568125.875:70): avc:  denied  { relabelto } for  pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   50.445208][   T28] audit: type=1400 audit(1768568125.875:71): avc:  denied  { write } for  pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   50.474055][   T28] audit: type=1400 audit(1768568125.925:72): avc:  denied  { read } for  pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   50.475085][  T274] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   50.499638][   T28] audit: type=1400 audit(1768568125.925:73): avc:  denied  { open } for  pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   52.495853][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.502923][  T283] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.510519][  T283] device bridge_slave_0 entered promiscuous mode
[   52.536860][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.543943][  T283] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.551523][  T283] device bridge_slave_1 entered promiscuous mode
[   52.564599][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.571710][  T282] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.579142][  T282] device bridge_slave_0 entered promiscuous mode
[   52.586918][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.593975][  T282] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.601453][  T282] device bridge_slave_1 entered promiscuous mode
[   52.658749][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.665919][  T284] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.673374][  T284] device bridge_slave_0 entered promiscuous mode
[   52.682022][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.689131][  T284] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.696705][  T284] device bridge_slave_1 entered promiscuous mode
[   52.755404][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.762598][  T285] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.770057][  T285] device bridge_slave_0 entered promiscuous mode
[   52.793662][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.800812][  T285] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.808310][  T285] device bridge_slave_1 entered promiscuous mode
[   52.819540][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.826632][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.833961][  T286] device bridge_slave_0 entered promiscuous mode
[   52.861343][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.868427][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.875775][  T286] device bridge_slave_1 entered promiscuous mode
[   52.982637][  T283] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.989719][  T283] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.997022][  T283] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.004062][  T283] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.034867][  T282] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.041951][  T282] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.049235][  T282] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.056276][  T282] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.083330][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.090417][  T284] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.097721][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.104764][  T284] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.132508][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.139934][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.147330][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.154510][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.161884][    T8] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.169234][    T8] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.178303][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.185689][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.213451][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.221674][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.228744][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.236302][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.244528][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.251579][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.279653][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.287750][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.295673][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.315858][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.324283][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.332657][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.339758][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.347419][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.361749][  T283] device veth0_vlan entered promiscuous mode
[   53.374706][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.382711][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.390849][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.398682][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.406658][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.414772][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.421804][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.441992][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.449486][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.457912][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.464954][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.474310][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.482571][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.489673][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.497187][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.505334][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.512406][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.519871][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.528192][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.535242][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.542667][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.550762][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.568052][  T283] device veth1_macvtap entered promiscuous mode
[   53.583698][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.592210][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.600702][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.609074][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.617244][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.625371][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.633482][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.641724][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.649901][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.658121][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.666386][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.674043][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   53.681695][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   53.689427][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   53.697782][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   53.706110][    T8] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.713131][    T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[   53.720574][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   53.743116][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.751464][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.760081][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   53.768604][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   53.777389][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.784434][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.791897][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   53.800103][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   53.819841][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   53.828099][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.836640][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.845000][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.845716][  T283] request_module fs-gadgetfs succeeded, but still no fs?
[   53.855121][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.869026][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.877540][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.885789][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.901747][  T284] device veth0_vlan entered promiscuous mode
[   53.919660][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.929497][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.938707][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.947717][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.956267][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.964689][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.980929][  T285] device veth0_vlan entered promiscuous mode
[   53.987879][  T282] device veth0_vlan entered promiscuous mode
[   53.994109][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   54.001990][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   54.009618][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   54.017520][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   54.024990][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   54.033874][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   54.042385][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   54.050509][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   54.064101][  T286] device veth0_vlan entered promiscuous mode
[   54.081574][  T282] device veth1_macvtap entered promiscuous mode
[   54.091487][  T284] device veth1_macvtap entered promiscuous mode
[   54.100054][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   54.108135][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   54.115605][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   54.124124][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   54.132414][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.141588][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.150192][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   54.158600][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.167165][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.175461][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   54.183549][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   54.191432][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   54.202596][  T285] device veth1_macvtap entered promiscuous mode
[   54.238777][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.247122][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.255272][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   54.263379][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.271842][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.433219][  T286] device veth1_macvtap entered promiscuous mode
[   54.509754][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.521456][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.539263][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.550250][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.613089][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.627683][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.637787][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.646387][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.654826][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.663317][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.672210][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.680914][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.689497][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.698120][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.706745][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.715153][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   55.614101][   T28] kauditd_printk_skb: 34 callbacks suppressed
[   55.614117][   T28] audit: type=1400 audit(1768568131.035:108): avc:  denied  { create } for  pid=348 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   56.237484][   T28] audit: type=1400 audit(1768568131.065:109): avc:  denied  { connect } for  pid=348 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   56.913350][  T369] loop3: detected capacity change from 0 to 512
[   56.922632][   T28] audit: type=1400 audit(1768568132.345:110): avc:  denied  { lock } for  pid=353 comm="syz.3.4" path="socket:[15638]" dev="sockfs" ino=15638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[   57.038015][  T359] loop1: detected capacity change from 0 to 4096
[   57.067163][  T369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   57.408607][  T359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   57.585814][    C0] sched: RT throttling activated
[   57.595271][   T28] audit: type=1400 audit(1768568132.535:111): avc:  denied  { mount } for  pid=353 comm="syz.3.4" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   57.690683][  T368] loop4: detected capacity change from 0 to 4096
[   57.716650][   T28] audit: type=1400 audit(1768568133.155:112): avc:  denied  { write } for  pid=358 comm="syz.1.7" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   57.792058][  T368] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   57.803173][  T284] EXT4-fs (loop3): unmounting filesystem.
[   57.842230][   T28] audit: type=1400 audit(1768568133.155:113): avc:  denied  { add_name } for  pid=358 comm="syz.1.7" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   57.929129][  T386] loop3: detected capacity change from 0 to 4096
[   57.951932][   T28] audit: type=1400 audit(1768568133.155:114): avc:  denied  { create } for  pid=358 comm="syz.1.7" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   57.973477][   T28] audit: type=1400 audit(1768568133.155:115): avc:  denied  { read append open } for  pid=358 comm="syz.1.7" path="/1/file1/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   58.002010][   T28] audit: type=1400 audit(1768568133.455:116): avc:  denied  { create } for  pid=377 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.039551][  T386] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   58.097451][  T282] EXT4-fs (loop1): unmounting filesystem.
[   58.129676][   T28] audit: type=1400 audit(1768568133.455:117): avc:  denied  { write } for  pid=377 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.172459][  T394] overlayfs: overlapping lowerdir path
[   58.688459][  T390] syz.4.9 (390) used greatest stack depth: 21248 bytes left
[   58.704380][  T286] EXT4-fs (loop4): unmounting filesystem.
[   58.923907][  T284] EXT4-fs (loop3): unmounting filesystem.
[   59.030585][  T415] loop4: detected capacity change from 0 to 512
[   59.888669][  T416] netlink: 'syz.2.19': attribute type 16 has an invalid length.
[   59.896429][  T416] netlink: 'syz.2.19': attribute type 17 has an invalid length.
[   59.911214][  T416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   59.918768][  T416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   60.313515][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   60.406260][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.407303][  T415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   60.489522][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   60.521610][  T420] loop3: detected capacity change from 0 to 4096
[   60.530894][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.586410][  T420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   60.598879][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.624859][   T28] kauditd_printk_skb: 13 callbacks suppressed
[   60.624875][   T28] audit: type=1400 audit(1768568136.075:131): avc:  denied  { append } for  pid=421 comm="syz.0.21" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   60.633168][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.669747][  T422] netlink: 64 bytes leftover after parsing attributes in process `syz.0.21'.
[   60.682072][   T28] audit: type=1400 audit(1768568136.115:132): avc:  denied  { create } for  pid=421 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.750926][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.776415][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.786448][   T28] audit: type=1400 audit(1768568136.125:133): avc:  denied  { bind } for  pid=421 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.829243][   T28] audit: type=1400 audit(1768568136.125:134): avc:  denied  { setopt } for  pid=421 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.856950][  T429] netlink: 64 bytes leftover after parsing attributes in process `syz.2.23'.
[   60.859399][   T28] audit: type=1400 audit(1768568136.125:135): avc:  denied  { write } for  pid=421 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.932806][   T28] audit: type=1400 audit(1768568136.125:136): avc:  denied  { nlmsg_write } for  pid=421 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   60.937037][  T286] EXT4-fs (loop4): unmounting filesystem.
[   60.953596][   T28] audit: type=1400 audit(1768568136.175:137): avc:  denied  { write } for  pid=421 comm="syz.0.21" name="event1" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   60.981971][   T28] audit: type=1400 audit(1768568136.175:138): avc:  denied  { open } for  pid=421 comm="syz.0.21" path="/dev/input/event1" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   61.105878][   T28] audit: type=1400 audit(1768568136.185:139): avc:  denied  { name_bind } for  pid=421 comm="syz.0.21" src=28194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[   61.144319][   T28] audit: type=1400 audit(1768568136.185:140): avc:  denied  { node_bind } for  pid=421 comm="syz.0.21" src=28194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   61.245192][  T441] overlayfs: overlapping lowerdir path
[   61.754794][  T284] EXT4-fs (loop3): unmounting filesystem.
[   61.813297][  T448] loop3: detected capacity change from 0 to 4096
[   61.832501][  T448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   62.503470][  T446] netlink: 64 bytes leftover after parsing attributes in process `syz.2.29'.
[   62.605483][  T284] EXT4-fs (loop3): unmounting filesystem.
[   62.944948][  T465] overlayfs: overlapping lowerdir path
[   63.031523][  T469] netlink: 64 bytes leftover after parsing attributes in process `syz.1.34'.
[   66.206492][  T493] netlink: 64 bytes leftover after parsing attributes in process `syz.1.40'.
[   66.600395][  T512] netlink: 64 bytes leftover after parsing attributes in process `syz.1.45'.
[   68.306834][  T523] syz.0.44 (523) used greatest stack depth: 21072 bytes left
[   68.367509][  T535] overlayfs: overlapping lowerdir path
[   69.925315][  T547] overlayfs: overlapping lowerdir path
[   70.335244][   T28] kauditd_printk_skb: 7 callbacks suppressed
[   70.335380][   T28] audit: type=1400 audit(1768568145.745:148): avc:  denied  { create } for  pid=542 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.362033][   T28] audit: type=1400 audit(1768568145.745:149): avc:  denied  { bind } for  pid=542 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.381148][   T28] audit: type=1400 audit(1768568145.745:150): avc:  denied  { setopt } for  pid=542 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   70.418273][   T28] audit: type=1400 audit(1768568145.745:151): avc:  denied  { write } for  pid=542 comm="syz.2.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   71.236666][  T560] netlink: 64 bytes leftover after parsing attributes in process `syz.0.57'.
[   71.794805][  T574] netlink: 'syz.4.60': attribute type 16 has an invalid length.
[   71.802581][  T574] netlink: 'syz.4.60': attribute type 17 has an invalid length.
[   71.813842][  T574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   71.821177][  T574] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   72.731802][  T583] overlayfs: overlapping lowerdir path
[   72.817521][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   72.835050][  T578] netlink: 64 bytes leftover after parsing attributes in process `syz.3.58'.
[   72.889771][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.898312][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   72.906850][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.915508][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.933487][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.953253][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.971506][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.022925][  T590] fuse: Unknown parameter 'ÿÿÿÿÿÿªªªªª»†Ý`'
[   75.964561][  T600] netlink: 'syz.4.64': attribute type 16 has an invalid length.
[   75.972298][  T600] netlink: 'syz.4.64': attribute type 17 has an invalid length.
[   75.996597][  T600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   76.067682][  T601] netlink: 'syz.2.66': attribute type 16 has an invalid length.
[   76.075412][  T601] netlink: 'syz.2.66': attribute type 17 has an invalid length.
[   76.085246][  T601] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   77.891586][  T615] netlink: 64 bytes leftover after parsing attributes in process `syz.2.72'.
[   78.015356][  T639] netlink: 64 bytes leftover after parsing attributes in process `syz.0.75'.
[   78.024579][  T632] netlink: 64 bytes leftover after parsing attributes in process `syz.1.74'.
[   78.540262][  T647] netlink: 64 bytes leftover after parsing attributes in process `syz.1.78'.
[   78.682155][   T28] audit: type=1400 audit(1768568154.135:152): avc:  denied  { mounton } for  pid=612 comm="syz.4.70" path="/10/file0" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   79.000476][  T664] overlayfs: overlapping lowerdir path
[   79.232471][  T660] fuse: Bad value for 'fd'
[   79.397258][  T666] netlink: 64 bytes leftover after parsing attributes in process `syz.2.83'.
[   82.018892][  T690] netlink: 64 bytes leftover after parsing attributes in process `syz.0.87'.
[   82.314353][  T689] netlink: 64 bytes leftover after parsing attributes in process `syz.4.90'.
[   84.792418][  T719] netlink: 64 bytes leftover after parsing attributes in process `syz.3.94'.
[   85.588082][  T728] overlayfs: overlapping lowerdir path
[   86.103068][  T738] netlink: 64 bytes leftover after parsing attributes in process `syz.4.100'.
[   86.665271][  T751] netlink: 'syz.1.102': attribute type 16 has an invalid length.
[   86.673252][  T751] netlink: 'syz.1.102': attribute type 17 has an invalid length.
[   86.691113][  T751] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   86.698795][  T751] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   86.761563][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   86.933570][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   87.033742][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   87.042437][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   87.050856][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   87.059320][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   87.075271][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   87.083630][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   87.183027][  T761] netlink: 64 bytes leftover after parsing attributes in process `syz.3.105'.
[   87.349457][  T765] netlink: 64 bytes leftover after parsing attributes in process `syz.3.107'.
[   87.536465][  T777] fuse: Bad value for 'fd'
[   87.541325][  T771] netlink: 64 bytes leftover after parsing attributes in process `syz.3.108'.
[   89.518532][  T806] netlink: 64 bytes leftover after parsing attributes in process `syz.2.118'.
[   89.547672][  T626] udevd[626]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   89.752787][  T821] netlink: 'syz.2.120': attribute type 16 has an invalid length.
[   89.760665][  T821] netlink: 'syz.2.120': attribute type 17 has an invalid length.
[   89.771922][  T821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   90.806161][  T826] fuse: Bad value for 'fd'
[   90.923640][  T835] netlink: 64 bytes leftover after parsing attributes in process `syz.2.123'.
[   91.408912][  T588] udevd[588]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[   91.739915][  T844] netlink: 'syz.2.126': attribute type 16 has an invalid length.
[   91.747759][  T844] netlink: 'syz.2.126': attribute type 17 has an invalid length.
[   91.759470][  T844] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   92.299827][  T848] loop0: detected capacity change from 0 to 4096
[   92.362966][  T848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   93.576261][  T862] netlink: 64 bytes leftover after parsing attributes in process `syz.1.132'.
[   93.585954][  T858] netlink: 64 bytes leftover after parsing attributes in process `syz.4.130'.
[   94.417393][  T878] netlink: 'syz.4.134': attribute type 16 has an invalid length.
[   94.425227][  T878] netlink: 'syz.4.134': attribute type 17 has an invalid length.
[   94.450012][  T878] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   94.733020][  T285] EXT4-fs (loop0): unmounting filesystem.
[   96.532786][  T588] udevd[588]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[   97.260660][  T918] loop0: detected capacity change from 0 to 4096
[   97.270160][  T918] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   97.364893][  T915] netlink: 64 bytes leftover after parsing attributes in process `syz.3.144'.
[   97.374774][  T913] netlink: 64 bytes leftover after parsing attributes in process `syz.4.143'.
[   98.765727][  T955] Zero length message leads to an empty skb
[   98.801705][  T956] netlink: 'syz.4.152': attribute type 16 has an invalid length.
[   98.809747][  T956] netlink: 'syz.4.152': attribute type 17 has an invalid length.
[   98.823986][  T956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  101.096287][  T285] EXT4-fs (loop0): unmounting filesystem.
[  101.276312][  T971] netlink: 64 bytes leftover after parsing attributes in process `syz.2.157'.
[  101.551178][  T588] udevd[588]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  101.961076][ T1001] 9pnet: Could not find request transport: fd00000000000000000000006
[  102.182337][ T1011] netlink: 'syz.0.167': attribute type 16 has an invalid length.
[  102.190247][ T1011] netlink: 'syz.0.167': attribute type 17 has an invalid length.
[  102.207104][ T1011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  102.214518][ T1011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  104.348566][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  104.388513][  T995] syz.1.162 (995) used greatest stack depth: 20944 bytes left
[  104.436650][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.455207][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  104.493597][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.533071][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.576848][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.585321][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  104.593579][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  104.872764][  T588] udevd[588]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  107.408118][ T1050] overlayfs: overlapping lowerdir path
[  107.755703][ T1052] overlayfs: overlapping lowerdir path
[  107.860751][ T1054] netlink: 64 bytes leftover after parsing attributes in process `syz.2.181'.
[  109.663881][ T1077] netlink: 'syz.2.185': attribute type 16 has an invalid length.
[  109.671819][ T1077] netlink: 'syz.2.185': attribute type 17 has an invalid length.
[  109.686634][ T1077] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  110.014102][ T1083] fuse: Bad value for 'fd'
[  110.022670][ T1079] fuse: Bad value for 'fd'
[  110.520450][  T626] udevd[626]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  110.608305][ T1099] netlink: 'syz.1.192': attribute type 16 has an invalid length.
[  110.616172][ T1099] netlink: 'syz.1.192': attribute type 17 has an invalid length.
[  110.630000][ T1099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  111.231279][ T1109] fuse: Bad value for 'fd'
[  111.236198][ T1106] netlink: 64 bytes leftover after parsing attributes in process `syz.0.195'.
[  111.245447][ T1108] netlink: 64 bytes leftover after parsing attributes in process `syz.4.194'.
[  111.506857][  T626] udevd[626]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  111.853056][ T1124] netlink: 64 bytes leftover after parsing attributes in process `syz.0.200'.
[  112.451588][ T1132] fuse: Bad value for 'fd'
[  113.279293][ T1136] netlink: 64 bytes leftover after parsing attributes in process `syz.0.202'.
[  113.340389][ T1138] loop0: detected capacity change from 0 to 4096
[  113.378220][ T1138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  113.490970][  T588] udevd[588]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  113.820599][  T588] udevd[588]: setting mode of /dev/loop1 to 060660 failed: No such file or directory
[  113.843676][  T588] udevd[588]: setting owner of /dev/loop1 to uid=0, gid=6 failed: No such file or directory
[  113.870800][  T588] udevd[588]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  114.283607][ T1165] fuse: Bad value for 'fd'
[  114.350960][  T285] EXT4-fs (loop0): unmounting filesystem.
[  114.713682][ T1168] netlink: 64 bytes leftover after parsing attributes in process `syz.0.211'.
[  114.988765][ T1183] netlink: 64 bytes leftover after parsing attributes in process `syz.0.214'.
[  115.756298][ T1195] syz.4.218[1195] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.756389][ T1195] syz.4.218[1195] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  115.886913][ T1201] netlink: 64 bytes leftover after parsing attributes in process `syz.3.219'.
[  116.483579][  T626] udevd[626]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  117.034185][  T588] udevd[588]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  117.553502][ T1236] netlink: 64 bytes leftover after parsing attributes in process `syz.3.229'.
[  119.241434][ T1249] netlink: 64 bytes leftover after parsing attributes in process `syz.1.232'.
[  119.377912][ T1260] fuse: Bad value for 'fd'
[  119.501583][ T1263] netlink: 64 bytes leftover after parsing attributes in process `syz.3.236'.
[  121.033621][ T1284] fuse: Bad value for 'fd'
[  121.526801][ T1261] syz.0.234 (1261) used greatest stack depth: 20248 bytes left
[  121.597414][  T588] udevd[588]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  122.275484][  T588] udevd[588]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  122.322188][  T626] udevd[626]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory
[  123.877091][ T1329] overlayfs: overlapping lowerdir path
[  124.263674][ T1336] netlink: 64 bytes leftover after parsing attributes in process `syz.4.255'.
[  124.567665][  T626] udevd[626]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  124.623857][ T1351] overlayfs: overlapping lowerdir path
[  124.639635][  T626] udevd[626]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  124.896081][ T1353] netlink: 64 bytes leftover after parsing attributes in process `syz.4.260'.
[  125.029078][ T1357] netlink: 64 bytes leftover after parsing attributes in process `syz.4.261'.
[  126.730166][ T1381] netlink: 64 bytes leftover after parsing attributes in process `syz.4.267'.
[  127.369431][ T1392] overlayfs: overlapping lowerdir path
[  129.253079][  T588] udevd[588]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  129.644906][ T1423] overlayfs: overlapping lowerdir path
[  130.083444][ T1428] netlink: 64 bytes leftover after parsing attributes in process `syz.0.278'.
[  130.160910][ T1430] fuse: Bad value for 'fd'
[  130.341666][ T1437] netlink: 64 bytes leftover after parsing attributes in process `syz.2.281'.
[  130.801505][ T1440] overlayfs: overlapping lowerdir path
[  132.642207][ T1446] syz.2.284 (1446) used greatest stack depth: 19520 bytes left
[  132.760920][ T1468] netlink: 'syz.0.289': attribute type 16 has an invalid length.
[  132.768796][ T1468] netlink: 'syz.0.289': attribute type 17 has an invalid length.
[  132.786793][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  133.260925][ T1473] overlayfs: overlapping lowerdir path
[  133.565658][ T1479] netlink: 'syz.1.291': attribute type 16 has an invalid length.
[  133.573764][ T1479] netlink: 'syz.1.291': attribute type 17 has an invalid length.
[  133.614529][ T1479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  133.931926][   T28] audit: type=1400 audit(1768568209.385:153): avc:  denied  { write } for  pid=1481 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  133.967117][   T28] audit: type=1400 audit(1768568209.415:154): avc:  denied  { getopt } for  pid=1476 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  134.004416][ T1486] netlink: 48 bytes leftover after parsing attributes in process `syz.0.293'.
[  134.209466][   T28] audit: type=1400 audit(1768568209.665:155): avc:  denied  { name_bind } for  pid=1488 comm="syz.1.295" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  134.313569][   T28] audit: type=1400 audit(1768568209.765:156): avc:  denied  { ioctl } for  pid=1483 comm="syz.4.294" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  134.313930][ T1484] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  134.416597][   T28] audit: type=1400 audit(1768568209.825:157): avc:  denied  { write } for  pid=1483 comm="syz.4.294" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  134.445964][ T1492] overlayfs: overlapping lowerdir path
[  135.631618][   T28] audit: type=1400 audit(1768568211.085:158): avc:  denied  { read } for  pid=1512 comm="syz.0.302" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  135.694746][   T28] audit: type=1400 audit(1768568211.085:159): avc:  denied  { open } for  pid=1512 comm="syz.0.302" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  135.758318][   T28] audit: type=1400 audit(1768568211.095:160): avc:  denied  { map } for  pid=1512 comm="syz.0.302" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  135.815293][   T28] audit: type=1400 audit(1768568211.265:161): avc:  denied  { ioctl } for  pid=1512 comm="syz.0.302" path="/dev/ashmem" dev="devtmpfs" ino=269 ioctlcmd=0x6615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  136.585950][   T28] audit: type=1400 audit(1768568212.035:162): avc:  denied  { create } for  pid=1531 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  137.093360][ T1533] netlink: 96 bytes leftover after parsing attributes in process `syz.0.305'.
[  137.148573][ T1537] FAULT_INJECTION: forcing a failure.
[  137.148573][ T1537] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  137.185906][ T1537] CPU: 1 PID: 1537 Comm: syz.2.306 Not tainted syzkaller #0
[  137.193258][ T1537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  137.203351][ T1537] Call Trace:
[  137.206647][ T1537]  <TASK>
[  137.209591][ T1537]  __dump_stack+0x21/0x24
[  137.213967][ T1537]  dump_stack_lvl+0xee/0x150
[  137.218574][ T1537]  ? __cfi_dump_stack_lvl+0x8/0x8
[  137.223632][ T1537]  dump_stack+0x15/0x24
[  137.227809][ T1537]  should_fail_ex+0x3d4/0x520
[  137.232508][ T1537]  should_fail+0xb/0x10
[  137.236688][ T1537]  should_fail_usercopy+0x1a/0x20
[  137.241728][ T1537]  _copy_to_user+0x1e/0x90
[  137.246157][ T1537]  simple_read_from_buffer+0xe9/0x160
[  137.251548][ T1537]  proc_fail_nth_read+0x19a/0x210
[  137.256583][ T1537]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  137.262138][ T1537]  ? security_file_permission+0x94/0xb0
[  137.267699][ T1537]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  137.273252][ T1537]  vfs_read+0x26e/0x8c0
[  137.277429][ T1537]  ? __cfi_vfs_read+0x10/0x10
[  137.282122][ T1537]  ? __kasan_check_write+0x14/0x20
[  137.287241][ T1537]  ? mutex_lock+0x8d/0x1a0
[  137.291669][ T1537]  ? __cfi_mutex_lock+0x10/0x10
[  137.296533][ T1537]  ? __fdget_pos+0x2cd/0x380
[  137.301140][ T1537]  ? ksys_read+0x71/0x240
[  137.305592][ T1537]  ksys_read+0x140/0x240
[  137.309898][ T1537]  ? __cfi_ksys_read+0x10/0x10
[  137.314689][ T1537]  ? debug_smp_processor_id+0x17/0x20
[  137.320078][ T1537]  __x64_sys_read+0x7b/0x90
[  137.324599][ T1537]  x64_sys_call+0x2f/0x9a0
[  137.329032][ T1537]  do_syscall_64+0x4c/0xa0
[  137.333458][ T1537]  ? clear_bhb_loop+0x30/0x80
[  137.338155][ T1537]  ? clear_bhb_loop+0x30/0x80
[  137.342845][ T1537]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  137.348772][ T1537] RIP: 0033:0x7fe4d2b8e15c
[  137.353197][ T1537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  137.372818][ T1537] RSP: 002b:00007fe4d3a39030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  137.381248][ T1537] RAX: ffffffffffffffda RBX: 00007fe4d2de5fa0 RCX: 00007fe4d2b8e15c
[  137.389241][ T1537] RDX: 000000000000000f RSI: 00007fe4d3a390a0 RDI: 0000000000000004
[  137.397221][ T1537] RBP: 00007fe4d3a39090 R08: 0000000000000000 R09: 0000000000000000
[  137.405233][ T1537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  137.413229][ T1537] R13: 00007fe4d2de6038 R14: 00007fe4d2de5fa0 R15: 00007ffcd58c2448
[  137.421225][ T1537]  </TASK>
[  138.268144][ T1554] overlayfs: overlapping lowerdir path
[  138.474558][ T1558] fuse: Bad value for 'fd'
[  138.631357][ T1555] futex_wake_op: syz.2.308 tries to shift op by -1; fix this program
[  139.062338][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  139.105105][   T28] audit: type=1400 audit(1768568214.225:171): avc:  denied  { ioctl } for  pid=1541 comm="syz.2.308" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  139.208450][ T1563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'.
[  139.729290][ T1494] udevd[1494]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  139.903093][   T28] audit: type=1400 audit(1768568215.355:172): avc:  denied  { write } for  pid=1582 comm="syz.0.317" path="socket:[20798]" dev="sockfs" ino=20798 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  139.927917][ T1583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1583 comm=syz.0.317
[  139.941622][ T1583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'.
[  139.954637][ T1583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'.
[  140.495108][ T1589] FAULT_INJECTION: forcing a failure.
[  140.495108][ T1589] name fail_futex, interval 1, probability 0, space 0, times 1
[  140.509204][ T1589] CPU: 1 PID: 1589 Comm: syz.3.319 Not tainted syzkaller #0
[  140.516542][ T1589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  140.526618][ T1589] Call Trace:
[  140.529926][ T1589]  <TASK>
[  140.532885][ T1589]  __dump_stack+0x21/0x24
[  140.537253][ T1589]  dump_stack_lvl+0xee/0x150
[  140.541986][ T1589]  ? __cfi_dump_stack_lvl+0x8/0x8
[  140.547046][ T1589]  ? get_user_pages_fast_only+0x50/0x50
[  140.552635][ T1589]  dump_stack+0x15/0x24
[  140.556890][ T1589]  should_fail_ex+0x3d4/0x520
[  140.561607][ T1589]  should_fail+0xb/0x10
[  140.565799][ T1589]  get_futex_key+0x13d/0xb00
[  140.570424][ T1589]  ? __cfi_get_futex_key+0x10/0x10
[  140.575595][ T1589]  futex_wake_op+0x1d9/0xce0
[  140.580224][ T1589]  ? __cfi_futex_wake_op+0x10/0x10
[  140.585367][ T1589]  ? __kasan_check_write+0x14/0x20
[  140.590500][ T1589]  ? proc_fail_nth_write+0x17a/0x1f0
[  140.595828][ T1589]  ? security_file_permission+0x8a/0xb0
[  140.601403][ T1589]  ? security_file_permission+0x94/0xb0
[  140.606979][ T1589]  ? vfs_write+0x9d6/0xca0
[  140.611415][ T1589]  ? slab_free_freelist_hook+0xc2/0x190
[  140.616993][ T1589]  do_futex+0x1ad/0x420
[  140.621168][ T1589]  ? __cfi_do_futex+0x10/0x10
[  140.625876][ T1589]  ? __kasan_check_write+0x14/0x20
[  140.631089][ T1589]  ? mutex_unlock+0x89/0x220
[  140.635707][ T1589]  __se_sys_futex+0x273/0x2e0
[  140.640490][ T1589]  ? __kasan_check_write+0x14/0x20
[  140.645609][ T1589]  ? __x64_sys_futex+0x100/0x100
[  140.650563][ T1589]  ? ksys_write+0x1eb/0x240
[  140.655073][ T1589]  ? __cfi_ksys_write+0x10/0x10
[  140.659935][ T1589]  ? do_user_addr_fault+0x9ac/0x1050
[  140.665236][ T1589]  __x64_sys_futex+0xe5/0x100
[  140.669930][ T1589]  x64_sys_call+0x7ec/0x9a0
[  140.674447][ T1589]  do_syscall_64+0x4c/0xa0
[  140.678883][ T1589]  ? clear_bhb_loop+0x30/0x80
[  140.683584][ T1589]  ? clear_bhb_loop+0x30/0x80
[  140.688281][ T1589]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  140.694196][ T1589] RIP: 0033:0x7f30bc78f749
[  140.698647][ T1589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.718267][ T1589] RSP: 002b:00007f30bd6f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  140.726700][ T1589] RAX: ffffffffffffffda RBX: 00007f30bc9e5fa0 RCX: 00007f30bc78f749
[  140.734689][ T1589] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000080
[  140.742683][ T1589] RBP: 00007f30bd6f8090 R08: 0000200000000100 R09: 000000008ffffffe
[  140.750677][ T1589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.758666][ T1589] R13: 00007f30bc9e6038 R14: 00007f30bc9e5fa0 R15: 00007fff23d7f128
[  140.766662][ T1589]  </TASK>
[  140.786730][ T1592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'.
[  140.796605][ T1592] device veth1_macvtap left promiscuous mode
[  140.991010][ T1599] overlayfs: overlapping lowerdir path
[  141.198872][ T1603] netlink: 'syz.3.321': attribute type 16 has an invalid length.
[  141.206845][ T1603] netlink: 'syz.3.321': attribute type 17 has an invalid length.
[  141.232007][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  141.239908][ T1603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  141.762669][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  141.828297][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.852894][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  141.886883][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.895235][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.975441][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.992970][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  142.010213][  T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  144.160908][   T28] audit: type=1400 audit(1768568219.615:173): avc:  denied  { create } for  pid=1618 comm="syz.0.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  144.343570][ T1617] netlink: 'syz.2.324': attribute type 16 has an invalid length.
[  144.351565][ T1617] netlink: 'syz.2.324': attribute type 17 has an invalid length.
[  144.361378][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  144.610621][ T1631] xt_hashlimit: size too large, truncated to 1048576
[  146.092680][   T28] audit: type=1400 audit(1768568221.545:174): avc:  denied  { read } for  pid=1638 comm="syz.3.332" name="file0" dev="incremental-fs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  146.187023][   T28] audit: type=1400 audit(1768568221.575:175): avc:  denied  { open } for  pid=1638 comm="syz.3.332" path="/64/file0/file0" dev="incremental-fs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  146.400021][ T1648] overlayfs: overlapping lowerdir path
[  146.982321][   T28] audit: type=1400 audit(1768568222.435:176): avc:  denied  { bind } for  pid=1623 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  147.177023][   T28] audit: type=1400 audit(1768568222.635:177): avc:  denied  { read write } for  pid=1664 comm="syz.0.338" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  147.217758][   T28] audit: type=1400 audit(1768568222.655:178): avc:  denied  { open } for  pid=1664 comm="syz.0.338" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  147.263111][   T28] audit: type=1400 audit(1768568222.715:179): avc:  denied  { remount } for  pid=1666 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  147.284544][ T1670] syz.0.340[1670] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.284616][ T1670] syz.0.340[1670] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.303270][ T1669] syz.0.340[1669] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.372520][ T1673] netlink: 'syz.1.339': attribute type 16 has an invalid length.
[  147.391614][ T1673] netlink: 'syz.1.339': attribute type 17 has an invalid length.
[  147.405269][ T1673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  147.801618][ T1678] netlink: 'syz.2.341': attribute type 16 has an invalid length.
[  147.809519][ T1678] netlink: 'syz.2.341': attribute type 17 has an invalid length.
[  147.842451][ T1678] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  148.411209][   T28] audit: type=1326 audit(1768568223.865:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  148.466036][ T1692] netlink: 'syz.4.344': attribute type 16 has an invalid length.
[  148.474139][ T1692] netlink: 'syz.4.344': attribute type 17 has an invalid length.
[  148.497736][ T1692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  149.023595][   T28] audit: type=1326 audit(1768568223.895:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  149.046981][   T28] audit: type=1326 audit(1768568223.895:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  149.080321][ T1691] =======================================================
[  149.080321][ T1691] WARNING: The mand mount option has been deprecated and
[  149.080321][ T1691]          and is ignored by this kernel. Remove the mand
[  149.080321][ T1691]          option from the mount to silence this warning.
[  149.080321][ T1691] =======================================================
[  149.165926][   T28] kauditd_printk_skb: 57 callbacks suppressed
[  149.165942][   T28] audit: type=1326 audit(1768568224.615:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  149.251999][   T28] audit: type=1326 audit(1768568224.615:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  149.306505][   T28] audit: type=1326 audit(1768568224.615:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  149.330236][   T28] audit: type=1326 audit(1768568224.615:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  149.353997][   T28] audit: type=1326 audit(1768568224.615:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  149.381341][ T1702] overlayfs: overlapping lowerdir path
[  149.399674][   T28] audit: type=1326 audit(1768568224.615:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0e8b1865e7 code=0x7ffc0000
[  149.423332][   T28] audit: type=1326 audit(1768568224.615:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0e8b12b829 code=0x7ffc0000
[  149.460426][   T28] audit: type=1326 audit(1768568224.615:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  149.494874][   T28] audit: type=1326 audit(1768568224.615:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  149.519080][   T28] audit: type=1326 audit(1768568224.615:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1679 comm="syz.0.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  149.609885][ T1688] SELinux: failed to load policy
[  150.089530][ T1728] Driver unsupported XDP return value 0 on prog  (id 187) dev N/A, expect packet loss!
[  150.760728][ T1747] netlink: 'syz.3.356': attribute type 16 has an invalid length.
[  150.768699][ T1747] netlink: 'syz.3.356': attribute type 17 has an invalid length.
[  150.789223][ T1747] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  151.120835][ T1749] netlink: 64 bytes leftover after parsing attributes in process `syz.2.357'.
[  151.251596][ T1758] 9pnet_fd: Insufficient options for proto=fd
[  151.420444][ T1763] netlink: 64 bytes leftover after parsing attributes in process `syz.4.361'.
[  151.696485][ T1580] udevd[1580]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  152.557894][ T1775] overlayfs: overlapping lowerdir path
[  153.075609][ T1580] udevd[1580]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  153.235934][ T1680] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  153.458819][ T1793] netlink: 64 bytes leftover after parsing attributes in process `syz.3.370'.
[  153.665827][ T1680] usb 3-1: Using ep0 maxpacket: 16
[  153.672502][ T1680] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  153.685631][ T1680] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  153.692892][ T1802] netlink: 64 bytes leftover after parsing attributes in process `syz.3.371'.
[  153.695539][ T1680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.977388][ T1680] usb 3-1: config 0 descriptor??
[  153.983717][ T1680] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  154.069752][ T1808] netlink: 'syz.3.373': attribute type 16 has an invalid length.
[  154.077643][ T1808] netlink: 'syz.3.373': attribute type 17 has an invalid length.
[  154.095643][ T1808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  154.640459][ T1818] syz.1.375[1818] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.640532][ T1818] syz.1.375[1818] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  154.691056][ T1818] xt_CT: You must specify a L4 protocol and not use inversions on it
[  155.801650][  T293] usb 3-1: USB disconnect, device number 2
[  156.019845][ T1834] capability: warning: `syz.0.379' uses deprecated v2 capabilities in a way that may be insecure
[  156.147484][   T28] kauditd_printk_skb: 85 callbacks suppressed
[  156.147498][   T28] audit: type=1400 audit(1768568231.605:335): avc:  denied  { unlink } for  pid=1829 comm="syz.0.379" name="#1" dev="tmpfs" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  156.191005][   T28] audit: type=1400 audit(1768568231.605:336): avc:  denied  { mount } for  pid=1829 comm="syz.0.379" name="/" dev="overlay" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  156.222172][   T28] audit: type=1400 audit(1768568231.635:337): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  156.272409][ T1840] overlayfs: overlapping lowerdir path
[  156.295333][ T1838] netlink: 64 bytes leftover after parsing attributes in process `syz.0.381'.
[  156.800493][ T1847] netlink: 64 bytes leftover after parsing attributes in process `syz.4.383'.
[  156.955059][ T1851] netlink: 64 bytes leftover after parsing attributes in process `syz.2.384'.
[  158.245090][   T28] audit: type=1400 audit(1768568233.695:338): avc:  denied  { connect } for  pid=1866 comm="syz.4.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  158.269095][ T1862] netlink: 64 bytes leftover after parsing attributes in process `syz.2.387'.
[  158.471564][   T28] audit: type=1400 audit(1768568233.925:339): avc:  denied  { ioctl } for  pid=1873 comm="syz.2.391" path="socket:[21367]" dev="sockfs" ino=21367 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  159.149355][ T1882] 9pnet_fd: Insufficient options for proto=fd
[  165.347888][ T1936] 9pnet_fd: Insufficient options for proto=fd
[  165.666396][   T28] audit: type=1400 audit(1768568241.125:340): avc:  denied  { read } for  pid=1943 comm="syz.1.408" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  165.699838][   T28] audit: type=1400 audit(1768568241.145:341): avc:  denied  { write } for  pid=1943 comm="syz.1.408" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  165.719400][   T28] audit: type=1400 audit(1768568241.145:342): avc:  denied  { ioctl } for  pid=1943 comm="syz.1.408" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x556e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  165.976366][ T1680] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  166.015328][ T1950] fuse: Unknown parameter 'fd0xffffffffffffffff'
[  166.048403][ T1953] fuse: Unknown parameter ''
[  166.074484][   T28] audit: type=1400 audit(1768568241.505:343): avc:  denied  { mounton } for  pid=1947 comm="syz.0.410" path="/77/file0" dev="incremental-fs" ino=448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  166.949678][ T1964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'.
[  166.961336][ T1680] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  166.975828][ T1680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.994555][ T1680] usb 2-1: Product: syz
[  166.998943][ T1680] usb 2-1: Manufacturer: syz
[  167.003561][ T1680] usb 2-1: SerialNumber: syz
[  168.004758][ T1976] 9pnet_fd: Insufficient options for proto=fd
[  169.714015][  T344] usb 2-1: USB disconnect, device number 2
[  170.132791][ T1907] udevd[1907]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  170.578926][ T2005] fuse: Bad value for 'fd'
[  170.587781][ T2005] fuse: Bad value for 'fd'
[  171.742832][ T2010] fuse: Unknown parameter '0xffffffffffffffff'
[  171.821337][ T2018] netlink: 'syz.0.426': attribute type 16 has an invalid length.
[  171.829186][ T2018] netlink: 'syz.0.426': attribute type 17 has an invalid length.
[  171.841241][ T2018] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  174.008221][ T2047] overlayfs: unrecognized mount option "verity=off" or missing value
[  174.069486][ T2047] random: crng reseeded on system resumption
[  174.856170][   T28] audit: type=1400 audit(1768568249.525:344): avc:  denied  { write } for  pid=2039 comm="syz.0.435" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  175.553993][   T28] audit: type=1400 audit(1768568249.525:345): avc:  denied  { open } for  pid=2039 comm="syz.0.435" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  175.738774][ T2059] netlink: 'syz.2.437': attribute type 16 has an invalid length.
[  175.746626][ T2059] netlink: 'syz.2.437': attribute type 17 has an invalid length.
[  175.760577][ T2059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  179.315623][ T2091] overlayfs: overlapping lowerdir path
[  179.889340][   T28] audit: type=1400 audit(1768568255.345:346): avc:  denied  { read write } for  pid=285 comm="syz-executor" name="loop0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  180.043572][   T28] audit: type=1400 audit(1768568255.375:347): avc:  denied  { open } for  pid=285 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  180.128705][   T28] audit: type=1400 audit(1768568255.375:348): avc:  denied  { ioctl } for  pid=285 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=721 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  180.180969][ T2108] netlink: 64 bytes leftover after parsing attributes in process `syz.2.447'.
[  180.269802][   T28] audit: type=1326 audit(1768568255.725:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  180.282803][ T2113] loop0: detected capacity change from 0 to 1024
[  180.315875][ T2113] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  180.702456][   T28] audit: type=1326 audit(1768568255.725:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0e8b18f749 code=0x7ffc0000
[  180.727447][   T28] audit: type=1326 audit(1768568255.725:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e8b18f783 code=0x7ffc0000
[  182.059467][   T28] audit: type=1326 audit(1768568255.725:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e8b18e1ff code=0x7ffc0000
[  182.084559][   T28] audit: type=1326 audit(1768568255.725:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0e8b18f7d7 code=0x7ffc0000
[  182.108604][   T28] audit: type=1326 audit(1768568255.725:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e8b18df90 code=0x7ffc0000
[  182.150261][   T28] audit: type=1326 audit(1768568255.725:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2112 comm="syz.0.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e8b18f34b code=0x7ffc0000
[  182.208374][  T285] EXT4-fs (loop0): unmounting filesystem.
[  183.292003][ T2129] xt_hashlimit: size too large, truncated to 1048576
[  183.343016][ T2133] FAULT_INJECTION: forcing a failure.
[  183.343016][ T2133] name failslab, interval 1, probability 0, space 0, times 1
[  183.361608][ T2127] netlink: 64 bytes leftover after parsing attributes in process `syz.0.453'.
[  183.434001][ T2133] CPU: 1 PID: 2133 Comm: syz.4.455 Not tainted syzkaller #0
[  183.441346][ T2133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  183.451516][ T2133] Call Trace:
[  183.454823][ T2133]  <TASK>
[  183.457769][ T2133]  __dump_stack+0x21/0x24
[  183.462125][ T2133]  dump_stack_lvl+0xee/0x150
[  183.466764][ T2133]  ? __cfi_dump_stack_lvl+0x8/0x8
[  183.471833][ T2133]  dump_stack+0x15/0x24
[  183.476011][ T2133]  should_fail_ex+0x3d4/0x520
[  183.480721][ T2133]  ? getname_flags+0xb9/0x500
[  183.485430][ T2133]  __should_failslab+0xac/0xf0
[  183.490224][ T2133]  should_failslab+0x9/0x20
[  183.494750][ T2133]  kmem_cache_alloc+0x3b/0x330
[  183.499547][ T2133]  getname_flags+0xb9/0x500
[  183.504087][ T2133]  user_path_at_empty+0x30/0x1c0
[  183.509075][ T2133]  path_removexattr+0xb3/0x3b0
[  183.513889][ T2133]  ? listxattr+0x320/0x320
[  183.518377][ T2133]  ? bpf_get_stack+0x31/0x40
[  183.523000][ T2133]  ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41
[  183.528660][ T2133]  ? bpf_get_stack_raw_tp+0x189/0x1c0
[  183.534075][ T2133]  ? bpf_trace_run2+0x104/0x250
[  183.538980][ T2133]  ? fput+0x154/0x1a0
[  183.542981][ T2133]  ? __cfi_bpf_trace_run2+0x10/0x10
[  183.548216][ T2133]  ? ksys_write+0x1eb/0x240
[  183.552737][ T2133]  ? __cfi_ksys_write+0x10/0x10
[  183.557605][ T2133]  ? __bpf_trace_sys_enter+0x62/0x70
[  183.562898][ T2133]  __x64_sys_lremovexattr+0x5d/0x70
[  183.568119][ T2133]  x64_sys_call+0x1a2/0x9a0
[  183.572681][ T2133]  do_syscall_64+0x4c/0xa0
[  183.577129][ T2133]  ? clear_bhb_loop+0x30/0x80
[  183.581825][ T2133]  ? clear_bhb_loop+0x30/0x80
[  183.586534][ T2133]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  183.592451][ T2133] RIP: 0033:0x7f84e058f749
[  183.596901][ T2133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  183.616530][ T2133] RSP: 002b:00007f84e149a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6
[  183.624975][ T2133] RAX: ffffffffffffffda RBX: 00007f84e07e5fa0 RCX: 00007f84e058f749
[  183.633055][ T2133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  183.641042][ T2133] RBP: 00007f84e149a090 R08: 0000000000000000 R09: 0000000000000000
[  183.649029][ T2133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  183.657033][ T2133] R13: 00007f84e07e6038 R14: 00007f84e07e5fa0 R15: 00007fffec82b178
[  183.665126][ T2133]  </TASK>
[  183.672119][ T2137] tipc: Started in network mode
[  183.677103][ T2137] tipc: Node identity da0ccdec0b91, cluster identity 4711
[  183.694586][ T2137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.738849][ T2131] tipc: Disabling bearer <eth:syzkaller0>
[  183.777074][ T2142] process 'syz.0.457' launched './file0' with NULL argv: empty string added
[  183.856447][ T2136] syz.1.456[2136] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  183.856553][ T2136] syz.1.456[2136] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  184.540809][ T2154] overlayfs: overlapping lowerdir path
[  184.734347][ T2160] netlink: 'syz.1.461': attribute type 16 has an invalid length.
[  184.742255][ T2160] netlink: 'syz.1.461': attribute type 17 has an invalid length.
[  184.792673][ T2160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  185.030101][ T2158] netlink: 64 bytes leftover after parsing attributes in process `syz.0.462'.
[  188.350645][ T2178] netlink: 64 bytes leftover after parsing attributes in process `syz.1.466'.
[  188.489161][ T2191] xt_hashlimit: size too large, truncated to 1048576
[  189.119702][   T28] kauditd_printk_skb: 62 callbacks suppressed
[  189.119767][   T28] audit: type=1400 audit(1768568263.935:418): avc:  denied  { read } for  pid=2187 comm="syz.0.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  189.677561][ T2193] fuse: Bad value for 'fd'
[  189.728055][   T28] audit: type=1400 audit(1768568265.185:419): avc:  denied  { ioctl } for  pid=2204 comm="syz.2.475" path="socket:[22417]" dev="sockfs" ino=22417 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  189.805860][   T28] audit: type=1400 audit(1768568265.225:420): avc:  denied  { bind } for  pid=2204 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  189.845651][   T28] audit: type=1400 audit(1768568265.225:421): avc:  denied  { write } for  pid=2204 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  190.574287][ T2217] overlayfs: overlapping lowerdir path
[  192.034494][ T2233] netlink: 64 bytes leftover after parsing attributes in process `syz.0.482'.
[  192.044277][ T2230] netlink: 64 bytes leftover after parsing attributes in process `syz.2.481'.
[  193.219510][ T2256] overlayfs: overlapping lowerdir path
[  194.699916][ T2269] random: crng reseeded on system resumption
[  194.968677][ T2273] netlink: 'syz.0.494': attribute type 16 has an invalid length.
[  194.976635][ T2273] netlink: 'syz.0.494': attribute type 17 has an invalid length.
[  194.991127][ T2273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  195.324927][ T2279] netlink: 64 bytes leftover after parsing attributes in process `syz.2.495'.
[  198.344549][ T2293] netlink: 64 bytes leftover after parsing attributes in process `syz.2.499'.
[  200.379282][ T2315] overlayfs: unrecognized mount option "verity=off" or missing value
[  200.950805][ T2320] 9pnet_fd: Insufficient options for proto=fd
[  201.379495][ T2328] netlink: 64 bytes leftover after parsing attributes in process `syz.1.508'.
[  201.568916][ T2347] overlayfs: unrecognized mount option "verity=off" or missing value
[  201.595629][ T2348] netlink: 'syz.4.510': attribute type 16 has an invalid length.
[  201.603476][ T2348] netlink: 'syz.4.510': attribute type 17 has an invalid length.
[  201.615406][ T2348] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  201.884618][ T2349] random: crng reseeded on system resumption
[  203.256030][   T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  203.445868][   T19] usb 1-1: Using ep0 maxpacket: 32
[  203.452322][   T19] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[  203.463680][   T19] usb 1-1: config 0 has no interface number 0
[  203.473059][   T19] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  203.490506][   T19] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024
[  203.509427][   T19] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  203.526942][   T19] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  203.537243][   T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.545424][   T19] usb 1-1: Product: syz
[  203.549868][   T19] usb 1-1: Manufacturer: syz
[  203.554521][   T19] usb 1-1: SerialNumber: syz
[  203.560032][   T19] usb 1-1: config 0 descriptor??
[  203.565311][ T2345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  203.572805][ T2345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  203.596614][ T2365] overlayfs: overlapping lowerdir path
[  203.856471][ T2371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'.
[  204.692737][ T2389] netlink: 64 bytes leftover after parsing attributes in process `syz.2.523'.
[  204.746001][ T2392] random: crng reseeded on system resumption
[  204.898463][ T2398] overlayfs: unrecognized mount option "verity=off" or missing value
[  205.336574][ T2399] random: crng reseeded on system resumption
[  206.929776][ T2400] netlink: 'syz.2.527': attribute type 16 has an invalid length.
[  206.937691][ T2400] netlink: 'syz.2.527': attribute type 17 has an invalid length.
[  206.958313][ T2400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  207.232229][  T293] usb 1-1: USB disconnect, device number 2
[  207.533194][ T2410] overlayfs: overlapping lowerdir path
[  208.187859][ T2420] netlink: 'syz.0.530': attribute type 16 has an invalid length.
[  208.195796][ T2420] netlink: 'syz.0.530': attribute type 17 has an invalid length.
[  208.207688][ T2420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  209.686026][ T2426] netlink: 64 bytes leftover after parsing attributes in process `syz.2.534'.
[  209.786622][ T2434] netlink: 64 bytes leftover after parsing attributes in process `syz.1.536'.
[  210.396567][   T28] audit: type=1400 audit(1768568285.845:422): avc:  denied  { read write } for  pid=2445 comm="syz.2.541" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  210.490988][ T2450] overlayfs: unrecognized mount option "verity=off" or missing value
[  210.559142][ T2451] random: crng reseeded on system resumption
[  210.713249][ T2451] Restarting kernel threads ... done.
[  212.699585][   T28] audit: type=1400 audit(1768568285.845:423): avc:  denied  { open } for  pid=2445 comm="syz.2.541" path="/dev/binderfs/binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  212.724145][   T28] audit: type=1400 audit(1768568286.135:424): avc:  denied  { ioctl } for  pid=2442 comm="syz.0.539" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  212.759306][   T28] audit: type=1400 audit(1768568288.205:425): avc:  denied  { getopt } for  pid=2445 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  212.967084][ T2401] udevd[2401]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  213.913095][ T2463] FAULT_INJECTION: forcing a failure.
[  213.913095][ T2463] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  214.401784][ T2463] CPU: 1 PID: 2463 Comm: syz.3.543 Not tainted syzkaller #0
[  214.409135][ T2463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  214.419215][ T2463] Call Trace:
[  214.422517][ T2463]  <TASK>
[  214.425496][ T2463]  __dump_stack+0x21/0x24
[  214.429866][ T2463]  dump_stack_lvl+0xee/0x150
[  214.434483][ T2463]  ? __cfi_dump_stack_lvl+0x8/0x8
[  214.439541][ T2463]  dump_stack+0x15/0x24
[  214.443720][ T2463]  should_fail_ex+0x3d4/0x520
[  214.448445][ T2463]  should_fail+0xb/0x10
[  214.452638][ T2463]  should_fail_usercopy+0x1a/0x20
[  214.457713][ T2463]  _copy_to_user+0x1e/0x90
[  214.462159][ T2463]  simple_read_from_buffer+0xe9/0x160
[  214.467552][ T2463]  proc_fail_nth_read+0x19a/0x210
[  214.472600][ T2463]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  214.478202][ T2463]  ? security_file_permission+0x94/0xb0
[  214.483785][ T2463]  ? __cfi_proc_fail_nth_read+0x10/0x10
[  214.489369][ T2463]  vfs_read+0x26e/0x8c0
[  214.493590][ T2463]  ? __cfi_vfs_read+0x10/0x10
[  214.498303][ T2463]  ? __kasan_check_write+0x14/0x20
[  214.503449][ T2463]  ? mutex_lock+0x8d/0x1a0
[  214.507899][ T2463]  ? __cfi_mutex_lock+0x10/0x10
[  214.512789][ T2463]  ? __fdget_pos+0x2cd/0x380
[  214.517410][ T2463]  ? ksys_read+0x71/0x240
[  214.521766][ T2463]  ksys_read+0x140/0x240
[  214.526030][ T2463]  ? __cfi_ksys_read+0x10/0x10
[  214.530810][ T2463]  ? fpregs_restore_userregs+0x128/0x260
[  214.536470][ T2463]  __x64_sys_read+0x7b/0x90
[  214.541023][ T2463]  x64_sys_call+0x2f/0x9a0
[  214.545483][ T2463]  do_syscall_64+0x4c/0xa0
[  214.549963][ T2463]  ? clear_bhb_loop+0x30/0x80
[  214.554674][ T2463]  ? clear_bhb_loop+0x30/0x80
[  214.559381][ T2463]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  214.565312][ T2463] RIP: 0033:0x7f30bc78e15c
[  214.569757][ T2463] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  214.589385][ T2463] RSP: 002b:00007f30bd6f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  214.597826][ T2463] RAX: ffffffffffffffda RBX: 00007f30bc9e5fa0 RCX: 00007f30bc78e15c
[  214.605833][ T2463] RDX: 000000000000000f RSI: 00007f30bd6f80a0 RDI: 0000000000000008
[  214.613830][ T2463] RBP: 00007f30bd6f8090 R08: 0000000000000000 R09: 0000000000000000
[  214.621859][ T2463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.629856][ T2463] R13: 00007f30bc9e6038 R14: 00007f30bc9e5fa0 R15: 00007fff23d7f128
[  214.637892][ T2463]  </TASK>
[  215.887596][ T2491] netlink: 'syz.0.551': attribute type 16 has an invalid length.
[  215.895448][ T2491] netlink: 'syz.0.551': attribute type 17 has an invalid length.
[  215.913941][ T2491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  216.167353][ T2484] netlink: 64 bytes leftover after parsing attributes in process `syz.4.550'.
[  216.271581][ T2495] netlink: 64 bytes leftover after parsing attributes in process `syz.2.553'.
[  217.934078][ T2522] overlayfs: unrecognized mount option "verity=off" or missing value
[  218.040490][ T2522] random: crng reseeded on system resumption
[  221.335398][ T2532] netlink: 64 bytes leftover after parsing attributes in process `syz.2.565'.
[  222.252614][ T2548] udevd[2548]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory
[  224.969554][   T28] audit: type=1400 audit(1768568300.425:426): avc:  denied  { watch watch_reads } for  pid=2564 comm="syz.1.571" path="/110" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  225.004697][   T28] audit: type=1400 audit(1768568300.455:427): avc:  denied  { setattr } for  pid=2566 comm="syz.2.572" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  225.143022][   T28] audit: type=1400 audit(1768568300.595:428): avc:  denied  { block_suspend } for  pid=2564 comm="syz.1.571" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  225.195821][   T28] audit: type=1326 audit(1768568300.635:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2564 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e18f749 code=0x7ffc0000
[  225.264630][ T2584] loop0: detected capacity change from 0 to 4096
[  225.275499][   T28] audit: type=1326 audit(1768568300.635:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2564 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f308e18f749 code=0x7ffc0000
[  225.397103][ T2586] FAULT_INJECTION: forcing a failure.
[  225.397103][ T2586] name failslab, interval 1, probability 0, space 0, times 0
[  225.409909][ T2586] CPU: 1 PID: 2586 Comm: syz.3.577 Not tainted syzkaller #0
[  225.417234][ T2586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  225.427317][ T2586] Call Trace:
[  225.430622][ T2586]  <TASK>
[  225.433590][ T2586]  __dump_stack+0x21/0x24
[  225.437954][ T2586]  dump_stack_lvl+0xee/0x150
[  225.442571][ T2586]  ? __cfi_dump_stack_lvl+0x8/0x8
[  225.447629][ T2586]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  225.453394][ T2586]  dump_stack+0x15/0x24
[  225.457575][ T2586]  should_fail_ex+0x3d4/0x520
[  225.462288][ T2586]  ? vm_area_dup+0x27/0x280
[  225.466827][ T2586]  __should_failslab+0xac/0xf0
[  225.471630][ T2586]  should_failslab+0x9/0x20
[  225.476155][ T2586]  kmem_cache_alloc+0x3b/0x330
[  225.481039][ T2586]  ? mas_next_slot+0xa45/0xa80
[  225.485915][ T2586]  vm_area_dup+0x27/0x280
[  225.490287][ T2586]  ? __split_vma+0x1ca/0x980
[  225.494928][ T2586]  __split_vma+0x1d9/0x980
[  225.499396][ T2586]  ? mas_find+0x155/0x370
[  225.503766][ T2586]  do_mas_align_munmap+0x718/0x12a0
[  225.509091][ T2586]  ? 0xffffffffa0000948
[  225.513289][ T2586]  ? do_mas_munmap+0x2b0/0x2b0
[  225.518092][ T2586]  ? mas_find+0x307/0x370
[  225.522463][ T2586]  do_mas_munmap+0x241/0x2b0
[  225.527097][ T2586]  mmap_region+0x6b4/0x2290
[  225.531638][ T2586]  ? __cfi_mmap_region+0x10/0x10
[  225.536597][ T2586]  ? __kasan_check_read+0x11/0x20
[  225.541633][ T2586]  ? cap_mmap_addr+0x165/0x2e0
[  225.546415][ T2586]  ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10
[  225.553035][ T2586]  ? get_unmapped_area+0x313/0x380
[  225.558167][ T2586]  do_mmap+0x843/0xdc0
[  225.562256][ T2586]  ? __cfi_do_mmap+0x10/0x10
[  225.566870][ T2586]  vm_mmap_pgoff+0x1f5/0x3f0
[  225.571475][ T2586]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  225.576594][ T2586]  ? __kasan_check_write+0x14/0x20
[  225.581719][ T2586]  ? fput+0x154/0x1a0
[  225.585722][ T2586]  ? ksys_write+0x1eb/0x240
[  225.590248][ T2586]  ksys_mmap_pgoff+0xf6/0x1d0
[  225.594948][ T2586]  __x64_sys_mmap+0xfa/0x110
[  225.599553][ T2586]  x64_sys_call+0x8fd/0x9a0
[  225.604071][ T2586]  do_syscall_64+0x4c/0xa0
[  225.608501][ T2586]  ? clear_bhb_loop+0x30/0x80
[  225.613199][ T2586]  ? clear_bhb_loop+0x30/0x80
[  225.617933][ T2586]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  225.623852][ T2586] RIP: 0033:0x7f30bc78f749
[  225.628314][ T2586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  225.647948][ T2586] RSP: 002b:00007f30bd6b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  225.656378][ T2586] RAX: ffffffffffffffda RBX: 00007f30bc9e6180 RCX: 00007f30bc78f749
[  225.664363][ T2586] RDX: d3283d0368e269b3 RSI: 000000000000a000 RDI: 0000200000000000
[  225.672347][ T2586] RBP: 00007f30bd6b6090 R08: ffffffffffffffff R09: 0000000000000000
[  225.680330][ T2586] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001
[  225.688399][ T2586] R13: 00007f30bc9e6218 R14: 00007f30bc9e6180 R15: 00007fff23d7f128
[  225.696391][ T2586]  </TASK>
[  225.741973][   T28] audit: type=1326 audit(1768568300.635:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2564 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e18f749 code=0x7ffc0000
[  225.775705][   T28] audit: type=1326 audit(1768568300.635:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2564 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f308e18f749 code=0x7ffc0000
[  225.802651][ T2584] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  225.825057][   T28] audit: type=1326 audit(1768568300.635:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2564 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308e18f749 code=0x7ffc0000
[  225.863174][   T28] audit: type=1326 audit(1768568300.635:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2564 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f308e18f749 code=0x7ffc0000
[  225.886607][   T28] audit: type=1400 audit(1768568300.635:435): avc:  denied  { execute } for  pid=2564 comm="syz.1.571" name="file0" dev="tmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  226.890071][  T285] EXT4-fs (loop0): unmounting filesystem.
[  227.989013][ T2619] netlink: 64 bytes leftover after parsing attributes in process `syz.2.585'.
[  228.818426][ T2632] xt_hashlimit: size too large, truncated to 1048576
[  228.832175][ T2624] netlink: 64 bytes leftover after parsing attributes in process `syz.4.586'.
[  229.245984][ T2644] overlayfs: unrecognized mount option "verity=off" or missing value
[  237.217785][ T2660] FAULT_INJECTION: forcing a failure.
[  237.217785][ T2660] name failslab, interval 1, probability 0, space 0, times 0
[  237.230700][ T2660] CPU: 0 PID: 2660 Comm: syz.4.593 Not tainted syzkaller #0
[  237.238017][ T2660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  237.248099][ T2660] Call Trace:
[  237.251412][ T2660]  <TASK>
[  237.254450][ T2660]  __dump_stack+0x21/0x24
[  237.258805][ T2660]  dump_stack_lvl+0xee/0x150
[  237.263426][ T2660]  ? __cfi_dump_stack_lvl+0x8/0x8
[  237.268478][ T2660]  dump_stack+0x15/0x24
[  237.272678][ T2660]  should_fail_ex+0x3d4/0x520
[  237.277414][ T2660]  ? vm_area_dup+0x27/0x280
[  237.281939][ T2660]  __should_failslab+0xac/0xf0
[  237.286727][ T2660]  should_failslab+0x9/0x20
[  237.291257][ T2660]  kmem_cache_alloc+0x3b/0x330
[  237.296045][ T2660]  ? mas_next_slot+0xa45/0xa80
[  237.300826][ T2660]  vm_area_dup+0x27/0x280
[  237.305184][ T2660]  ? __split_vma+0x1ca/0x980
[  237.309853][ T2660]  __split_vma+0x1d9/0x980
[  237.314321][ T2660]  ? mas_find+0x155/0x370
[  237.318674][ T2660]  do_mas_align_munmap+0x718/0x12a0
[  237.323916][ T2660]  ? 0xffffffffa0000954
[  237.328091][ T2660]  ? do_mas_munmap+0x2b0/0x2b0
[  237.332905][ T2660]  ? mas_find+0x307/0x370
[  237.337257][ T2660]  do_mas_munmap+0x241/0x2b0
[  237.341880][ T2660]  mmap_region+0x6b4/0x2290
[  237.346434][ T2660]  ? __cfi_mmap_region+0x10/0x10
[  237.351397][ T2660]  ? __kasan_check_read+0x11/0x20
[  237.356446][ T2660]  ? cap_mmap_addr+0x165/0x2e0
[  237.361234][ T2660]  ? __cfi_arch_get_unmapped_area_topdown+0x10/0x10
[  237.367847][ T2660]  ? get_unmapped_area+0x313/0x380
[  237.372988][ T2660]  do_mmap+0x843/0xdc0
[  237.377094][ T2660]  ? __cfi_do_mmap+0x10/0x10
[  237.381714][ T2660]  vm_mmap_pgoff+0x1f5/0x3f0
[  237.386323][ T2660]  ? __cfi_vm_mmap_pgoff+0x10/0x10
[  237.391481][ T2660]  ? __kasan_check_write+0x14/0x20
[  237.396633][ T2660]  ? fput+0x154/0x1a0
[  237.400677][ T2660]  ? ksys_write+0x1eb/0x240
[  237.405193][ T2660]  ksys_mmap_pgoff+0xf6/0x1d0
[  237.409910][ T2660]  __x64_sys_mmap+0xfa/0x110
[  237.414523][ T2660]  x64_sys_call+0x8fd/0x9a0
[  237.419056][ T2660]  do_syscall_64+0x4c/0xa0
[  237.423495][ T2660]  ? clear_bhb_loop+0x30/0x80
[  237.428203][ T2660]  ? clear_bhb_loop+0x30/0x80
[  237.432912][ T2660]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.438841][ T2660] RIP: 0033:0x7f84e058f749
[  237.443281][ T2660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.462921][ T2660] RSP: 002b:00007f84e1458038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  237.471414][ T2660] RAX: ffffffffffffffda RBX: 00007f84e07e6180 RCX: 00007f84e058f749
[  237.479410][ T2660] RDX: d3283d0368e269b3 RSI: 000000000000a000 RDI: 0000200000000000
[  237.487407][ T2660] RBP: 00007f84e1458090 R08: ffffffffffffffff R09: 0000000000000000
[  237.495436][ T2660] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001
[  237.503445][ T2660] R13: 00007f84e07e6218 R14: 00007f84e07e6180 R15: 00007fffec82b178
[  237.511882][ T2660]  </TASK>
[  239.106372][ T2669] overlayfs: unrecognized mount option "verity=off" or missing value
[  239.448737][ T2665] overlayfs: unrecognized mount option "verity=off" or missing value
[  240.026547][ T2670] random: crng reseeded on system resumption
[  240.279009][ T2670] Restarting kernel threads ... done.
[  240.915849][ T2671] random: crng reseeded on system resumption
[  241.536826][ T2687] overlayfs: overlapping lowerdir path
[  241.553317][ T2680] netlink: 64 bytes leftover after parsing attributes in process `syz.3.599'.
[  241.562887][ T2675] netlink: 64 bytes leftover after parsing attributes in process `syz.2.598'.
[  241.660435][ T2696] xt_hashlimit: size too large, truncated to 1048576
[  243.046892][ T2727] FAULT_INJECTION: forcing a failure.
[  243.046892][ T2727] name failslab, interval 1, probability 0, space 0, times 0
[  243.080993][ T2727] CPU: 1 PID: 2727 Comm: syz.3.615 Not tainted syzkaller #0
[  243.088358][ T2727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  243.098455][ T2727] Call Trace:
[  243.101765][ T2727]  <TASK>
[  243.104724][ T2727]  __dump_stack+0x21/0x24
[  243.109094][ T2727]  dump_stack_lvl+0xee/0x150
[  243.113719][ T2727]  ? __cfi_dump_stack_lvl+0x8/0x8
[  243.118780][ T2727]  ? call_rcu+0xb83/0xf90
[  243.123239][ T2727]  ? exit_to_user_mode_loop+0x9b/0xb0
[  243.128647][ T2727]  dump_stack+0x15/0x24
[  243.132837][ T2727]  should_fail_ex+0x3d4/0x520
[  243.137552][ T2727]  __should_failslab+0xac/0xf0
[  243.142338][ T2727]  ? tracepoint_probe_unregister+0x1e6/0x8b0
[  243.148355][ T2727]  should_failslab+0x9/0x20
[  243.152967][ T2727]  __kmem_cache_alloc_node+0x3d/0x2c0
[  243.158383][ T2727]  ? __cfi_mutex_lock+0x10/0x10
[  243.163266][ T2727]  ? delete_node+0x2b3/0xa60
[  243.167894][ T2727]  ? tracepoint_probe_unregister+0x1e6/0x8b0
[  243.170417][ T2731] netlink: 64 bytes leftover after parsing attributes in process `syz.1.616'.
[  243.173927][ T2727]  __kmalloc+0xa1/0x1e0
[  243.186975][ T2727]  ? __cfi___bpf_trace_sched_switch+0x10/0x10
[  243.193086][ T2727]  tracepoint_probe_unregister+0x1e6/0x8b0
[  243.198928][ T2727]  bpf_probe_unregister+0x61/0x70
[  243.203992][ T2727]  bpf_raw_tp_link_release+0x63/0x90
[  243.209307][ T2727]  bpf_link_free+0x13a/0x390
[  243.214024][ T2727]  ? bpf_link_put_deferred+0x20/0x20
[  243.219781][ T2727]  ? security_file_free+0xd8/0xf0
[  243.224842][ T2727]  bpf_link_release+0x15f/0x170
[  243.229711][ T2727]  ? __cfi_bpf_link_release+0x10/0x10
[  243.235147][ T2727]  __fput+0x1fc/0x8f0
[  243.239201][ T2727]  ____fput+0x15/0x20
[  243.243227][ T2727]  task_work_run+0x1db/0x240
[  243.247842][ T2727]  ? __cfi_task_work_run+0x10/0x10
[  243.252978][ T2727]  ? __cfi___close_range+0x10/0x10
[  243.258121][ T2727]  exit_to_user_mode_loop+0x9b/0xb0
[  243.263349][ T2727]  exit_to_user_mode_prepare+0x87/0xd0
[  243.268825][ T2727]  syscall_exit_to_user_mode+0x1a/0x30
[  243.274303][ T2727]  do_syscall_64+0x58/0xa0
[  243.278747][ T2727]  ? clear_bhb_loop+0x30/0x80
[  243.283457][ T2727]  ? clear_bhb_loop+0x30/0x80
[  243.288174][ T2727]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  243.294095][ T2727] RIP: 0033:0x7f30bc78f749
[  243.298527][ T2727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  243.318152][ T2727] RSP: 002b:00007f30bd6d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  243.326587][ T2727] RAX: 0000000000000000 RBX: 00007f30bc9e6090 RCX: 00007f30bc78f749
[  243.334756][ T2727] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  243.342768][ T2727] RBP: 00007f30bd6d7090 R08: 0000000000000000 R09: 0000000000000000
[  243.350759][ T2727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  243.358748][ T2727] R13: 00007f30bc9e6128 R14: 00007f30bc9e6090 R15: 00007fff23d7f128
[  243.366746][ T2727]  </TASK>
[  243.911540][ T2733] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69)
[  243.912181][ T2727] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69)
[  243.923425][ T2733] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  243.941142][ T2733] CPU: 1 PID: 2733 Comm: syz.4.617 Not tainted syzkaller #0
[  243.948419][ T2733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  243.958563][ T2733] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0
[  243.964728][ T2733] Code: 80 3c 30 00 74 05 e8 c4 90 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
[  243.984329][ T2733] RSP: 0000:ffffc90000d7fd30 EFLAGS: 00010096
[  243.990392][ T2733] RAX: 1ffff110231fc556 RBX: ffff888118fe2aa8 RCX: ffff88811e136540
[  243.998363][ T2733] RDX: ffff888119908000 RSI: 0000000000000000 RDI: ffffc90000d4d000
[  244.006328][ T2733] RBP: ffffc90000d7fd70 R08: 0000000000000000 R09: fffffbfff0ee4f56
[  244.014300][ T2733] R10: 00000000b720eca3 R11: 1ffffffff0ee4f55 R12: 0000000000000000
[  244.022275][ T2733] R13: ffff888118fe2aa8 R14: dffffc0000000000 R15: ffffffff817147b0
[  244.030239][ T2733] FS:  000055555b2eb500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  244.039161][ T2733] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  244.045734][ T2733] CR2: 00007fe4d3a39990 CR3: 0000000133221000 CR4: 00000000003506a0
[  244.053703][ T2733] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  244.061668][ T2733] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  244.069636][ T2733] Call Trace:
[  244.072912][ T2733]  <TASK>
[  244.075842][ T2733]  __schedule+0x1263/0x14e0
[  244.080350][ T2733]  ? __sched_text_start+0x8/0x8
[  244.085200][ T2733]  ? __cfi_sched_clock_cpu+0x10/0x10
[  244.090487][ T2733]  schedule+0xbd/0x170
[  244.094559][ T2733]  exit_to_user_mode_loop+0x51/0xb0
[  244.099763][ T2733]  exit_to_user_mode_prepare+0x87/0xd0
[  244.105219][ T2733]  irqentry_exit_to_user_mode+0x9/0x10
[  244.110765][ T2733]  irqentry_exit+0x12/0x40
[  244.115176][ T2733]  sysvec_reschedule_ipi+0x78/0x80
[  244.120299][ T2733]  asm_sysvec_reschedule_ipi+0x1b/0x20
[  244.125755][ T2733] RIP: 0033:0x7f84e046ef94
[  244.130186][ T2733] Code: 82 b5 03 00 00 c6 44 24 1e 01 45 31 ff 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca <80> 3d 0d 8e 37 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0
[  244.149790][ T2733] RSP: 002b:00007fffec82b1b0 EFLAGS: 00000286
[  244.155854][ T2733] RAX: ffffffff81356b15 RBX: 00007f84e1315720 RCX: 00000000000485ff
[  244.163826][ T2733] RDX: ffffffff81356bcc RSI: ffffffff813566a1 RDI: 0000000000000006
[  244.171795][ T2733] RBP: ffffffff813566a1 R08: 00007f84e07e6038 R09: 00007f84e07d2000
[  244.179758][ T2733] R10: 00007f84dffff008 R11: 0000000000000006 R12: 0000000000000006
[  244.187722][ T2733] R13: 0000000000000000 R14: ffffffff81356b15 R15: 00000000000485ff
[  244.195685][ T2733]  ? do_user_addr_fault+0x115/0x1050
[  244.200979][ T2733]  ? perf_trace_x86_exceptions+0x241/0x340
[  244.206784][ T2733]  ? do_user_addr_fault+0x115/0x1050
[  244.212072][ T2733]  ? do_user_addr_fault+0x1cc/0x1050
[  244.217354][ T2733]  ? perf_trace_x86_exceptions+0x241/0x340
[  244.223163][ T2733]  </TASK>
[  244.226192][ T2733] Modules linked in:
[  244.230121][ T2733] ---[ end trace 0000000000000000 ]---
[  244.230124][ T2727] invalid opcode: 0000 [#2] PREEMPT SMP KASAN
[  244.235588][ T2733] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0
[  244.241665][ T2727] CPU: 0 PID: 2727 Comm: syz.3.615 Tainted: G      D            syzkaller #0
[  244.247826][ T2733] Code: 80 3c 30 00 74 05 e8 c4 90 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
[  244.256580][ T2727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  244.276194][ T2733] RSP: 0000:ffffc90000d7fd30 EFLAGS: 00010096
[  244.286355][ T2727] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0
[  244.292517][ T2733] RAX: 1ffff110231fc556 RBX: ffff888118fe2aa8 RCX: ffff88811e136540
[  244.298670][ T2727] Code: 80 3c 30 00 74 05 e8 c4 90 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
[  244.306654][ T2733] RDX: ffff888119908000 RSI: 0000000000000000 RDI: ffffc90000d4d000
[  244.326299][ T2727] RSP: 0018:ffffc90000c57b90 EFLAGS: 00010096
[  244.334276][ T2733] RBP: ffffc90000d7fd70 R08: 0000000000000000 R09: fffffbfff0ee4f56
[  244.340345][ T2727] RAX: 1ffff110231fc556 RBX: ffff888118fe2aa8 RCX: ffff8881318f6540
[  244.348330][ T2733] R10: 00000000b720eca3 R11: 1ffffffff0ee4f55 R12: 0000000000000000
[  244.356322][ T2727] RDX: ffff888111c9a880 RSI: 0000000000000000 RDI: ffffc90000d4d000
[  244.364323][ T2733] R13: ffff888118fe2aa8 R14: dffffc0000000000 R15: ffffffff817147b0
[  244.372302][ T2727] RBP: ffffc90000c57bd0 R08: 0000000000000080 R09: fffffbfff0ee4f56
[  244.380281][ T2733] FS:  000055555b2eb500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  244.388253][ T2727] R10: 00000000b720eca3 R11: 1ffffffff0ee4f55 R12: 0000000000000000
[  244.397183][ T2733] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  244.405175][ T2727] R13: ffff888118fe2aa8 R14: dffffc0000000000 R15: ffffffff817147b0
[  244.411786][ T2733] CR2: 00007fe4d3a39990 CR3: 0000000133221000 CR4: 00000000003506a0
[  244.419759][ T2727] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  244.427732][ T2733] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  244.436661][ T2727] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  244.444656][ T2733] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  244.451237][ T2727] CR2: 00007f30bc7f0df8 CR3: 0000000115fd3000 CR4: 00000000003506b0
[  244.459299][ T2733] Kernel panic - not syncing: Fatal exception
[  244.467295][ T2727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  244.467306][ T2727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  244.467317][ T2727] Call Trace:
[  244.467323][ T2727]  <TASK>
[  244.467332][ T2727]  __schedule+0x1263/0x14e0
[  244.467365][ T2727]  ? __sched_text_start+0x8/0x8
[  244.467385][ T2727]  ? memcpy+0x56/0x70
[  244.467401][ T2727]  ? __kasan_check_write+0x14/0x20
[  244.467435][ T2727]  do_task_dead+0x9c/0xa0
[  244.467459][ T2727]  do_exit+0x1baa/0x2650
[  244.467483][ T2727]  ? __fget_files+0x2d5/0x330
[  244.467501][ T2727]  ? __cfi_do_exit+0x10/0x10
[  244.467537][ T2727]  ? native_smp_send_reschedule+0x93/0xb0
[  244.467563][ T2727]  ? kick_process+0xee/0x160
[  244.467581][ T2727]  ? zap_other_threads+0x2b7/0x2f0
[  244.467603][ T2727]  do_group_exit+0x210/0x2d0
[  244.467627][ T2727]  __x64_sys_exit_group+0x3f/0x40
[  244.467651][ T2727]  x64_sys_call+0x7b4/0x9a0
[  244.467670][ T2727]  do_syscall_64+0x4c/0xa0
[  244.467689][ T2727]  ? clear_bhb_loop+0x30/0x80
[  244.467712][ T2727]  ? clear_bhb_loop+0x30/0x80
[  244.467736][ T2727]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  244.467759][ T2727] RIP: 0033:0x7f30bc78f749
[  244.467772][ T2727] Code: Unable to access opcode bytes at 0x7f30bc78f71f.
[  244.467797][ T2727] RSP: 002b:00007f30bd6d6f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  244.467816][ T2727] RAX: ffffffffffffffda RBX: 00007f30bc7f0df8 RCX: 00007f30bc78f749
[  244.467830][ T2727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  244.467841][ T2727] RBP: 0000000000000009 R08: 00007f30bd6d4ce7 R09: 0000000000000001
[  244.467852][ T2727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  244.467863][ T2727] R13: 00007f30bc9e6128 R14: 00007f30bc9e6090 R15: 00007fff23d7f128
[  244.467880][ T2727]  </TASK>
[  244.467885][ T2727] Modules linked in:
[  244.473983][ T2727] ---[ end trace 0000000000000000 ]---
[  244.473991][ T2727] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0
[  244.474014][ T2727] Code: 80 3c 30 00 74 05 e8 c4 90 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
[  244.474029][ T2727] RSP: 0000:ffffc90000d7fd30 EFLAGS: 00010096
[  244.474044][ T2727] RAX: 1ffff110231fc556 RBX: ffff888118fe2aa8 RCX: ffff88811e136540
[  244.474058][ T2727] RDX: ffff888119908000 RSI: 0000000000000000 RDI: ffffc90000d4d000
[  244.474072][ T2727] RBP: ffffc90000d7fd70 R08: 0000000000000000 R09: fffffbfff0ee4f56
[  244.474085][ T2727] R10: 00000000b720eca3 R11: 1ffffffff0ee4f55 R12: 0000000000000000
[  244.474097][ T2727] R13: ffff888118fe2aa8 R14: dffffc0000000000 R15: ffffffff817147b0
[  244.474112][ T2727] FS:  0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  244.474129][ T2727] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  244.474142][ T2727] CR2: 00007f30bc7f0df8 CR3: 0000000115fd3000 CR4: 00000000003506b0
[  244.474158][ T2727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  244.474169][ T2727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  245.652168][ T2733] Shutting down cpus with NMI
[  245.948280][ T2733] Kernel Offset: disabled
[  245.952607][ T2733] Rebooting in 86400 seconds..