last executing test programs: 10m18.138741396s ago: executing program 32 (id=104): r0 = syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x2, 0xa41, &(0x7f000000a440)="$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") r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000080)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) io_submit(r2, 0x2, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='-3', 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x923, r0, &(0x7f0000000200)="2d9ce46bda7f74e438769c1cf533eb4bec056d1af9dc1767e8cd2bbe1f0cc4f05e7444edbc0324358b14f3ae9f64fe289c206343cecb97c2024224e973054fa36f80fba86d", 0x45, 0x10000, 0x0, 0x0, r3}]) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x8, 0x9, 0xf8}, 0x6) 10m17.392894528s ago: executing program 4 (id=111): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000855) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000001040)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 10m15.743230707s ago: executing program 4 (id=115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000006680)={0x0, 0x0, 0x0}, 0x0) 10m15.281650632s ago: executing program 4 (id=118): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x25e7e33e8729e003}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000002280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff0132000905", @ANYRES32], 0x0) 10m12.237933454s ago: executing program 4 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000200)='./file0/file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') umount2(&(0x7f0000000080)='./file0/file0/file0\x00', 0x2) 10m11.018512757s ago: executing program 4 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0x296}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00'}) io_uring_enter(r3, 0x43516, 0x0, 0x0, 0x0, 0x5b) 10m9.347351104s ago: executing program 4 (id=131): r0 = open(0x0, 0x84242, 0x1df2a23c5997fa5f) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) capget(&(0x7f0000000300)={0x20080522, r4}, &(0x7f0000000340)={0x7, 0x8, 0xfffffffc, 0x5, 0xff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10m8.379060274s ago: executing program 33 (id=131): r0 = open(0x0, 0x84242, 0x1df2a23c5997fa5f) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) capget(&(0x7f0000000300)={0x20080522, r4}, &(0x7f0000000340)={0x7, 0x8, 0xfffffffc, 0x5, 0xff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9m27.382795057s ago: executing program 0 (id=228): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) r0 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000540)=ANY=[@ANYBLOB="757466382c73686f776173736f632c696f636861727365743d69736f383835392d322c646d6f64653d3078303030303030303066666666666666662c6f76657272696465726f636b7065726d2c6d61703d6e6f726d616c2c636865636b3d72656c617865602c6e6f726f636b2c6d61703d61636f726e2c6e6f636f6d70726573732c63040000003d72656c617865642c6d61703d6f66662c6e6f636f6d70726573732c686964652c0036e5148e08e0bfc8c0455a52230f7e8bf50083813d3c144f608b"], 0x4, 0xa07, &(0x7f0000001f80)="$eJzs3UtsXOXZB/D/8SUxBiUB8vHxISCT8CUYcB3bKUkjFjSxJ4mpL5XtSERdEEqcKo1bWtJKgCoRpKqrolZq1UW7Q6zaDRKbsqnYtbt21UWlilX3qKt05erMjOPbjMc2jh3C7xeN51ye877Pub6Z8fF5wxfLwv4VYwsLtdcWxy/+fgcy5i52dvTT9z98r3y9ezN70pnniz8mPUkqSVeSR5PukdHpqYk2BV1PLif5JCmS7E39fUMup/hFHlga/yTF78p6W9qz0ZJpZ4Evtd0+/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G5UjIwODg4VezI2efHlSl1SWWNkdHqqyMLC2jmLy9R9XOv1u/i4bb1JUb7S07PY1fejB5dmP5KkciSP18cer3VInp68ff8jB154uKtjcflW2Xwuezde7I233r7+6vz83ButQxbeqa/D9uR2lzlfnRybmRqbOHO+WhmbmaqcPnly8PiFczOVc2Pj1ZlLM7PVicrIdPXM7NR0pW/kmcrQ6dMnKtWBS1MXJ8+PDoxXFyee+srw4ODJyksD36yemZ6Zmjz+0sDMyIWx8fGxyfO1mHJ2GXOqPBC/MTZbma2emahUrl6bnzuxKqfO1Ru7DBpqtyZl0HC7oOHB4eGhoeHhoXcbvWffnnDy+dPPnxoc7BpcJWsi7tBBy93lvta7eZuv4LB1HfX2P98dz1gmczEvp9L030hGM52pTLSY37DY/h89Xl233uXtf6OV71o2+7Hyx5E82RjtadH+t8hl5/7dyFt5O9fzauYzn7m8sesZ7ey/86lmMmOZyVTGMpEztSmVxpRKTudkTmYwr+RCDmUmlZzLWMZTzUwuZSazqdaOqJFMp5ozmc1UplNJX0byTCoZyumczolUUs1ALmUqFzOZ8xnNmVopV3Ottt1PrJPj7aChjQQNrxO0ujEvj/XNtf/Ve/V/gmzY9l/EYYsWGu3/nvahfSM7kRAAAACw7f7vL9l38KE//zMp8kTte/lzY+PVF3c7LQAAAGAb1W7Xe7x86y6Hnuipff4f3O20AAAAgG1U1P7GrkjSm0P1ocW/hPIlAAAAANwjar//fzLFoaUJPv8DAADAPaaz7TP22z6Fv+hffPxv5Ur9/Uojoj5W9J4bG68OjEyNvzCUY7WnDCR5Ym1pnUnRXfvzg2dzuB51uLf+3rtUYllnTxk1NPDCUJ7NkXrEkb6nyren+ppEDtcjn65HPr08sjMrIk+UkQBwrzuyTnu80fb/2fTXI/ofqzX5XY81aYMHtawAcLe43cfOfxpdmjVp/xsRT7Zq/7+6zuf/MuKhXD1Uv6VgIK/l9cznSvrTuOPgULNSF3sjqN+G0N/m24Dexi0LfzvVkf413wf03F7X5bFzGU5/028ElpVbLOZwoh7XeWf2AQDstCPrtsMba//723z+73VLIQDcVW73YL+JgXc2Ezz3xo3dXkcAYCWtNAAAAAAAAAAAAAAAAAAAAAAAAAAAAGy/DT3A/6/Hkvn5uWQLnQVseaBnMxmuP9CRHcp51wc6k+xW7S9m00uV+/hzVPqH+xqL/2v3t/w9N7DLFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2RJF0NpvekexNMpjk+M5ndefc3O0Etktlz5YWK27lVt7Mvm3PBwAAAAAAAAAAAAAAAAAAAAAAAAAAAADgS67x/P+O1N/vr09KV0dyNMnlJN/a7Ry3063dTuDOKNqHfK8euPT8/46kOwtFuuq7PUX3yOj01ERZVLG3nP/p+x++V77al722V4WygLKGFZ1LNGpYNqV75VIP1pbqHZ27cf1Hr/+gMnq2dmCenT03PjpxfvrrS4GPFB8lldRfixbz/cnRP/1y2eRGRwnFR+WaNre63nO1ekfX1vu/zZZuUe8GXJufGy5rmq2+PPvj7197c9msh3I4eaov6VtZ03fKV4uaDq/enisVnxU/K/blN7lc2//l1igWinIX7a+t/31Xr83PDbz2+vyV2zm9syKnAzmU5ErSs/GcDrU+NmtHXUd3WetgLaj8cbBNeetaVuJQi+36YO2Q6d3UOlTanF9ttns+6CozOtE0o1/98OEc2/SePtamxqaKz4p/FBfy9/x0Wf8fHeX+P5qmZ2eTImqRy46U5fNWnF4d9cjavhhePuOV1WW2PCu5A36eb+drt/d/x7Lrf2Nf7cz1aFmNzc+LZPPnxQf717QoS2ot0sFVLVLj6tNqmUaeB+tRLfL8nzxXL3MTV5Tn2rXYd+j8/23Rl3/npv5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu1+RdDab3pEcTXIgyf5yvJIsrI65uYX6OnqLraS5bbaS8xdP0XJFi1u5lTezb6czAgAAAAAAAODOODv66fsfvle+ar+P78z/dzTmVJKuJAeKX3ePjE5PTbQpqDu5vPgr/Z7N5XC5/PHA0vgn5dijbRba3dsHAOAL7b8BAAD///69bw8=") (async) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x52000775) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000240)={0x100000, 0x1, 0x80000}, 0x20) (async) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) (async) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_emit_vhci(&(0x7f0000000bc0)=ANY=[@ANYRES32=r2, @ANYRESDEC=r2], 0x7) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) close(r0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$xdp(0xffffffffffffffff, 0x0, 0x3b) (async) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7, 0x0, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) (async) memfd_create(0x0, 0x2) (async) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x397}, 0x94) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0xa08813, &(0x7f0000000380)={[{@discard_sync}, {@notreelog}, {@compress_force}, {@compress}, {@flushoncommit}, {@rescue={'rescue', 0x3d, 'imetacsums'}}, {@user_subvol_rm}, {@nodiscard}]}, 0xfb, 0x5142, &(0x7f0000005140)="$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") (async) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) 9m26.991325895s ago: executing program 0 (id=230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4004001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req={0x7, 0x200007, 0x7, 0x2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r7, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) connect$netrom(r6, 0x0, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) 9m24.639049954s ago: executing program 0 (id=233): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202", @ANYRESDEC], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x100005, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_free_batched\x00', r3, 0x0, 0x8000000000000000}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x41, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x9) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 9m16.255342002s ago: executing program 0 (id=246): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000080)={{0xf, 0x1}, 0x1, 0x2, 0x2, {0x0, 0xb}, 0x6, 0x6}) 9m15.251199234s ago: executing program 0 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xe, 0x4, 0x0, 0x0}, 0x94) syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$eJzs3M1uG1UUAODjpClNKCVCLNh1JISUSLUVJ2kFuwCpAIlUET8LVuDYjuXWP1HsJKYIEVgjln0RWLFnz0uwQyyQ2BWBPDOGphQRqHGS5vuk8Zl7PXN8rlWpOnMjB3BuzSe//FyIKzEbEdMRcTkiPS/kR2otCy9ExNWImHrgKOTzf0xcjIi5iLgyTJ7lLORvfXrvcOP+YGMuz3rtZFYMnAYvRUR7Jzs/aGex28ji7Xy+st9MY3t1P4/ZG+07+bibxYP6VprhoDK6rpLGlUZ2fXdnrzeM261KdRgbze10fqeTfWBvvzHKk95wu7Kbjmv1rVG5h+l9d7PBII93e/0sTy3P93GaPvr9Uczm64N6tp6dO2msdvr5fDerr1YfDON+HnvZdFS7rVpax9Z//JLPgLebnb1Bsl/f7TW7neR6qfxyqXyjWN7t1ur9+mqx0q7dWE0WGq3hZcV+vdJea3S7jVa9VO22F5OFRrVaLJeThfX6VrPSScrl0kppqXh9MT+7lrxx6/2kVUsWhvG1Zmev32z1ku3ubpLdsZgsl1ZeWUxeLCfvbmwmm+/cvLmx+d6H6x/cenXjrdfzi/5SVrKwvLS8XCwvFZfLi/9ywb+eyvUP/4uezPofcunxbue8K5x0AQBnT9r/z8Yk+/9Pvr330/oXle/1/3COnaX+v5k35Pr/8Tsl/e/k+v9jrP/zc7R+/T+PRf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBu/TDz9ZvpyXw2fjqffyafei4fFyJiKiJ+e4TpuHgk53SeZ+Zvrp95qIbvCpFmGH7GU/kxFxFr+XH/2UfXfmGs3wQAAAA8mb45vPpV1q1nL/MnXRCTlD20mbr80ZjyFSJiZv7HMWWbGr48P6Zk6b/vCzEYU7b0AdalMSXLH4p9NqZ0xzJ9JFx6IBSyMDXJagAAgMk42gnYUQcAAHhyfXnSBTB+x9m/K8RoK3O0F5z+5f2fG4KzR0YAAADAGVQ46QIAAACA/13a/5/l3/8DAAAA/ln2+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRHMCfDW7pl4qqLiv1Kt3BMXqELrtEHKCX4Aj0CrkAZyC7HCHCER6j4IhIURgbBf1+kj/Ggj/PiM2bQQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgT7fVev5/8fPfuTm7+jx57gYAAAA4ZVut583JNI0/tde/tJe+teMiIsqIONW7j+JdJ3PU5lTPvL56UsNNRJOw/4z37fYxIn612/3Xvr8FAAAAuF6b5WqWuvW0m166IIaUJm3Kz78z5RURUU3vMqWV+933TGHN73scfzOlNRNYk0xhacptnCvtRUadw+ToUKRDOWg5AADAILqdwLBdCAAAAEP6c3S+uGAdDKyIw1LmYS24+ef944Lgh84IAAAAeIOKSxcAAAAA9K7p/z3/DwAAAK5bev4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfdpW6/lmuZqdm7OrX+HHJL25rusMtwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MD+vKNACIRBGOxd35nM/Q8rDRobmlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw4nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xpJFQcA/M3uzt4PkFujLJyNJ56cKF6y5y8EmyuEYCFYieWS2z1W91TuUnhHCtNYCP4HNtpeIwQEOQv/giusvDI2EWSLCBZWyvyKk2zQiZrZ3dznA2/eN5OXed83gZDvvEkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMLkarhQxM3k0MniRn7ux92NtaR/cKBP7PTvnk9aEkf1pr1wWsk96s46CwAAAE66ZlHfhxC2463VpG900vr/mWJMUvNvPJLFRT1/sO4v+qL2T9q97756e2+iTjZPHEL4pjMerNS2wvl2seK4cxXGpM8Ssic0zfTb1nhz87FJnN716PP7999op+Gp/5YxAPB/uFz0eTCMPkl/PxqOxoPeLBMDYHG1/vnTxZCi/m92asgLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMYmm+H5Io5CCE+0/ooTD3Y31g7rd/p3zxft3LuPf1q+ZnKJOIQwHI0Hp2tcyzy7WHHcrdt33u+Px4ObRwqe/FdfJRAIFiU45h9QAACcKHHekrp+O95aTc5FSyH88eX++v9SKQ4V6//vR/culecq1/+92lY436rW/8vrNz5avnX7zgujG/3rg+uDD670Xuq9uvLay71XlpP7uZIdjzlbAAAAFlU7b+X6v7E0vf9/thSHivX/Dz+/80t5rqb6f8rR9/+POSEAAICH2KMXfvs1OuR81G6Hj/vr6zd72XHv4yvZcQap/r0z06dO5a1c/zeXZpAbAAAAULvJZrRv//9aKQ4V9/+/fe73L8rXbOaPIIaj8eDy2ofja/UtZ25N7/93Dh1Xx58T17BcAAAAZuRM3sr7/3H6/n/jqWJMI4Tw7NNZnP8bwEr1/+utz66W5yq///9ifUucS41udj+qvP+fju2G0OrWkBgAAAAn0um8JfX/T/HW6ntfn32r7f1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5kf+5tEwbCOA6/viRK3CYjpLf4mIGGCsEKgIRkyTMwAAvRUNFaLAIrgATnms5QPE/z/xVX3AsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvL3r0xcfEVFE6jJFmm7/zp8R8RVp17aT73sW+8up+Xnk4nCc5fyN+X8ZEWUUfZwDANC7qtsc6029GuQd5h3lHeetyqZevvLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADGCgAA//9fbFmx") r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x51) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000080)={0x6, 0xffd, 0x0, 0x3, 0x0, 0xfff9, 0x2401}) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="40980c4011529f0102030109021200015f67607009040e000900"/36], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000180)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x44, {0x44, 0xc, "9c176f3fa32b2b90b880fe8825e2712cbad20049890c46894aef0c59a027f39e582f05abdcf5f17a230c759c0b14a9338e42bdcfd1ec6c8bbda696ef7145c29399cd"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, &(0x7f00000000c0)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0xcc, 0x0, 0x3, 0x0, 0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x18, 0x0, 0x8, "744b74ce", "cf0746fa"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x10, 0x5, 0x2, 0x4, 0x2, 0x7}}}, &(0x7f0000000640)={0x84, &(0x7f00000001c0)={0x40, 0xe, 0x96, "c9a327dec720b0228976595bad834e0c1ce74c57a4ac77dfd29bc505f957158fc39b8ed6b78047b19ac0da679db6a6806e5373f8713e1fbd4f4abb7596621db1be659af47d579a3272e045f730b4b2e0a1f87a893079d3dc6bd6d4fdd7c3d9883468e9284f6289eb63102ef698c53b45409c31c47c49bd01ec757d9001b674551199efe5fde862e567321a460f158d068fc5a77cda5d"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000300)={0x20, 0x0, 0x4}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x8, 0x0, [0xf01e]}}, &(0x7f0000000380)={0x40, 0x7, 0x2, 0xfab}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000400)={0x40, 0xb, 0x2, "b101"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000000480)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000004c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000500)={0x40, 0x19, 0x2, "1a3e"}, &(0x7f0000000540)={0x40, 0x1a, 0x2}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000005c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000600)={0x40, 0x21, 0x1, 0x4}}) 9m9.975391523s ago: executing program 0 (id=257): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000d75045f39b2139da4800000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac0000000000000000000004000000000000000000000000040000c06b6e0000000000000000000a0010000100000000000000e0d4db1b3d7b4c3a83334ea7f8b6d6319c44af9fc1329549611323f978b8653e06adff9cf60e3694a4cbf4ae484e04adf37f677eaf6b55c12306f05e0355d9a15930467b17fcd4a05782489ca221f0e93f610088d5012c8a3e0b47eefa3aef774c89"], 0xc4}}, 0x4c050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfc}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x6, 0x7fffffff}, 0x0, 0x0) 8m53.969600337s ago: executing program 34 (id=257): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c40000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000d75045f39b2139da4800000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac0000000000000000000004000000000000000000000000040000c06b6e0000000000000000000a0010000100000000000000e0d4db1b3d7b4c3a83334ea7f8b6d6319c44af9fc1329549611323f978b8653e06adff9cf60e3694a4cbf4ae484e04adf37f677eaf6b55c12306f05e0355d9a15930467b17fcd4a05782489ca221f0e93f610088d5012c8a3e0b47eefa3aef774c89"], 0xc4}}, 0x4c050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfc}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x6, 0x7fffffff}, 0x0, 0x0) 3m2.578966626s ago: executing program 8 (id=1213): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) 3m2.275346232s ago: executing program 8 (id=1215): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000200)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@errors_continue}, {}, {@nodiscard}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x24, 0x61e2, &(0x7f000000d780)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x4040014) getsockopt$inet6_tcp_int(r0, 0x6, 0x2b, 0x0, &(0x7f0000002000)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x5, 0x2b4, &(0x7f0000000340)="$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") capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r6, 0x0, 0xee01) lseek(r0, 0x535, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x404, &(0x7f0000000080), 0x0, 0x454, &(0x7f0000000ac0)="$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") 2m57.131492043s ago: executing program 8 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x28, 0x0, &(0x7f0000001380)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800000200000008, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1805000e000000fe000000004b64ffec850012007d000000154500000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x10, 0xfffffffe}, 0xc5) 2m54.76336226s ago: executing program 8 (id=1232): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000002c0), 0x6, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fsopen(&(0x7f0000000200)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000900000000000080000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000040010000af2a4fa7a0aa108b"], 0x48}}, 0x40884) r4 = fsmount(r1, 0x0, 0x5) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x8, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0xfe7f, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380100001000010000000008fbdbdf25ac1e020100000000000000000000000000000000000000000000000000000000000200004e0000000000200016000072", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000002b000000ac1414aa000000000000000000000000bc890000000000000400000000000000000000000000000000000000000000000300000000000000000000000000000002000000000000000300000000000000004000805600000000000000000000000000000000000000000000000000000001040000090000000000000027bd7000073500000a000100900000000000000048000100626c616b6532732d31363000"/240], 0x138}}, 0x24000058) 2m52.767765713s ago: executing program 8 (id=1236): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000140)={r1, r2, 0x1ff, 0x8}) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x8, 0xc9, 0x1, 0xbe, "75ed332f46070017"}}}, 0x10) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0105b08, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000304fcff", 0x58}], 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r10, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r10, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) socket$igmp(0x2, 0x3, 0x2) 2m42.739465324s ago: executing program 8 (id=1255): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="32006c81", @ANYRES16=r0, @ANYBLOB="010b00000000000000000f000000"], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000004c0)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1120024, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xfd, 0x2aa, &(0x7f0000000b00)="$eJzs3c9qY1UcB/DfTdMk6iJZuBLFC7pwNUznCVKkA4NZKVmoCxVnBqQJQgsF/2DsSnDlxqVPIAjd+RJufAMfQHBnF4UjN7m3N6lJbKBp1fl8Nj0953zv+Z3cG0oXOfnw5fHh4zyenn75W3Q6WTT60Y/zLHrRiMrXsaD/XQAA/2XnKcUfaWaTXBYRne2VBQBs0cZ//8+2XhIAsGXvvPveW/uDwcHbed6Jh+NvTobFf/bFz9n4/tP4JEbxJO5HNy4i0qVZ+2FKadLMC714fTw5GRbJ8Qe/lNff/z1imt+LbvSmXYv5R4ODvXxmLj8p6ni+XL9f5B9EN15csv6jwcGDJfkYtuKN1+bqvxfd+PXj+DRG8XhaRJ3/ai/P30zf//nF+0V5RT6bnAzb03m1tHPLtwYAAAAAAAAAAAAAAAAAAAAAgP+xe+XZOe2Ynt9TdJXn7+xcFL/sRl7pLZ7PM8tn1YWunA80SfFDdb7O/TzPUzmxzjfjpWY072bXAAAAAAAAAAAAAAAAAAAA8O9y/Nnnhx+NRk+ObqRRnQZQfax/8+ucTVP9uZ5XY32qXa/VKJtrloidak4WsbaeYhN1TxG7wRdqsfHcqpp//GnTC3b+ec5usVbnBndR3e65nqh6sliaal9O7lQPyc9VT0opteKaq7dWDaWNHr/W0qHuxq9G64VpY7JmTmSrCvv2lfp9WQ5lV3fRWv0c7paNufiVZ2P5vVj1TvmbzGkdAAAAAAAAAAAAAAAAAACwVfWHfpcMnq6NNlJ7a2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK2qv/9/g8akDF9jciuOju94iwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwD/goAAP///hdbKg==") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000004340)=""/102376, 0x18fe8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r9, 0x73a2}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x408) 2m40.772244284s ago: executing program 35 (id=1255): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.sectors\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="32006c81", @ANYRES16=r0, @ANYBLOB="010b00000000000000000f000000"], 0x14}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f00000004c0)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1120024, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xfd, 0x2aa, &(0x7f0000000b00)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000004340)=""/102376, 0x18fe8) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {r9, 0x73a2}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x408) 2m22.230888006s ago: executing program 2 (id=1311): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x5c3}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5ec}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r4 = userfaultfd(0x80001) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000280)={'caif0\x00', {0x2, 0x4e24, @multicast2}}) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000480)=0x200) read(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x9000000) getgroups(0x1, &(0x7f0000004200)=[0x0]) 2m18.971205408s ago: executing program 2 (id=1324): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1000810, &(0x7f0000000000)={[{@stats}]}) chroot(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000280)={0x2, r0}) close(r5) 2m13.184145875s ago: executing program 2 (id=1342): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) socket(0x21, 0x2, 0x2) epoll_create1(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000840), 0xb40, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=ANY=[], 0x50) 2m11.220449086s ago: executing program 2 (id=1348): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0xfffffffd, 0x28c042) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x2, 0x1}}, 0x2e) getsockopt(r7, 0x111, 0x4, 0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000300)) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r9, 0x110, 0x4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000240), 0x800) 2m10.688714782s ago: executing program 2 (id=1350): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team0\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "e55971277418921583c74b99353b9d55d90908b6ea7cafd3188b931053629563", "d2e91e1188a3a6208b5e013818b75a932a2934e7cb5f9bcc53167b323a69eacb", "94d16db71df3a371c4f2294565f888dbc7a32ab04fa38b3c82a67f05ef87e88f", "3e19aa35f2f7b5d3a59b86ed9f130f0574c90f48b2a5c02c6465aebcda9a59f9", "55841bf439f886e44c5aa56197f103b446e00a88a651523af566b9830c4134d9", "6b29a0ff0d9f919c93b5a267", 0x10, 0x44, 0x7ffbffff, 0x5, 0x8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x140001) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="bc0200001600010025bd7000ffdbdf2500000000000000000000ffff64010100fe8800000000000000000000000000014e2000004e3000030a00201016000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d233000000fc02000000000000000000000000000101000000000000000d00000000000000040000000000000005800000000000000800000000000000f707000000000000f0aa0000000000000200000000000000000050000000000003000000000000000400000000000000020000000000000008c900008a262721080000002bbd7000073500000a0000001000000000000000ff0000000200008028001a0000000000000000000000000000000001200100000000000000000000000000010200032ee40006"], 0x2bc}, 0x1, 0x0, 0x0, 0x880}, 0x48000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m6.969362095s ago: executing program 2 (id=1356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_disconnect(0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m58.609142235s ago: executing program 7 (id=1378): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xa4}}, 0x0) prctl$PR_GET_TSC(0x43, 0x0) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x3, 0x346}, &(0x7f0000000980)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, r1, 0x0, 0x0, r0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xa8be, 0x0, 0x0, 0x0) 1m56.477966442s ago: executing program 7 (id=1386): syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="041606aaaaaaaaaa10d7"], 0x9) 1m56.183039097s ago: executing program 7 (id=1388): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x2397, 0x6) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x1, 0x5) syz_emit_ethernet(0x1011, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x7fffffe, 0x2c0, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xa4, 0x10c}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x31c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@gettaction={0x20, 0x32, 0x9408f9ce2610ee65, 0xfffffffd, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x14040800}, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578000000210104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) syz_emit_ethernet(0x135, &(0x7f0000001a80)={@link_local, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x2, 0x1b, 0x11f, 0x67, 0x0, 0x1, 0x6, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, {[@end, @generic={0x94, 0x10, "41bc659c86970c8f0b78793c65bd"}, @noop, @end, @generic={0x83, 0xd, "f45d247adb7fbf9cbf4f1f"}, @generic={0x82, 0xe, "c4fbfb8bb48115d8a814536d"}, @generic={0x7, 0x8, "899b1c60ea89"}, @ra={0x94, 0x4}, @end]}}, {{0x4e21, 0x4e20, r4, r5, 0x0, 0x0, 0x13, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @generic={0x4, 0x10, "48d49686260faada64f6d353fb8f"}, @sack={0x5, 0xe, [0x7, 0x9, 0x3]}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x7f, @multicast2}]}}, {"d029ad138c63054bbd84c802598fec537438055d6f2d6a525693f769f69fc1382dbed266a0479cfd0b9306fdaf5a29f51622ddca6c2d07142c685447507fa75fca01324eabbfdb4d078edc01488fa9ef3bafdfeb906e37f0ca123a185d555890c4357ecb7a6bf932190eb54ca6fbf62020f096e50af8a4b2c6dfd140a8778c5409abd6"}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r3, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000280)=0xffff, &(0x7f00000002c0)=0x4) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@broadcast, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x1, 0x1, 0x4}}, {@canfd={0xd, {{0x4, 0x1, 0x1}, 0x26, 0x2, 0x0, 0x0, "783974d220c86c817ec5d850b7d99102a605b16915e4c89ce39f6ecd25fc682ce492c4e1077e2da117b7c5d37550cf8771abadb7664664d8ee7add88c804ce92"}}}}, &(0x7f0000000180)={0x1, 0x4, [0x887, 0xdcc, 0x4b6, 0x60c]}) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r10, 0xc010640c, &(0x7f0000000040)={0x15}) r11 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r11, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r11, &(0x7f0000000000)={0x1, 0x7}, 0x2) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='wg1\x00') write(r12, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1m54.677745975s ago: executing program 7 (id=1392): ioperm(0x0, 0x83, 0xe) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x8000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, 0x28) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x44, 0x0, 0x800, 0x7, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x52b6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 1m54.150896442s ago: executing program 7 (id=1400): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0x5, 0x0, 0xb49, 0x0, 0x8, 0x7, 0x85}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x900, 0x12) sendmmsg$inet6(r1, &(0x7f0000005140)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @private0, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="b20f5bb28c75b4ec3a6df7ed10224550e72bd8e71ca230803753f99a12d628c40532c0ede975c930647407708eb781ce3c2f162fbe8f97cc52f4b125283b2312aa555c8bd0001a", 0x47}, {&(0x7f0000000480)="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", 0xfb}, {&(0x7f0000000580)="6c7532da0ab7782e239d6c515bbe7a65829fe42293e2b0e95bf1e409e1cd076a5a9bc608a9129a6c55d66ebb3d0e791210825e0487077d055c8250b5b7d68893495ea03d36a83a8660632a67f351dd90e1b2cecd677caf073d076ba9b38cc384a4935f9aa1df797dd84651283a2f0638e2dc935354508d8ac157a6351521ed2be3d05a09f9f76a071200f373d32af958a8761b67530510b4da85c3647ce20ae4fbd651d721714a14853b038ab9785f0c2ffbe041c16e3ae1c3d200beaa92d9727bf4d1b53ee183dd8e3b6067", 0xcc}, {&(0x7f0000000380)="5f1474249647b77de3fbb34295154b79cf9cabf13256044f547116d418c8fcaddee1578dc0a9f9d0e07385cc1a1d71cef2430539d7ddc87c53415be7544ff2811f07e160f918a3ff2a3d7f4ff9c710abb5d37a8df544d832981533d800ac124d3ebe5436d9dfd2d6a09e16c45830073fdd8717f3edbb08d5ba3473b20f444fa3da87fb83c97959bae5dcbdeefb670ee3428cca4eea384d51e8cc0ed75d9544a598b62bb8fbd900b2c47354d649", 0xad}, {&(0x7f0000000680)="35ac55355815f385373e6f85c9f9fd73ffb1588b8b53868654a4747eb30e204b47d6ad12701f53d10a84a2cd34f17923c19a1f730d68d36b7fab41006d908c5eacd3def126b84e456f713ff8f328ff0f40b4d316f73bbb36e2d40f8e500010aeecefe515cc5aba77625ba3f873c7ae6f639afca70cc3d687c729f3532ee40ddaab300f79e32174dae26e135af3aa88e445bef4f565d03137b244f3a7f5c5341e7231b1beb61c111ee6e07eac064314be33be05ae5c9ff178a26c8dedd18fad9be793c4b4066417c6c640f0dd37e2c65b427c688192bf2c008c3d16e4255f3e1c104fbad58e81f188de83480f49b9e27365e270", 0xf3}, {&(0x7f0000000780)="e837acd9b018b92a9dae00347d34620d746c089be1101357584003b70b59bd6093f8e2ba8f253da08190bc5d5195c2338e0de7b7cfdc7204ebb02dfaa47b79eccf5b0f11ef4c80c1b4fdc854fab914ece15144c6fd6a3b9d96c441896631467646d907c718750d14162af3100edc10eea6c249e3c783627bfa6856620a4c68d16a6f51e71e087556d2936a3aebd4c87d0deb0d022d7e0ca7431909a711503a515b559db46ed1048683fa5f3990aa3346540fc5eda55af71b729432e65547066d9af41a9a2314c151bd", 0xc9}, {&(0x7f0000000940)="60ee46ea", 0x4}, {&(0x7f0000000880)="b6ce3d8c7c3e20845d0035f7394c0c0afba8b1b99e48b6405f5b3b8041e7246b3317e15d23f1b0b3ee31801cc55dd242d659659746df706631baff804de0b1b1c5cb77db6c546a561334e4140a1e5f39401b9736c71baaf815c6354e2d556c9f6a8c445c18b7e11b0f1bee73e9a4a5ca4480e82e3df7498eb3c73db7281ee94de2c4674db4f40df593149ea6c4989c46496991cc7196bfbf4639fb7e17774ce16e0a8715dc4b", 0xa6}], 0x8, &(0x7f0000000940)}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x80, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)}}, {{&(0x7f0000002c40)={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000002d80)=[{&(0x7f0000002c80)="230a452855b72aeb049561579a789eaf2363ae0337885284fca661626b3662b9e01d0c47bec8fb69c63383931024b7847a38b64b01fce38e2159ce89ed7fd3d18321fda254e6a3b0f734f6b2cf66647be0df876de39d4307728fc582645b08d9d5965ce082cc88d10a4b64c0cab3f59433cc01bfa3ca0f8ea5fe4d9c6c3e7b7ba51bfefa1b6753d23e2be993658c640dc7b14a9d1d8ecebba7c28121153ed9a566b73de0e04b0982f16fce253d327acbeac7006c8c044b3366c18cda511f22c9128e9c0ea49bea5771f5edec5bc68694", 0xd0}], 0x1}}, {{&(0x7f0000002dc0)={0xa, 0x4e20, 0x400, @loopback}, 0x1c, &(0x7f00000050c0)=[{&(0x7f0000002e00)="b56d1c08838ea57d0a568f11e4a5c3dfd16bd77374936f481df728e8e89b2bdca33925a417cc71374763bdc52f62356a04c6d3c5773fca23a8be71937130f40e7321baeb18f0e36e626f440b19d6b5ff4efc1ecf2794b479fd785f22eaa2718d922edf30d837cb57180c8f968e076785c378ede0aec3bc91b4fea133f607bc0959bf3c97ad53e913ecc2db8496ee895d77239a7fb93ec0a2e4417113df1e80409da1b14fb4e260971e3211d090852e178be88942c5c96b639c361447ab3f6f431688627ec6f7243f4714d0390f66e25618d6339a7ed8165a1786c2", 0xdb}, {&(0x7f0000002f00)="2892d5dacd25de130827b49500d70612703019492a0ae7c671b3b9b7605e3d94a6c319eb386933635eb95c0077dd1c229426ccecf518bb08dec17fa32d204d90a862dc9a380e95d1c9aafe98feb9c7e1e7f54d96b9118031300e649ebb0c4f234621827c107230feaf56fd667ddf0524", 0x70}, {0x0}, {&(0x7f0000003f80)="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", 0x1000}, {&(0x7f0000004f80)="c352af511b2df17ed6d4cdcbaf8b0e0a8314cbf760b85f66b0dcc93ca6069926167d4563352fe0f54dae27172f637b50e83182feaf466ccafc2a5921f65cf208861e6ad8f016ca1828ee4bc1671c30746f2c4eee059b41f6f08e7ecdfdb06ee5d2a8bfca87e87f4257b8366776de06e44d0c9745bccad37dbf06183936d4f69a0dc3ac6982dd5c7464e428c90d40d0a187c74c774ce29ef6f714", 0x9a}, {&(0x7f0000005040)="c0577a7f4510d4131b2c8d77c10aa512090ee7351d85a41dc82cca8bb3ac7a47bdbd52490034249103cd7a1438004ef2c82345abe7102c47762cb26099b4355300d377a600e4f440bbcd60e7c29324611e82312cd1e781d2", 0x58}], 0x6, &(0x7f0000005100)=ANY=[@ANYBLOB="100000002900000443000000020000001000003e000000020000000000000000"], 0x20}}], 0x4, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600"}}) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$full(0xffffffffffffff9c, 0x0, 0x40, 0x0) readv(r7, &(0x7f0000000200)=[{0x0}], 0x1) 1m51.541929846s ago: executing program 36 (id=1356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_disconnect(0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m50.464892879s ago: executing program 7 (id=1406): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x30000000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 1m34.735023553s ago: executing program 37 (id=1406): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x30000000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 1m15.4264081s ago: executing program 5 (id=1470): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x1000000, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000400001}, 0x60) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x8004) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) gettid() syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x1, 0xf0}, 0x1}, 0x2a) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r6 = fcntl$dupfd(r4, 0x406, r4) socket(0xa, 0x80000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x9, {0x1fffe, 0xa, 0x6, 0x0, 0xfff9, 0x0, 0x3, 0x6, 0xfffc, 0x0, 0x8, 0x40103, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) r7 = syz_open_dev$video(&(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000240)={0x9, 0x103, 0x5, {0x2, 0x16, 0x9, 0x5}}) 1m13.534368716s ago: executing program 5 (id=1472): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x3, 0x8}) 1m13.422927245s ago: executing program 5 (id=1473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8001, 0x4, 0x1, 0x5, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0xfffffffe, 0x1, 0x820, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x8, 0x3c, 0x8, 0x9, 0x10000, 0xfffffff8]}) prctl$PR_SET_SECUREBITS(0x1c, 0x25) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'dt2815\x00', [0x1, 0x842, 0xfffffff8, 0x9, 0x6, 0x3, 0x88, 0x1, 0x8, 0x10000, 0x4, 0xee4, 0x3, 0xbc06, 0x5, 0x4, 0x7, 0x80000000, 0x5d766b32, 0xba04, 0x9, 0x8000, 0x3, 0x7, 0x4, 0x2, 0x23, 0x5, 0x5, 0x9, 0x1, 0x6]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, 0x0, 0x48001) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) 1m11.560762085s ago: executing program 5 (id=1479): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2000c0, &(0x7f00000033c0)=ANY=[@ANYBLOB="9def7bdc0a4f0e154208b71cecba15ade8af977234b47ca14b99bfa6214291b8905a062245c26b28968c61f1abc733192e3c380005f833ed9efccbb3e4516b13611e2aa165ebfa6b8ece1deac29bca51f7d4991616b294f3134b8859e8040834a5ec1bf3e26286997fb8b90a4dd165642a8557addf5518ab44b583af01eac33de92f406bb13eb69e5756f0d65e3cec18ae51fb265fd92c3f9a505bf04c7cf570766ff2c2505c3cca86a74560038cafb6c87dada76f02229efce1ed5dcd34e85b1199d4f3a41dac4496f1a55459836c98f1718a6e47aaeb20596f39c20b3f8ade4dbe066fbbd30c0ed7af6746d1d4719d90913dc50d505af5210f026734db13106d61ab744ab3ca63260b48a25f85716e78905f101cb6ae7ce24544e62c85f94f0344314ee7d2b3fdb40826a90e50cb9fa87b19b94d29adc7496336b290f70bce1109159e89585da7470dc5ec418939e36507793f51e3411b38d797c8da7360567d971639cf0bf5d2f80fc9603b0dada989765fdf3ac6d2d0b4e9f585ad5f8bcf1d8e5b7c437ef8b599186c7619f576c904a2bae7ffddddb2767491e9982e130be0cc3686bd697257085f6077c7c2f688717d4cfa680c60ab3ea1452192de191b653df7f9479a10bf84e353d3e61f7792f7cd84933b1f3dc52bfc6f97bdd8caf40f88fb7b445c13a9301ed70454188f66a0a4e8d3d180a40c7703455840888e5e01f4b63896e90499a3830b867e3e0fb9fed5a179f4700d2669cf9b281d16ca3fa2076a465328bfed17b76391d4e04b220629de9dfa87afc146b4e39eb7c9106b6ac212dad4651ff7bdb47c44f1dca2108b2614dd17fa34102fda86e17a557cd7d3e1e4848e5ff98424f0f48383ef204806150a4aee4bad416bb7b6eba2cdc53d049098a5a1a6ef685d16dba14de178ba0c558f6075776b97b264cc50c88408d8e82e4420d3fa496b81935f5485637f0be079e34c38515c86a291b9497bd0f79b748c712e5defa6e064f7ac92f2f84344a0bdead64f60455474089254bea95c61c1383935d2f2bd941b1bd2cdd3aaf178460aae5b55719caefa8c0f23814a8905d6926638300d4b2ab4bd6448e4f03f57dcaf9c253bb987007a90e0d8ba669a2153d2c84597a1b4a3170e24f5ab8aafbcb02d75b1f03e49185d517a6fd15fbe98e10c98997007968670adfab4722866a0fda788202a2e5b4106c01bb12004ed0f72379b5f91e15d5b1c777de567ebc4f46833f2003b3cdbdbca69d620097c3f238d3863f21ca24961499161c53b6d6d6db81d49e6ce4f6d38cb93c86b9858b08ac322f418b8d21fb2a477510dda01686ee0626e950315168243185c39c8e5b9fda2f6b3b2582e2354956cf1f55628798011d46babf52fc05bca5a7d5af17ec860d3fc392e554716de6de07eab4a357260047c203813afa43309ad056bfce7b6d1447c906cc4c7c8a40d5b03d7e677d3fa83228dcf4591b989cbf9def627fe0ba495d3a9e4c04b780be3ce64c6f832f992efd7660465d467df9f87a6e1cd767ebe45aca8ba0e03e879373555cf8760c55e3dcadf6a1a14140d8ab6053b3d01876895b4e01e092fc7ffc5124799f02fbeece513b190cf9e08c62ab8a09bfb322a66fcd2794529fa2af2932dfaab00549f454c6bd55e79cc638f162d30198e4cd9d72fcbf81d4ced462bed48d8ba483a683bb1d8ff0b12ede34e8d2a58cb6256d93b4fc4e6fcf5fd9a3a73379be029e82ebf12ac41a2fe056f8f0c4c5793c21b667d11aa790c51e4981d71a5fbca3c6a38d4b6625cafa6c1dec84339304630530d5b8f489cf3335d1b25c769028ace7bf2964a28c9c9bd204d6a35c7a47fa7dd134886f451eabfec721e81788cd1ee6a42ac627faaf84405a0ed13762223705493bbca280d38f6226982fb72547a8bbeeec5c9f407fe2baab1e2054759d71911669cf1a4031077653ec8cbeefeea2c7c59641731d91bd8912f4290a6eb01008b5111bfae594831844220d54ead4c25aaefda9471846a84721388430d9ccb0abeed8051e50446651053d43d11e1a242f5edd67eb7ec224ca72f4deb08faf8be364adb734c3791ed7048ffc60a0fc0b6264a416e42c52138d1d864a34a57a45c690cbbf8769e5e444866b9206e11920130891e9b5a90485cbf1d63b13a119323ecf4fbf6aa7a1581c573833f94460b4898c1edbdfddea00949e05e3e24a2ca6f8879958dfdda21f7e175e3d627bcfba7205e241cf1a0471a7f473c78ffd27e4fb6ca15a89cae00405ae40dcd92216d58e3b59837ea6121e79a56733000dd5061428f33415a60ccc6f34ebf3d091e3f4eed0ce9bf7e7348a131ef0ac1a9e525e93821ee37c1159a67509c1310f56de334f91d40e925b2be1d9964e1a77c307ac2a46934873d2b926e6cec4abd99dd242bd01d2a4b314f1f5a791ddd8a434d1fa4ca5e828a5fd6f65114a7f45f32a2ea287c232fee24dc072ff53773b766a50bf3e08d4614e888ee1c63c46b929ef558f9fcaf5927cdd4182aa8d87ce650889fdfda07b9ea9378dc36a2ea0aac89f459ce8b28a5d4f6b68d03641401ad985fa96121d411b1a4fad39da3845395da04ccb39e488c42cfa0d9276770822f2dbb7f170d9e6fce96fef12bb29db9e273ca0ee8878b8078054b54c11e222747fed852c0653e45e1d4de947e02c01edc328baccc54d8da5b0b231eec135e8487e288c51d613592de11693235134f71834d7bd38f2ce4836ee2b95a9f073db08a3318dd38c8b4e768f75da8e1861b5f54fcf6bc39b16932298e3b573d204ef2911670f736926c0ece4e42c7849941e8cc892e799cfe2e76b4647aae878157379a4a34a3757a8ee2dd476d0e8c72150dc264b2cab6e2bb21b898520c612feb08792f69ff17e77d013f2c133a287d7d158ec8f3cb95cdb18671d6b6c58465f0d613a682b39018679bf10c87a3fe4c64db0bbd5816cfac63435377c533a57607289ded7f6136bf5a4002e12de4218d2091f041c0bcafa02c3aca5fde5bb049164ef4f307edfbdc83822bf31acc1a35a262bb8e0920ea8153fb43bf74e7de5f61ff427ffdfb3545e966d8362c1aff62f735ab44dd30e67b8651847e5884b27d50c77155cbca8a5a418c201de2f9b583150b42aca071c0ed60ecd2c918454337fa4c60314c58fec8e5ab8c895a014a8ce08cfbb056bfe4427c2c8d4296e3f874a40392b1ae17b1beec6637cafee2ff2495672c082e689d92ba780890068aa7f053bd89f2df756f2016435fe42bc1784e7aa9a1565395cf3412c8338e4b6eb4465b0859dbe89895f3503ce547cd08d92b5a4f08b591ab30b34755c0ce14b79935bf1c41b0c94bf75df3782bdb65e29669e299c69346785de619810dd7f9578df90a06e279e0a097b75a17ce433c14fe9b54c2d8e94dd57923815878e1811e312f3650fa1b376b42be93059f3d93128b63b2f7d9474cb0997dd12c36780f538170e4276366c3f43e84eb55e8837084364f36323b3b64b45216dbba916b72a318d8ab5c0a1bfe60d7fe3341c0b05e97480456d67eebde19acd7a340b6afa74715a910676e8475732119d55a3df775ccf748e627510e853e4395425b48f0259ee93dd41f9b45e56630527a236f6638e710c350a8b97faf1826d9523fd19a3b68e1c7400cbf124d8a273c43e0167556d008f62f289187548496c46904a160f6548a3062f49a3d590625be96259d2ddda029ae428280f47b802eb27eab107ee8c71182715bc830925d5fdbe758ae211222d50a0f99cfd544766d483dcbee8508c079ee7167695a9cddede0be736400857f6a950a410d52310717a601e77c65703888928c50e558a98270f3bdd30d63ca5d31e1a201d468242373956abfb5b4c6de20cd4c9d2a2542295f90d69807adac388cd8ba3a66ea143ce8e22af9760135983df6a90399557be6135e963e7b77e3caa7a90ddebcab4bb45beea76b5ad8967b27494710577d1dd81099852262792beada22fe4817cb3cb6a554913e4ded88ab7c1f0b0fb0da06d7ade10b84dfc92c9c86f4c1533cbc15d132cca469d023ad594f45adfac2d9409f0642832ba0cf9f42f6781f988ffdc8a5f699e0369eb6a3b785907d6bcb756069eba044f5de903c3f61158c2b13b21cc6629171a31be7f990c66930136874b76dda69be842313bb8de2ebd33d7a1dfa05cc9135367e4278b71eb42ab14bf2d79e28640a1e2dc3e24707a26a2c53e32bd107688975cbab06baea2aeca9e34e49c4ba2aef828ef9f0dadcbc220f75137218a382122e11e82fca69bc0e0a3481227f7fa6762f99b4944823a0a9a0dce0a22c809130c274f487374c178e3441236f40f2e0dafc53dd481ab1767f794b93e1d12b26753fb3cdebce03b2cd5b5333c99d8da387d2fffd4b20f38075e18e9cb81f8484854c3a8f7174b12f0528c2c03288f34ba1fea7c7987951972bd44bd05e7fe29b85de7491f43e2c334d3f34d4e22ed6481403a604ef8ac849e025254b24798fc4f384c778cca521285699eb2500a6ee9fd552b9903dca99bd9858a5f0c93c039fd2c326830a1017124ec8d7b776012b8b275bd4ac2018e0cdf7ac32406e57ccdbe3b62fababa9598913c6f483768831e250e223edbd2990f5398578b992bf320368bb701301b054ca2d8978d0b0500684418693116dae35ffc6501887b2299725a85dacfe24cdd0b62df985358a249c734e04cfd751b818ee19639d6546e3d55da090b019bc69e8fe14aa9f8ebd416202bf7ced5f0578a7beed33466770b280b89dfed3359689179c840e370a83cc7e1bc200c31d59181ebf0dc1d40e758d779ab6fcd73d42c0c299a7835268a96f1968bde7589f7ccf602b7c650b708b8782678661f02fb06baad35991ff2b23d15a9b48d24ef4155299e27c925500f732729208a57667ea8d0f46b75a32e58fcf7f86ca7392c5c6008837abdec6a05d6c9b0bc1c6117863a5a95e39c32193a959f711d0c1476ceb0cbee6b526791149d91aa3866bc91d7e8492c108a2fa2f276d29f0888bce2ca1e39c2808a7a773d67ce13bbbc0c90bc88b635fb11243f026db8ea244d5208e462b6f3be280ddb107918d26e91aafd6923ce20597fdb1e72a010dc5df2e89a1f499250a0d8abe11a760c47530d0641c2a6f34b6c921b569e7ef59f6e837b2687dba2ac03d61efd937035daedd36f44b54a630acf44fe4434e676e529609d92058f4374212f316333ad5958ea871b5436d80812d87cf99d50e192b0a3a865f3c4fa3ec1fb5e72eb84aa756dfe78261bf69c7829f0b3f538889ea7d1490b06d0fe03c243b1b022b9165726b04653e058704f233d676e0b3a8ce34b5af0e68ca00032cee8a835e0e450c391eeb96983a13110c35157fa04c79b73878eff63ffc07e817412b19ad93c36b2b0dfcb3ae0fd83cb9f6ebf1e05f1e75010708978f6ce924a9585a0be452b147f3b671587481cc379fb58202d70453393873dd080d086d0022311c8b10b644a65c04768050428a5249635394865a6f61ade506fbc4e1d2cb5f6ffa06e2a968927e1501539436d6354e7057bac39679fed377acb2ad0e46036d94490f91b42b2724c40fe24723968940f34cedb181d4759cd7540b95d1bbbc153e6f61cd3709878ed1c9080ebbf6c66740702eecf2b184c8c319e0aba0bbd887868f60df4dc8160184341068edb0cfa3d5ccbe6d6bd4007fda29ebbdde8156641db03c82503e30519b3c11ff977a6cadff471b8289311767d466bde48d4f66abefb2a8d5a143ac2aca81956ca7e794f75df8864c932392eab2d76f4674"], 0x1, 0x6e4, &(0x7f0000000240)="$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") r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x204640) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000fdffffff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2d84000906ffb9"], 0xffdd) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000580)={0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x98f90a, 0x8000, '\x00', @p_u8=&(0x7f00000005c0)=0xe9}}) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x91, &(0x7f0000000780)=ANY=[@ANYBLOB="12010003000000406b1d010140000102030109027f0003011010060904000000010100000a24010180010201020a240701000000d885700904010000010200000904010101010200000905010940001404cc07250101800400090402000001020000090402010101020000062401010500100f240202966802000221d53c71e3fa0905820908"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 1m8.006245531s ago: executing program 5 (id=1487): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x0, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r3, 0x0, 0x0, 0x0, 0x40010000}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0xfe, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) 1m6.635315649s ago: executing program 5 (id=1488): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) 51.46670336s ago: executing program 38 (id=1488): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) 18.385052957s ago: executing program 1 (id=1580): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001900010000000000000000001d01090050000f80490700000000000000c18424783f3bb6a3d7a36227948e622b761acd509d61b4512bb4e36cdf07c9bc8e0d78b418a01238b454c5a4b856dfec1aae4c0b07fbb38f8040d0fa916a0826"], 0x64}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="b7", 0x1}], 0x1}}], 0x1, 0x4000) sendmmsg(r3, &(0x7f000000bb80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="10000d"], 0x10}}], 0x1, 0x4004000) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r5) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) 14.942412323s ago: executing program 1 (id=1585): gettid() truncate(&(0x7f0000000000)='./file0\x00', 0x96f) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r6, r5, 0x4, r5}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) 14.895591517s ago: executing program 3 (id=1586): truncate(&(0x7f0000000000)='./file0\x00', 0x96f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) 12.759730974s ago: executing program 1 (id=1587): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x6, 0x3, 0x5, 0x1635}}, 0x120) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2161, 0xfffffffc], [0x0, 0x0, 0x9], [0x4fdd, 0x2000000000]}) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec23, 0x488, 0x3, 0x15f}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2, 0xffffffff}, {0x60}, {0x2}, {0x6}]}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 12.092290096s ago: executing program 3 (id=1589): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000300)=[0x6, 0x7fff]) 11.719409788s ago: executing program 3 (id=1590): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x2100, 0x0}], 0x1}) 11.059279579s ago: executing program 1 (id=1591): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x6, 0x89}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x80) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)}}], 0x1, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 9.982375267s ago: executing program 6 (id=1593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x10012, r4, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) 9.821974615s ago: executing program 1 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req={0x7, 0x200007, 0x7, 0x2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r7, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) connect$netrom(r6, 0x0, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0) 8.47657793s ago: executing program 3 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x2e}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) 8.081529717s ago: executing program 3 (id=1596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) 8.08029606s ago: executing program 1 (id=1597): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@generic={0x30e, 0x88e6, 0x6, 0xc, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, "1972e68db9d6727133ff72a2", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, "a66524f29c742a75d451cbf2c1"}}, 0x2d) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0xc, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}}, 0x2) write$tun(r0, &(0x7f00000003c0)={@void, @val={0x3, 0x3, 0x8, 0x86, 0x18, 0x71}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x8b, 0x64, 0x0, 0x9, 0x84, 0x0, @private=0xa018101, @local}, "8b04ba00175fe851a81e33080f00000098f18b694a4aad1fa87696f1e6f13ff83d35a39778864cc84cfce229058b3b36c7728c9e0f1fb81c964ee1bccabfda7fda68bc01385288edb56700ec62d75909197bd6a203cc2591abce124e6500000094d3017e252f53fe36ae931e0d3f6dc03aa47f0bee7a4a"}}, 0x95) 7.101899155s ago: executing program 6 (id=1599): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="03", 0x1}], 0x1}}], 0x1, 0x44810) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 6.928368608s ago: executing program 6 (id=1600): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x200) close(0x4) 5.722055603s ago: executing program 9 (id=1602): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) fcntl$setstatus(r1, 0x4, 0x800) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) 5.589715497s ago: executing program 9 (id=1603): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x54}, 0x7}, 0x1c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 5.184516857s ago: executing program 6 (id=1604): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)={[{@jqfmt_vfsv1}, {@heap}, {@alloc_mode_def}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x17}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@jqfmt_vfsold}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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") r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0xc02, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000000)=@x={0x94, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000240)={0x0, 0x44000000}) 4.649101192s ago: executing program 9 (id=1605): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000440)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000480)="6b53a0ddd4", 0x5, 0xfffffffffffffffc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @private2, 0x7}, 0x1c) creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[@ANYBLOB="0407"], 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x20010, r1, 0x0) set_mempolicy(0x8000, 0x0, 0x200) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @private1}, 0x1c) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) socket$inet6_tcp(0xa, 0x1, 0x0) (async) add_key(&(0x7f0000000440)='logon\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000480)="6b53a0ddd4", 0x5, 0xfffffffffffffffc) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @private2, 0x7}, 0x1c) (async) creat(&(0x7f0000000400)='./bus\x00', 0x0) (async) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) (async) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=ANY=[@ANYBLOB="0407"], 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x20010, r1, 0x0) (async) set_mempolicy(0x8000, 0x0, 0x200) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @private1}, 0x1c) (async) shutdown(r0, 0x1) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f00004c4000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) 4.411330252s ago: executing program 9 (id=1606): openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4040004) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xe) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x1, 0x3}}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) 3.260831166s ago: executing program 6 (id=1607): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f00000003c0)=ANY=[], 0x3, 0x18c, &(0x7f00000004c0)="$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") 1.959029837s ago: executing program 6 (id=1608): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000240)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@fat=@usefree}, {@shortname_mixed}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@fat=@check_strict}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp737'}}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$apparmor_exec(r3, &(0x7f00000003c0)={'exec ', 'check=normal'}, 0x11) syz_usb_connect(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="2098e0add6490c75c4a26fcd455a2cdbd424a5cae9b7294bf7144454c5c8f6f01950b659fde1b7993e6002bcca98e3435eb6930fe3cc56a96368b8378b41081736e4ad02d4d19077332e0d43f696d3a4a856dd5a160748146f4ca0078e7680e87abfaa06f313f2008de42186d50224d665b896381662e1861eecd9c751d34edb9cc092ee299468b8c21afb33265a18e7b91b12d1cbca7ff954bbe6a2", @ANYRES32], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x90, &(0x7f00000000c0)=ANY=[@ANYBLOB="900385dbf9d9293834a90095e07d4a1d84cb44d00f0c58fb5174ed022ebb83686f4bed32759e8973984fde3165ec4de69350201eaad3e4d9153c3b073a0f9f342bfe9649a21e40d1b00ac1d9ee03e0d3d4e1bd0c9e7c2f1ecb6e550e0b205e13d02550d7cbaa6cac379a2ea205085dbd7d4915063d57bdd3a61060199deb3702df9168e9c10b1e15a36d554a29355eb5"]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x8a1}}, {0xa8, &(0x7f0000000200)=@string={0xa8, 0x3, "63943f183701f8133d846c171721ba2cd4f0463eaa80c026a7ac8c108818ff3ecd571acf6d71c67b68f47b5b96717bfe8d511b6a152b9a085a3521b89363f54a3cdf2db3f8d6b7aa99f8c52ebc0e609ec69ac63c1e63ca10fca9ad53feae1543e2a7ca327ea73b9ae3ed61962c3e98172cfcd814ced609a0c54681ad5c24dfff9b37d74e653bb504a87768729a53f3c42c5d6a6799bfb22bae53879c8346e2787ff61ab8712e"}}, {0x5d, &(0x7f00000002c0)=@string={0x5d, 0x3, "bfcfd7cf13ccef58f5a8bbdb1a6fa9407f1140e5873d58ab569fa03732c9e6b0d12ddd46b980d5c79daaafa5eb6b3a323ae31c98b66cd2c4a51ed4e77a8abf0f6303ed2c858a6e489572c93323a8183cae0232c1ecd35cff5d4962"}}]}) 415.459816ms ago: executing program 3 (id=1609): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 328.577624ms ago: executing program 9 (id=1610): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, 0x0, 0x0) 0s ago: executing program 9 (id=1611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='host1x_syncpt_wait_check\x00', r0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgid(0x0) prlimit64(r1, 0xd, &(0x7f0000000040)={0x14, 0xd233}, &(0x7f00000000c0)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd368a6acfbb9f167}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r5 = socket$alg(0x26, 0x5, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x2000044, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) kernel console output (not intermixed with test programs): s value: 2 [ 538.527179][ T8007] usb 9-1: SerialNumber: syz [ 538.555006][ T8004] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 538.570778][T10326] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 538.579350][T10326] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 538.598161][ T8004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.620793][ T8004] usb 2-1: config 0 descriptor?? [ 538.644461][ T8004] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 539.269117][ T8004] usb 2-1: USB disconnect, device number 10 [ 539.305542][ T8004] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 539.393262][ T8007] comedi comedi5: Wrong number of endpoints [ 539.396630][T10355] FAULT_INJECTION: forcing a failure. [ 539.396630][T10355] name failslab, interval 1, probability 0, space 0, times 0 [ 539.402822][ T8007] dt9812 9-1:244.0: driver 'dt9812' failed to auto-configure device. [ 539.436668][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.450018][ T8007] usb 9-1: USB disconnect, device number 6 [ 539.457586][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.465547][T10355] CPU: 1 UID: 0 PID: 10355 Comm: syz.5.1099 Not tainted syzkaller #0 PREEMPT(full) [ 539.465578][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 539.465593][T10355] Call Trace: [ 539.465603][T10355] [ 539.465614][T10355] dump_stack_lvl+0x189/0x250 [ 539.465659][T10355] ? __pfx____ratelimit+0x10/0x10 [ 539.465691][T10355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.465728][T10355] ? __pfx__printk+0x10/0x10 [ 539.465761][T10355] ? __pfx___might_resched+0x10/0x10 [ 539.465788][T10355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.465826][T10355] should_fail_ex+0x414/0x560 [ 539.465872][T10355] should_failslab+0xa8/0x100 [ 539.465900][T10355] __kmalloc_noprof+0xcb/0x7f0 [ 539.465937][T10355] ? tomoyo_encode+0x28b/0x550 [ 539.465985][T10355] tomoyo_encode+0x28b/0x550 [ 539.466031][T10355] tomoyo_realpath_from_path+0x58d/0x5d0 [ 539.466085][T10355] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 539.466119][T10355] tomoyo_path_number_perm+0x1e8/0x5a0 [ 539.466161][T10355] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 539.466202][T10355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.466271][T10355] ? __fget_files+0x2a/0x420 [ 539.466300][T10355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.466329][T10355] ? __fget_files+0x3a0/0x420 [ 539.466351][T10355] ? __fget_files+0x2a/0x420 [ 539.466381][T10355] security_file_ioctl+0xcb/0x2d0 [ 539.466414][T10355] __se_sys_ioctl+0x47/0x170 [ 539.466451][T10355] do_syscall_64+0xfa/0xfa0 [ 539.466484][T10355] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.466517][T10355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.466541][T10355] ? srso_alias_return_thunk+0x5/0xfbef5 [ 539.466569][T10355] ? exc_page_fault+0xab/0x100 [ 539.466605][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.466630][T10355] RIP: 0033:0x7f168458efc9 [ 539.466651][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.466673][T10355] RSP: 002b:00007f1685490038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.466699][T10355] RAX: ffffffffffffffda RBX: 00007f16847e5fa0 RCX: 00007f168458efc9 [ 539.466718][T10355] RDX: 0000200000000300 RSI: 000000008004745a RDI: 0000000000000004 [ 539.466735][T10355] RBP: 00007f1685490090 R08: 0000000000000000 R09: 0000000000000000 [ 539.466776][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.466792][T10355] R13: 00007f16847e6038 R14: 00007f16847e5fa0 R15: 00007ffe34f3a218 [ 539.466834][T10355] [ 539.466890][T10355] ERROR: Out of memory at tomoyo_realpath_from_path. [ 539.727790][ T8002] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 539.740520][ T8002] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 539.783292][ T8002] aqc111 7-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:81:de:c8:5b:7d [ 540.636412][ T8004] usb 7-1: USB disconnect, device number 11 [ 540.648381][ T8004] aqc111 7-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 540.766707][T10373] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1104'. [ 541.285453][ T8004] aqc111 7-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 541.488426][ T8004] aqc111 7-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 541.752334][ T8004] aqc111 7-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 542.831285][T10401] loop6: detected capacity change from 0 to 512 [ 542.867553][T10401] ext4: Unknown parameter 'obj_user' [ 543.479388][T10407] loop1: detected capacity change from 0 to 2048 [ 543.633302][T10407] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 544.439403][T10414] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 544.731237][ T5919] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 545.299182][ T5919] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 545.320513][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.357931][ T5919] usb 6-1: config 0 descriptor?? [ 545.375801][ T5919] cp210x 6-1:0.0: cp210x converter detected [ 545.590970][ T5919] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 545.635430][ T5919] cp210x 6-1:0.0: querying part number failed [ 545.668221][ T5919] usb 6-1: cp210x converter now attached to ttyUSB0 [ 546.014420][ T5919] usb 6-1: USB disconnect, device number 20 [ 546.234821][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 546.267649][ T5919] cp210x 6-1:0.0: device disconnected [ 547.402652][T10455] netlink: 'syz.2.1127': attribute type 2 has an invalid length. [ 547.609785][T10458] tipc: Started in network mode [ 547.615018][T10458] tipc: Node identity aa17addb49a5, cluster identity 4711 [ 547.624116][T10458] tipc: Enabled bearer , priority 0 [ 547.687426][T10458] syzkaller0: entered promiscuous mode [ 547.742201][T10458] syzkaller0: entered allmulticast mode [ 547.860608][T10458] tipc: Resetting bearer [ 548.082949][T10461] kernel read not supported for file /!selinۡluxse6;-aejq > (pid: 10461 comm: syz.5.1128) [ 548.543156][ T30] audit: type=1800 audit(1761894065.034:61): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1128" name=2173656C696EDBA102BFD96CD7CDC075787365EE0ECDCE36BFFA3BB92D61B8EF8D6514BC9E6AA171A2A509988A8F3EBA dev="mqueue" ino=24606 res=0 errno=0 [ 548.599302][T10457] tipc: Resetting bearer [ 548.751545][ T8004] tipc: Node number set to 3820137947 [ 548.764398][T10457] tipc: Disabling bearer [ 548.874148][T10461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.891731][ T5919] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 551.051369][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 552.586231][ T5919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 552.810971][ T5919] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 553.013722][ T5919] usb 2-1: can't read configurations, error -71 [ 553.031766][ T8002] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 553.216614][ T8002] usb 6-1: Using ep0 maxpacket: 16 [ 553.230196][ T8002] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 553.239912][ T8002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.248476][ T8002] usb 6-1: Product: syz [ 553.253098][ T8002] usb 6-1: Manufacturer: syz [ 553.257767][ T8002] usb 6-1: SerialNumber: syz [ 553.272045][ T8002] r8152-cfgselector 6-1: Unknown version 0x0000 [ 553.278901][ T8002] r8152-cfgselector 6-1: config 0 descriptor?? [ 554.033385][T10535] FAULT_INJECTION: forcing a failure. [ 554.033385][T10535] name failslab, interval 1, probability 0, space 0, times 0 [ 554.140738][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1145'. [ 554.223852][T10537] loop8: detected capacity change from 0 to 2048 [ 554.726462][T10537] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 554.736929][T10537] NILFS (loop8): mounting unchecked fs [ 556.455165][T10535] CPU: 1 UID: 0 PID: 10535 Comm: syz.1.1144 Not tainted syzkaller #0 PREEMPT(full) [ 556.455191][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 556.455202][T10535] Call Trace: [ 556.455210][T10535] [ 556.455218][T10535] dump_stack_lvl+0x189/0x250 [ 556.455248][T10535] ? __pfx____ratelimit+0x10/0x10 [ 556.455272][T10535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.455298][T10535] ? __pfx__printk+0x10/0x10 [ 556.455330][T10535] ? __pfx___might_resched+0x10/0x10 [ 556.455350][T10535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.455377][T10535] should_fail_ex+0x414/0x560 [ 556.455410][T10535] should_failslab+0xa8/0x100 [ 556.455431][T10535] kmem_cache_alloc_node_noprof+0x77/0x710 [ 556.455458][T10535] ? __alloc_skb+0x112/0x2d0 [ 556.455485][T10535] ? netlink_autobind+0xdb/0x300 [ 556.455507][T10535] __alloc_skb+0x112/0x2d0 [ 556.455539][T10535] netlink_sendmsg+0x5c6/0xb30 [ 556.455565][T10535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.455584][T10535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.455605][T10535] ? aa_sock_msg_perm+0xf1/0x1d0 [ 556.455633][T10535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.455654][T10535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.455675][T10535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.455693][T10535] __sock_sendmsg+0x21c/0x270 [ 556.455721][T10535] ____sys_sendmsg+0x52d/0x830 [ 556.455746][T10535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.455773][T10535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.455793][T10535] ? import_iovec+0x74/0xa0 [ 556.455821][T10535] ___sys_sendmsg+0x21f/0x2a0 [ 556.455842][T10535] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.455883][T10535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.455930][T10535] ? __fget_files+0x2a/0x420 [ 556.455946][T10535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.455967][T10535] ? __fget_files+0x3a0/0x420 [ 556.455993][T10535] __sys_sendmmsg+0x227/0x430 [ 556.456018][T10535] ? __pfx___sys_sendmmsg+0x10/0x10 [ 556.456045][T10535] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 556.456087][T10535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.456107][T10535] ? ksys_write+0x22a/0x250 [ 556.456136][T10535] ? __pfx_ksys_write+0x10/0x10 [ 556.456166][T10535] __x64_sys_sendmmsg+0xa0/0xc0 [ 556.456188][T10535] do_syscall_64+0xfa/0xfa0 [ 556.456212][T10535] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.456235][T10535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.456253][T10535] ? srso_alias_return_thunk+0x5/0xfbef5 [ 556.456273][T10535] ? exc_page_fault+0xab/0x100 [ 556.456298][T10535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.456316][T10535] RIP: 0033:0x7feb2838efc9 [ 556.456333][T10535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.456348][T10535] RSP: 002b:00007feb2921d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 556.456366][T10535] RAX: ffffffffffffffda RBX: 00007feb285e6090 RCX: 00007feb2838efc9 [ 556.456380][T10535] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 556.456393][T10535] RBP: 00007feb2921d090 R08: 0000000000000000 R09: 0000000000000000 [ 556.456405][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.456416][T10535] R13: 00007feb285e6128 R14: 00007feb285e6090 R15: 00007ffcb582d208 [ 556.456446][T10535] [ 556.843679][T10537] NILFS (loop8): recovery complete [ 556.885793][ T8002] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 556.991949][T10541] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 557.669719][T10555] syz_tun: entered promiscuous mode [ 557.715786][T10555] syz_tun: left promiscuous mode [ 558.003949][T10568] loop4: detected capacity change from 0 to 524287936 [ 558.226587][T10570] loop4: detected capacity change from 0 to 524287936 [ 560.931265][ T8007] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 561.322958][ T8007] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.454681][ T8007] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 561.553003][ T8007] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 561.600255][ T8007] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 561.642143][ T8007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.669584][T10605] loop5: detected capacity change from 0 to 128 [ 561.765275][T10592] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 561.788733][T10605] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 561.791217][ T30] audit: type=1800 audit(1761894078.564:62): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1167" name="file2" dev="loop5" ino=1048651 res=0 errno=0 [ 561.819429][T10605] FAT-fs (loop5): Filesystem has been set read-only [ 561.921778][ T8007] hub 9-1:1.0: bad descriptor, ignoring hub [ 561.938069][ T8007] hub 9-1:1.0: probe with driver hub failed with error -5 [ 561.946385][T10605] syz.5.1167: attempt to access beyond end of device [ 561.946385][T10605] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 561.961813][ T8007] cdc_wdm 9-1:1.0: skipping garbage [ 561.967118][ T8007] cdc_wdm 9-1:1.0: skipping garbage [ 562.059924][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 562.066609][ T8007] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 562.075674][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 562.079532][T10611] loop6: detected capacity change from 0 to 128 [ 562.134193][ T8007] cdc_wdm 9-1:1.0: Unknown control protocol [ 562.267848][T10605] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 562.287716][ T8007] usb 9-1: USB disconnect, device number 7 [ 562.481517][T10605] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 562.509788][T10611] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 562.584972][T10611] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 562.640317][T10608] syz.5.1167: attempt to access beyond end of device [ 562.640317][T10608] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 562.916493][T10608] Buffer I/O error on dev loop5, logical block 2065, async page read [ 562.926453][T10608] syz.5.1167: attempt to access beyond end of device [ 562.926453][T10608] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 562.950518][T10608] Buffer I/O error on dev loop5, logical block 2066, async page read [ 562.973003][ T8007] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 563.495952][T10608] syz.5.1167: attempt to access beyond end of device [ 563.495952][T10608] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 563.511639][T10608] Buffer I/O error on dev loop5, logical block 2067, async page read [ 563.517464][ T6318] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 563.530704][T10608] syz.5.1167: attempt to access beyond end of device [ 563.530704][T10608] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 563.561949][T10608] Buffer I/O error on dev loop5, logical block 2068, async page read [ 563.570487][T10608] syz.5.1167: attempt to access beyond end of device [ 563.570487][T10608] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 563.587007][T10608] Buffer I/O error on dev loop5, logical block 2069, async page read [ 563.595518][T10608] syz.5.1167: attempt to access beyond end of device [ 563.595518][T10608] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 563.632381][T10608] Buffer I/O error on dev loop5, logical block 2070, async page read [ 563.640923][T10608] syz.5.1167: attempt to access beyond end of device [ 563.640923][T10608] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 563.656016][ T8007] usb 9-1: device descriptor read/all, error -71 [ 563.681805][T10608] Buffer I/O error on dev loop5, logical block 2071, async page read [ 563.700315][T10608] syz.5.1167: attempt to access beyond end of device [ 563.700315][T10608] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 563.735649][T10608] Buffer I/O error on dev loop5, logical block 2072, async page read [ 564.732952][ T849] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 564.893659][ T849] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.907461][ T849] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.930337][ T849] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.950292][ T849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.967467][ T849] usb 6-1: Product: syz [ 564.977414][ T849] usb 6-1: Manufacturer: syz [ 564.989267][ T849] usb 6-1: SerialNumber: syz [ 565.247386][T10636] loop5: detected capacity change from 0 to 1024 [ 565.279649][T10636] hfsplus: Bad value for 'type' [ 565.326978][ T849] usb 6-1: 0:2 : does not exist [ 565.346596][ T849] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 565.470262][ T849] usb 6-1: USB disconnect, device number 22 [ 565.917868][ T30] audit: type=1326 audit(1761894082.134:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10638 comm="syz.6.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb100d8efc9 code=0x7fc00000 [ 567.362225][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.368858][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.787348][T10682] overlayfs: failed to clone upperpath [ 568.889455][ T8004] libceph: connect (1)[c::]:6789 error -101 [ 568.977624][ T8004] libceph: mon0 (1)[c::]:6789 connect error [ 569.023750][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1190'. [ 569.060254][T10689] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1190'. [ 569.165533][T10685] ceph: No mds server is up or the cluster is laggy [ 569.481476][ T8004] libceph: connect (1)[c::]:6789 error -101 [ 569.487811][ T8004] libceph: mon0 (1)[c::]:6789 connect error [ 570.161664][ T849] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 570.344909][ T849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 570.399533][ T849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 570.429611][ T849] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 570.474050][ T849] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 570.535424][ T849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.583067][ T849] usb 9-1: Product: syz [ 570.608738][ T849] usb 9-1: Manufacturer: syz [ 570.616854][T10700] loop6: detected capacity change from 0 to 128 [ 570.636454][ T849] usb 9-1: SerialNumber: syz [ 570.647805][ T849] usb 9-1: config 0 descriptor?? [ 570.664818][T10700] EXT4-fs (loop6): Test dummy encryption mode enabled [ 570.736408][T10700] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 570.769657][T10700] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 570.879945][ T849] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 571.060779][ T30] audit: type=1800 audit(1761894087.834:64): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1195" name="file2" dev="loop6" ino=13 res=0 errno=0 [ 571.082168][ T849] usb 9-1: USB disconnect, device number 10 [ 571.082405][T10719] EXT4-fs (loop6): Online defrag not supported for encrypted files [ 571.275048][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1201'. [ 572.035902][ T6318] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.630673][T10735] loop6: detected capacity change from 0 to 1024 [ 572.729098][T10735] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.829118][ T30] audit: type=1800 audit(1761894089.604:65): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1205" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 573.500530][T10750] FAULT_INJECTION: forcing a failure. [ 573.500530][T10750] name failslab, interval 1, probability 0, space 0, times 0 [ 573.581560][T10750] CPU: 1 UID: 0 PID: 10750 Comm: syz.8.1209 Not tainted syzkaller #0 PREEMPT(full) [ 573.581588][T10750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 573.581600][T10750] Call Trace: [ 573.581608][T10750] [ 573.581616][T10750] dump_stack_lvl+0x189/0x250 [ 573.581648][T10750] ? __pfx____ratelimit+0x10/0x10 [ 573.581673][T10750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.581698][T10750] ? __pfx__printk+0x10/0x10 [ 573.581720][T10750] ? __pfx___might_resched+0x10/0x10 [ 573.581740][T10750] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.581766][T10750] should_fail_ex+0x414/0x560 [ 573.581799][T10750] should_failslab+0xa8/0x100 [ 573.581821][T10750] kmem_cache_alloc_noprof+0x74/0x6e0 [ 573.581847][T10750] ? io_submit_one+0x11f/0x1310 [ 573.581874][T10750] io_submit_one+0x11f/0x1310 [ 573.581894][T10750] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.581920][T10750] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.581949][T10750] ? __pfx_io_submit_one+0x10/0x10 [ 573.581971][T10750] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.582001][T10750] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.582025][T10750] ? __might_fault+0xb0/0x130 [ 573.582055][T10750] __se_sys_io_submit+0x185/0x2f0 [ 573.582077][T10750] ? __pfx___se_sys_io_submit+0x10/0x10 [ 573.582094][T10750] ? ksys_write+0x22a/0x250 [ 573.582135][T10750] ? do_syscall_64+0xbe/0xfa0 [ 573.582163][T10750] do_syscall_64+0xfa/0xfa0 [ 573.582186][T10750] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.582210][T10750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.582228][T10750] ? srso_alias_return_thunk+0x5/0xfbef5 [ 573.582248][T10750] ? exc_page_fault+0xab/0x100 [ 573.582274][T10750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.582292][T10750] RIP: 0033:0x7fb63118efc9 [ 573.582312][T10750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.582328][T10750] RSP: 002b:00007fb632081038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 573.582347][T10750] RAX: ffffffffffffffda RBX: 00007fb6313e5fa0 RCX: 00007fb63118efc9 [ 573.582361][T10750] RDX: 0000200000000580 RSI: 0000000000000001 RDI: 00007fb632060000 [ 573.582374][T10750] RBP: 00007fb632081090 R08: 0000000000000000 R09: 0000000000000000 [ 573.582385][T10750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.582397][T10750] R13: 00007fb6313e6038 R14: 00007fb6313e5fa0 R15: 00007ffd70b38ba8 [ 573.582427][T10750] [ 574.228438][T10754] netlink: zone id is out of range [ 574.247624][T10754] netlink: zone id is out of range [ 574.267875][T10754] netlink: zone id is out of range [ 574.291292][T10754] netlink: zone id is out of range [ 574.788122][T10768] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1216'. [ 575.151439][ T8002] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 575.321379][ T8002] usb 6-1: Using ep0 maxpacket: 8 [ 575.351995][ T8002] usb 6-1: config 0 interface 0 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 575.396086][ T8002] usb 6-1: config 0 interface 0 has no altsetting 0 [ 575.426633][ T8002] usb 6-1: New USB device found, idVendor=000e, idProduct=0000, bcdDevice= 0.00 [ 575.474219][ T8002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.502403][ T8002] usb 6-1: config 0 descriptor?? [ 575.525361][ T8002] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 575.627705][ T30] audit: type=1800 audit(1761894092.384:66): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1205" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 575.716213][T10767] loop8: detected capacity change from 0 to 32768 [ 575.773118][T10767] *** Log Is Dirty ! *** [ 575.782213][T10767] lmLogInit: exit(-22) [ 575.786326][T10767] lmLogOpen: exit(-22) [ 575.798255][ T6318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.810056][T10767] jfs_mount_rw failed, return code = -22 [ 575.933485][T10773] loop6: detected capacity change from 0 to 128 [ 575.970457][T10773] EXT4-fs (loop6): Test dummy encryption mode enabled [ 576.081535][T10773] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 576.163335][T10773] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 576.433705][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.444249][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.236280][T10767] loop8: detected capacity change from 0 to 512 [ 578.188738][T10767] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 578.459157][T10767] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 579.687773][T10787] ttynull ttynull: ldisc open failed (-12), clearing slot 0 [ 579.932755][ T8002] usb 6-1: USB disconnect, device number 23 [ 581.295498][ T6318] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 582.583854][T10817] loop6: detected capacity change from 0 to 512 [ 582.591536][T10817] ext4: Unknown parameter 'obj_user' [ 582.672781][T10822] FAULT_INJECTION: forcing a failure. [ 582.672781][T10822] name failslab, interval 1, probability 0, space 0, times 0 [ 582.692198][T10822] CPU: 0 UID: 0 PID: 10822 Comm: syz.1.1228 Not tainted syzkaller #0 PREEMPT(full) [ 582.692244][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 582.692263][T10822] Call Trace: [ 582.692274][T10822] [ 582.692287][T10822] dump_stack_lvl+0x189/0x250 [ 582.692342][T10822] ? __pfx____ratelimit+0x10/0x10 [ 582.692377][T10822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.692412][T10822] ? __pfx__printk+0x10/0x10 [ 582.692447][T10822] ? __pfx___might_resched+0x10/0x10 [ 582.692483][T10822] should_fail_ex+0x414/0x560 [ 582.692527][T10822] should_failslab+0xa8/0x100 [ 582.692557][T10822] __kmalloc_noprof+0xcb/0x7f0 [ 582.692595][T10822] ? tomoyo_encode2+0x27f/0x530 [ 582.692633][T10822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.692669][T10822] tomoyo_encode2+0x27f/0x530 [ 582.692715][T10822] tomoyo_check_unix_address+0x3c3/0x7b0 [ 582.692752][T10822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.692781][T10822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.692817][T10822] ? tomoyo_check_unix_address+0x15a/0x7b0 [ 582.692855][T10822] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 582.692911][T10822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.692949][T10822] tomoyo_socket_connect_permission+0x1b2/0x290 [ 582.693000][T10822] security_socket_connect+0xc8/0x2b0 [ 582.693031][T10822] __sys_connect+0x231/0x440 [ 582.693072][T10822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.693101][T10822] ? do_sys_openat2+0x154/0x1c0 [ 582.693137][T10822] ? __pfx___sys_connect+0x10/0x10 [ 582.693197][T10822] ? __pfx_ksys_write+0x10/0x10 [ 582.693241][T10822] __x64_sys_connect+0x7a/0x90 [ 582.693281][T10822] do_syscall_64+0xfa/0xfa0 [ 582.693316][T10822] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.693351][T10822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.693374][T10822] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.693403][T10822] ? exc_page_fault+0xab/0x100 [ 582.693437][T10822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.693462][T10822] RIP: 0033:0x7feb2838efc9 [ 582.693488][T10822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.693510][T10822] RSP: 002b:00007feb2923e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 582.693539][T10822] RAX: ffffffffffffffda RBX: 00007feb285e5fa0 RCX: 00007feb2838efc9 [ 582.693558][T10822] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000004 [ 582.693576][T10822] RBP: 00007feb2923e090 R08: 0000000000000000 R09: 0000000000000000 [ 582.693592][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.693609][T10822] R13: 00007feb285e6038 R14: 00007feb285e5fa0 R15: 00007ffcb582d208 [ 582.693652][T10822] [ 582.984096][T10820] netlink: 'syz.7.1230': attribute type 23 has an invalid length. [ 583.019229][T10826] loop8: detected capacity change from 0 to 512 [ 583.393645][T10826] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.447379][T10826] ext4 filesystem being mounted at /151/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.473014][T10834] ieee802154 phy0 wpan0: encryption failed: -90 [ 584.223443][ T7193] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 585.262366][ T7193] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 586.285006][ T5837] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 588.031288][T10857] loop6: detected capacity change from 0 to 131072 [ 588.054392][T10857] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0) [ 588.062531][T10857] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 588.073612][T10857] F2FS-fs (loop6): invalid crc value [ 588.169827][T10857] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 588.190109][T10857] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 588.198565][T10857] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 589.781891][T10874] loop6: detected capacity change from 0 to 32768 [ 589.789633][T10874] xfs: Unknown parameter 'nobarrier' [ 590.502295][T10879] loop6: detected capacity change from 0 to 512 [ 590.550911][T10879] ext4: Unknown parameter 'obj_user' [ 590.823001][ T5837] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 590.831979][ T5837] Bluetooth: hci4: Injecting HCI hardware error event [ 590.842776][ T5841] Bluetooth: hci4: hardware error 0x00 [ 591.562021][T10886] loop6: detected capacity change from 0 to 512 [ 591.619407][T10886] ext4: Unknown parameter 'obj_user' [ 592.263639][T10890] loop6: detected capacity change from 0 to 2048 [ 592.272597][T10890] NILFS (loop6): couldn't find nilfs on the device [ 592.790631][T10890] loop6: detected capacity change from 0 to 32768 [ 592.822636][T10890] [ 592.822636][T10890] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 592.822636][T10890] [ 592.922691][T10890] ERROR: (device loop6): diWrite: ixpxd invalid [ 592.922691][T10890] [ 592.955262][ T5841] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 592.958924][T10890] ERROR: (device loop6): txCommit: [ 592.958924][T10890] [ 593.367089][ T7193] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.192249][T10904] loop1: detected capacity change from 0 to 128 [ 594.210913][T10904] EXT4-fs (loop1): Test dummy encryption mode enabled [ 594.260404][T10904] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 594.357709][ T6014] ERROR: (device loop6): diWrite: ixpxd invalid [ 594.357709][ T6014] [ 594.366967][ T6014] ERROR: (device loop6): txCommit: [ 594.366967][ T6014] [ 594.381635][T10904] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 594.392718][ T6014] jfs_write_inode: jfs_commit_inode failed! [ 594.419708][ T6318] [ 594.419708][ T6318] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 594.419708][ T6318] [ 595.170479][ T6318] [ 595.170479][ T6318] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 595.170479][ T6318] [ 595.452386][ T67] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.577632][T10915] FAULT_INJECTION: forcing a failure. [ 595.577632][T10915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.637732][T10915] CPU: 1 UID: 0 PID: 10915 Comm: syz.5.1258 Not tainted syzkaller #0 PREEMPT(full) [ 595.637807][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 595.637824][T10915] Call Trace: [ 595.637837][T10915] [ 595.637848][T10915] dump_stack_lvl+0x189/0x250 [ 595.637912][T10915] ? __pfx____ratelimit+0x10/0x10 [ 595.637945][T10915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.637981][T10915] ? __pfx__printk+0x10/0x10 [ 595.638023][T10915] should_fail_ex+0x414/0x560 [ 595.638071][T10915] _copy_to_user+0x31/0xb0 [ 595.638108][T10915] simple_read_from_buffer+0xe1/0x170 [ 595.638150][T10915] proc_fail_nth_read+0x1b3/0x220 [ 595.638189][T10915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 595.638224][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.638254][T10915] ? rw_verify_area+0x2a6/0x4d0 [ 595.638290][T10915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 595.638330][T10915] vfs_read+0x200/0xa30 [ 595.638365][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.638400][T10915] ? __pfx_udp_lib_getsockopt+0x10/0x10 [ 595.638431][T10915] ? __pfx_vfs_read+0x10/0x10 [ 595.638466][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.638494][T10915] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 595.638534][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.638562][T10915] ? do_sock_getsockopt+0x372/0x450 [ 595.638591][T10915] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 595.638618][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.638652][T10915] ksys_read+0x145/0x250 [ 595.638691][T10915] ? __pfx_ksys_read+0x10/0x10 [ 595.638731][T10915] ? do_syscall_64+0xbe/0xfa0 [ 595.638788][T10915] do_syscall_64+0xfa/0xfa0 [ 595.638819][T10915] ? lockdep_hardirqs_on+0x9c/0x150 [ 595.638855][T10915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.638903][T10915] ? srso_alias_return_thunk+0x5/0xfbef5 [ 595.638932][T10915] ? exc_page_fault+0xab/0x100 [ 595.638966][T10915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.638990][T10915] RIP: 0033:0x7f168458d9dc [ 595.639013][T10915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 595.639034][T10915] RSP: 002b:00007f1685490030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 595.639062][T10915] RAX: ffffffffffffffda RBX: 00007f16847e5fa0 RCX: 00007f168458d9dc [ 595.639081][T10915] RDX: 000000000000000f RSI: 00007f16854900a0 RDI: 0000000000000004 [ 595.639097][T10915] RBP: 00007f1685490090 R08: 0000000000000000 R09: 0000000000000000 [ 595.639113][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.639128][T10915] R13: 00007f16847e6038 R14: 00007f16847e5fa0 R15: 00007ffe34f3a218 [ 595.639169][T10915] [ 595.904323][ C1] hrtimer: interrupt took 263188250 ns [ 595.920440][T10912] EXT4-fs (loop1): Online defrag not supported for encrypted files [ 596.012617][ T30] audit: type=1800 audit(1761894112.694:67): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1256" name="file2" dev="loop1" ino=13 res=0 errno=0 [ 596.047156][ T67] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.173845][ T5827] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 596.512266][T10928] loop5: detected capacity change from 0 to 2048 [ 596.558564][T10928] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 596.606601][ T67] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.629713][T10928] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 597.484358][ T30] audit: type=1800 audit(1761894114.254:68): pid=10936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1264" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 597.592074][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1254'. [ 597.602325][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1254'. [ 598.213238][T10943] loop1: detected capacity change from 0 to 8 [ 598.243102][ T67] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.353952][T10943] syz.1.1266 uses old SIOCAX25GETINFO [ 598.419957][T10948] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 598.483760][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 598.499260][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 598.510474][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 598.519688][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 598.528448][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.606937][ T7992] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 599.493869][ T7992] usb 2-1: Using ep0 maxpacket: 16 [ 599.618751][ T7992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 48383, setting to 1024 [ 599.692545][ T7992] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 600.012844][ T7992] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 600.023303][ T7992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.033261][ T7992] usb 2-1: Product: syz [ 600.037521][ T7992] usb 2-1: Manufacturer: syz [ 600.046098][ T7992] usb 2-1: SerialNumber: syz [ 600.054021][ T7992] usb 2-1: config 0 descriptor?? [ 600.061728][T10943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 600.090431][T10965] Malformed UNC in devname [ 600.090431][T10965] [ 600.098141][T10965] CIFS: VFS: Malformed UNC in devname [ 600.124381][T10965] qrtr: Invalid version 0 [ 600.125034][ T7992] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 600.260647][T10965] loop5: detected capacity change from 0 to 2048 [ 600.270905][T10972] loop6: detected capacity change from 0 to 64 [ 600.292389][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 600.298837][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 600.325681][ T7992] usb 2-1: USB disconnect, device number 13 [ 600.335005][T10972] hfs: Unknown parameter 'BA`et' [ 600.349297][T10965] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.369060][ T7992] mcba_usb 2-1:0.0 can0: device disconnected [ 600.683866][ T5837] Bluetooth: hci0: command tx timeout [ 601.322169][ T9] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 601.346232][ T67] bridge_slave_1: left allmulticast mode [ 601.356788][ T67] bridge_slave_1: left promiscuous mode [ 601.366040][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.375825][ T67] bridge_slave_0: left allmulticast mode [ 601.381741][ T67] bridge_slave_0: left promiscuous mode [ 601.387992][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.554256][ T9] usb 6-1: config index 0 descriptor too short (expected 539, got 27) [ 601.568340][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 48, changing to 4 [ 601.632416][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1023 [ 601.661818][ T8004] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 601.755037][ T9] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 601.815339][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.885923][ T9] usb 6-1: Product: syz [ 601.941677][ T9] usb 6-1: Manufacturer: syz [ 601.987968][ T9] usb 6-1: SerialNumber: syz [ 601.992435][ T8004] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 602.002917][ T8004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.045057][ T8004] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 602.053956][ T9] usb 6-1: config 0 descriptor?? [ 602.055925][ T8004] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 602.080384][ T8004] usb 2-1: Manufacturer: syz [ 602.108050][ T9] hub 6-1:0.0: bad descriptor, ignoring hub [ 602.181705][ T9] hub 6-1:0.0: probe with driver hub failed with error -5 [ 602.194022][ T8004] usb 2-1: config 0 descriptor?? [ 602.205151][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 602.257196][ T9] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 602.266534][ T30] audit: type=1326 audit(1761894119.024:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 602.266612][ T30] audit: type=1326 audit(1761894119.034:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 602.266665][ T30] audit: type=1326 audit(1761894119.034:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 602.266720][ T30] audit: type=1326 audit(1761894119.034:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 602.364577][ T8004] rc_core: IR keymap rc-hauppauge not found [ 602.399380][ T8004] Registered IR keymap rc-empty [ 602.416655][ T9] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 602.419397][ T8004] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 602.460071][ T8004] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 602.499182][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 602.535310][ T5919] Process accounting resumed [ 602.691998][ T30] audit: type=1326 audit(1761894119.474:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 602.714993][ T5837] Bluetooth: hci0: command tx timeout [ 602.720843][ T30] audit: type=1326 audit(1761894119.474:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 602.723485][ T67] dvmrp0 (unregistering): left allmulticast mode [ 602.771015][ T30] audit: type=1326 audit(1761894119.544:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 602.794058][ T30] audit: type=1326 audit(1761894119.544:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 602.816803][ T30] audit: type=1326 audit(1761894119.544:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 602.840377][ T30] audit: type=1326 audit(1761894119.544:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.7.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 603.067403][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.082291][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.096513][ T67] bond0 (unregistering): Released all slaves [ 603.103280][ T8004] usb 6-1: USB disconnect, device number 24 [ 603.304964][T10987] netlink: 'syz.7.1278': attribute type 2 has an invalid length. [ 603.448145][T10991] macvtap1: entered promiscuous mode [ 603.723869][T10991] vlan0: entered promiscuous mode [ 603.771879][ T8004] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 603.841560][T10991] macvtap1: entered allmulticast mode [ 603.861839][T10991] vlan0: entered allmulticast mode [ 603.931756][T10991] veth0_vlan: entered allmulticast mode [ 604.077919][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 604.087070][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 604.112493][ T8004] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 604.202845][ T8004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 604.261356][ T8004] usb 6-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 604.284749][T10993] macvtap2: entered promiscuous mode [ 604.314419][ T8004] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.323715][T10993] macvtap2: entered allmulticast mode [ 604.360083][ T8004] usb 6-1: Product: syz [ 604.381611][ T8004] usb 6-1: Manufacturer: syz [ 604.409338][ T8004] usb 6-1: SerialNumber: syz [ 604.462297][ T8004] usb 6-1: config 0 descriptor?? [ 604.496506][ T67] tipc: Left network mode [ 604.512812][T10952] chnl_net:caif_netlink_parms(): no params data found [ 604.832269][ T5837] Bluetooth: hci0: command tx timeout [ 604.862368][ T5919] usb 2-1: USB disconnect, device number 14 [ 604.869273][T11001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.522839][T11026] x_tables: duplicate underflow at hook 2 [ 606.599918][ T8004] powermate: unknown product id 0240 [ 606.641257][ T8004] powermate: Expected payload of 3--6 bytes, found 7 bytes! [ 606.667575][ T8004] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input18 [ 606.707105][ C1] powermate: config urb returned -71 [ 606.713013][ C1] powermate: config urb returned -71 [ 606.718626][ C1] powermate: config urb returned -71 [ 606.724349][ C1] powermate: config urb returned -71 [ 606.738580][ T8004] usb 6-1: USB disconnect, device number 25 [ 606.744855][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 606.861448][ T5837] Bluetooth: hci0: command tx timeout [ 606.900912][T11042] loop1: detected capacity change from 0 to 256 [ 606.908229][T11040] loop5: detected capacity change from 0 to 1024 [ 607.040184][T11040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.989637][T11040] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.743851][ T67] hsr_slave_0: left promiscuous mode [ 608.757621][ T67] hsr_slave_1: left promiscuous mode [ 608.774795][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.832760][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.476304][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1296'. [ 609.487127][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1296'. [ 610.575590][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.583328][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.706426][ T67] veth1_macvtap: left promiscuous mode [ 610.723920][ T67] veth0_macvtap: left promiscuous mode [ 610.745285][ T67] veth1_vlan: left promiscuous mode [ 611.518108][T11066] loop6: detected capacity change from 0 to 65536 [ 611.596432][T11066] XFS (loop6): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 611.679709][T11066] XFS (loop6): Ending clean mount [ 611.792854][T11081] XFS (loop6): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 [ 611.824984][T11081] XFS (loop6): Unmount and run xfs_repair [ 611.832799][T11081] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 611.885866][T11081] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be XAFL.........]F. [ 611.922643][T11081] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00 ................ [ 611.981624][T11081] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06 5.\%............ [ 611.994168][T11081] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff ................ [ 612.026431][T11081] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 612.035585][T11081] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 612.081913][T11081] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 612.137195][T11080] loop1: detected capacity change from 0 to 4096 [ 612.234458][T11081] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 612.277254][T11081] XFS (loop6): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74 [ 612.289285][T11090] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 612.290276][T11080] NILFS (loop1): corrupt root inode [ 612.301442][T11081] XFS (loop6): page discard on page ffffea000045eb00, inode 0x47, pos 21504. [ 613.064374][ T67] team0 (unregistering): Port device team_slave_1 removed [ 613.142449][ T67] team0 (unregistering): Port device team_slave_0 removed [ 613.687667][T10952] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.696378][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.706780][T10952] bridge_slave_0: entered allmulticast mode [ 613.714874][T10952] bridge_slave_0: entered promiscuous mode [ 613.724073][T10952] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.731812][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.739361][T10952] bridge_slave_1: entered allmulticast mode [ 613.775025][T10952] bridge_slave_1: entered promiscuous mode [ 613.806025][T11064] ipvlan2: entered promiscuous mode [ 613.903053][ T6318] XFS (loop6): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 613.939516][ T6318] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair. [ 613.964363][T11092] loop5: detected capacity change from 0 to 1024 [ 614.078806][T10952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.133376][T11092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.154747][T10952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.339109][T10952] team0: Port device team_slave_0 added [ 614.364899][T10952] team0: Port device team_slave_1 added [ 614.466779][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.549155][T10952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.581278][T10952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.673053][T10952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.705602][T10952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.731609][T10952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.797620][T10952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.972071][T11116] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 614.999198][T11116] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 615.159861][T10952] hsr_slave_0: entered promiscuous mode [ 615.258587][T10952] hsr_slave_1: entered promiscuous mode [ 616.811956][T10952] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 616.855553][T10952] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 616.906385][T10952] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 616.937628][T10952] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 617.241641][ T7992] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 617.385398][T10952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.434169][ T7992] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 617.456358][T10952] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.471877][ T7992] usb 6-1: config 0 has no interface number 0 [ 617.496984][ T7992] usb 6-1: config 0 interface 49 has no altsetting 0 [ 617.521802][ T7992] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10b2, bcdDevice=c7.1b [ 617.527498][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.538275][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.603975][ T7135] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.611287][ T7135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.631875][ T7992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.662584][ T7992] usb 6-1: config 0 descriptor?? [ 617.841660][T11159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1323'. [ 617.861028][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1323'. [ 617.911549][T11159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1323'. [ 617.961961][T11159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1323'. [ 618.250040][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 618.250063][ T30] audit: type=1326 audit(1761894135.024:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 618.314657][ T7992] usb 6-1: string descriptor 0 read error: -71 [ 618.366149][ T7992] usb 6-1: USB disconnect, device number 26 [ 618.372293][ T30] audit: type=1326 audit(1761894135.024:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 618.372379][ T30] audit: type=1326 audit(1761894135.064:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 618.372431][ T30] audit: type=1326 audit(1761894364.069:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 618.372485][ T30] audit: type=1326 audit(1761894364.069:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 618.372536][ T30] audit: type=1326 audit(1761894364.079:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 618.372586][ T30] audit: type=1326 audit(1761894364.079:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 618.372635][ T30] audit: type=1326 audit(1761894364.079:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.7.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb938efc9 code=0x7ffc0000 [ 618.962351][T10952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.214740][T10952] veth0_vlan: entered promiscuous mode [ 620.253820][T10952] veth1_vlan: entered promiscuous mode [ 620.713027][T10952] veth0_macvtap: entered promiscuous mode [ 620.838137][T10952] veth1_macvtap: entered promiscuous mode [ 621.045002][T10952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.145599][T10952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.248643][ T6014] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.405766][ T6014] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.536783][ T6014] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.585798][ T6014] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.166168][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.230175][ T30] audit: type=1326 audit(1761894367.989:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb100d8efc9 code=0x7ffc0000 [ 622.252378][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.411640][ T30] audit: type=1326 audit(1761894367.989:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11211 comm="syz.6.1337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb100d8efc9 code=0x7ffc0000 [ 622.544717][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.567302][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.219489][T11225] loop9: detected capacity change from 0 to 128 [ 623.373469][T11225] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 623.416355][T11225] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 623.984444][T10952] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 625.311028][T11244] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1341'. [ 625.824286][T11249] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 625.831294][T11249] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 625.983796][T11249] vhci_hcd vhci_hcd.0: Device attached [ 626.103359][T11249] binder: Binderfs stats mode cannot be changed during a remount [ 626.341498][ T7992] usb 52-1: SetAddress Request (2) to port 0 [ 626.369182][ T7992] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 626.421292][ T8007] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 626.470045][T11250] vhci_hcd: connection reset by peer [ 626.552134][ T36] vhci_hcd: stop threads [ 626.557118][ T36] vhci_hcd: release socket [ 626.681018][T11261] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 626.687719][T11261] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 626.695958][ T36] vhci_hcd: disconnect device [ 626.713672][ T8007] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 626.774254][T11261] vhci_hcd vhci_hcd.0: Device attached [ 626.920412][T11261] binder: Binderfs stats mode cannot be changed during a remount [ 626.963931][ T8007] usb 7-1: config 0 interface 0 has no altsetting 0 [ 626.991833][ T8007] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 627.011682][ T8007] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 627.105905][ T8002] usb 44-1: SetAddress Request (2) to port 0 [ 627.112997][T11262] vhci_hcd: connection closed [ 627.114613][ T8002] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 627.114971][ T36] vhci_hcd: stop threads [ 627.142352][ T8007] usb 7-1: Product: syz [ 627.178826][ T8007] usb 7-1: Manufacturer: syz [ 627.179537][ T36] vhci_hcd: release socket [ 627.201218][ T36] vhci_hcd: disconnect device [ 627.312714][ T8007] usb 7-1: SerialNumber: syz [ 627.611737][ T8007] usb 7-1: config 0 descriptor?? [ 627.729708][T11268] 9pnet_virtio: no channels available for device syz [ 627.808959][T11268] SQUASHFS error: Failed to read block 0x0: -5 [ 628.488469][ T8007] usb 7-1: selecting invalid altsetting 0 [ 628.790412][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.797523][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.912008][ T8007] usb 7-1: USB disconnect, device number 12 [ 630.643759][T11281] netlink: 'syz.7.1355': attribute type 13 has an invalid length. [ 631.751962][ T7992] usb 52-1: device descriptor read/8, error -110 [ 632.221938][ T8002] usb 44-1: device descriptor read/8, error -110 [ 632.906804][ T8002] usb usb44-port1: attempt power cycle [ 633.039953][T11289] Invalid logical block size (2050) [ 633.413149][ T7992] usb usb52-port1: attempt power cycle [ 633.597300][ T8002] usb usb44-port1: unable to enumerate USB device [ 634.162976][ T7992] usb usb52-port1: unable to enumerate USB device [ 634.512893][T11314] fuse: Bad value for 'fd' [ 634.648775][T11316] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1364'. [ 635.483290][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1368'. [ 637.524889][T11345] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 637.531454][T11345] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 637.544757][T11345] vhci_hcd vhci_hcd.0: Device attached [ 637.696943][T11346] vhci_hcd: connection closed [ 637.700657][ T49] vhci_hcd: stop threads [ 637.714555][ T49] vhci_hcd: release socket [ 637.781030][ T49] vhci_hcd: disconnect device [ 638.127178][T11357] ptrace attach of "./syz-executor exec"[6466] was attempted by " \x0cH;'Sde/Ȑ|zPиW\x0bPt5QI0kp;t>?7~՞8)>\x0a.Fv\x5c0CP{\x07ԭ4OT)%DkfCkF 籥;m\x0cv\x0cTʪz5m֢vī'c^تg_\x0bƍ8)c,(qeB㑻SPt4o IHwL#@mUpE^agh~d_9\x07r|GJj+&ҽk(\x07rnE4(#ë\x0b YβB\x0aЦ&R`?L1tիw.M=3|Gsmg4`|\x22{б춋1[{ȯw/B_g6-qyk*o\x0d\x5cc8\x5 [ 638.771294][ T8002] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 638.931254][ T8002] usb 10-1: Using ep0 maxpacket: 16 [ 638.966242][ T8002] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 639.017362][ T8002] usb 10-1: can't read configurations, error -61 [ 639.197802][ T8002] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 639.421230][ T8002] usb 10-1: Using ep0 maxpacket: 16 [ 639.429745][ T8002] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 639.452381][ T8002] usb 10-1: can't read configurations, error -61 [ 639.472942][ T8002] usb usb10-port1: attempt power cycle [ 639.831259][ T8002] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 639.859874][T11369] Bluetooth: MGMT ver 1.23 [ 639.870301][T11369] program syz.5.1382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 639.884904][ T8002] usb 10-1: Using ep0 maxpacket: 16 [ 639.918093][ T8002] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 639.937038][ T8002] usb 10-1: can't read configurations, error -61 [ 640.118856][ T8002] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 640.191941][ T8002] usb 10-1: Using ep0 maxpacket: 16 [ 640.199817][ T8002] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 640.208052][ T8002] usb 10-1: can't read configurations, error -61 [ 640.240439][ T8002] usb usb10-port1: unable to enumerate USB device [ 640.454349][T11378] tipc: Started in network mode [ 640.459446][T11378] tipc: Node identity ac141441, cluster identity 4711 [ 640.478666][T11378] tipc: Enabled bearer , priority 10 [ 640.661422][T11385] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1388'. [ 640.677725][T11385] bridge0: port 3(team0) entered blocking state [ 640.688686][T11385] bridge0: port 3(team0) entered disabled state [ 640.715135][T11385] team0: entered allmulticast mode [ 640.741365][T11385] team_slave_0: entered allmulticast mode [ 640.788066][T11385] team_slave_1: entered allmulticast mode [ 640.817790][T11385] team0: entered promiscuous mode [ 640.852074][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1388'. [ 640.881874][T11385] team_slave_0: entered promiscuous mode [ 640.935597][T11385] team_slave_1: entered promiscuous mode [ 640.997995][T11385] bridge0: port 3(team0) entered blocking state [ 641.005225][T11385] bridge0: port 3(team0) entered forwarding state [ 641.093693][T11388] team0: left allmulticast mode [ 641.120133][T11388] team_slave_0: left allmulticast mode [ 641.181376][T11388] team_slave_1: left allmulticast mode [ 641.187015][T11388] team0: left promiscuous mode [ 641.192326][T11388] team_slave_0: left promiscuous mode [ 641.199277][T11388] team_slave_1: left promiscuous mode [ 641.270227][T11388] bridge0: port 3(team0) entered disabled state [ 641.391656][T11388] bridge_slave_1: left allmulticast mode [ 641.421633][T11388] bridge_slave_1: left promiscuous mode [ 641.427642][T11388] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.450203][T11388] bridge_slave_0: left allmulticast mode [ 641.456420][T11388] bridge_slave_0: left promiscuous mode [ 641.462587][T11388] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.502087][ T7992] tipc: Node number set to 2886997057 [ 642.051500][ T5837] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 645.016157][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 645.016189][ T30] audit: type=1400 audit(1761894388.679:139): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=11415 comm="syz.5.1399" [ 646.428010][T11437] syzkaller0: entered promiscuous mode [ 646.459992][T11437] syzkaller0: entered allmulticast mode [ 646.686525][T11452] ip6_vti0 speed is unknown, defaulting to 1000 [ 647.043659][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 647.055085][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 647.065603][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 647.078359][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 647.088209][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 647.227387][T11278] Set syz1 is full, maxelem 65536 reached [ 648.244885][T11472] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 648.251479][T11472] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 648.269499][T11472] vhci_hcd vhci_hcd.0: Device attached [ 649.189694][ T8007] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 649.203641][ T5841] Bluetooth: hci4: command tx timeout [ 649.210513][T11473] vhci_hcd: connection closed [ 649.351276][ T49] vhci_hcd: stop threads [ 649.427654][ T49] vhci_hcd: release socket [ 649.497244][ T49] vhci_hcd: disconnect device [ 651.981220][ T5841] Bluetooth: hci4: command tx timeout [ 653.549099][T11475] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 653.601912][T11452] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.611006][T11452] ip6_vti0 speed is unknown, defaulting to 1000 [ 655.034996][ T5841] Bluetooth: hci4: command tx timeout [ 656.011681][ T8007] vhci_hcd: vhci_device speed not set [ 656.028950][T11497] netlink: 'syz.6.1417': attribute type 12 has an invalid length. [ 656.813196][T11455] chnl_net:caif_netlink_parms(): no params data found [ 657.101539][T11452] infiniband syz2: set active [ 657.106518][T11452] infiniband syz2: added ip6_vti0 [ 657.119680][ T5841] Bluetooth: hci4: command tx timeout [ 657.228489][T11452] syz2: rxe_create_cq: returned err = -12 [ 657.235106][T11452] infiniband syz2: Couldn't create ib_mad CQ [ 657.275281][T11452] infiniband syz2: Couldn't open port 1 [ 657.287356][ T8007] ip6_vti0 speed is unknown, defaulting to 1000 [ 657.580921][T11452] RDS/IB: syz2: added [ 657.585958][T11452] smc: adding ib device syz2 with port count 1 [ 657.593165][T11452] smc: ib device syz2 port 1 has no pnetid [ 657.632072][ T8007] ip6_vti0 speed is unknown, defaulting to 1000 [ 657.640859][T11455] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.665732][T11455] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.698273][T11455] bridge_slave_0: entered allmulticast mode [ 657.724949][T11455] bridge_slave_0: entered promiscuous mode [ 657.753789][T11455] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.767477][T11455] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.775723][T11455] bridge_slave_1: entered allmulticast mode [ 657.800010][T11455] bridge_slave_1: entered promiscuous mode [ 657.819634][T11452] ip6_vti0 speed is unknown, defaulting to 1000 [ 658.179010][T11455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.257064][T11455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.565948][T11455] team0: Port device team_slave_0 added [ 658.599284][T11455] team0: Port device team_slave_1 added [ 660.080057][T11573] 9pnet_virtio: no channels available for device syz [ 660.125153][T11573] SQUASHFS error: Failed to read block 0x0: -5 [ 660.802163][T11455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.809234][T11452] ip6_vti0 speed is unknown, defaulting to 1000 [ 660.809256][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.938688][T11455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.977481][T11455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.995256][T11455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.135065][T11455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.517919][T11455] hsr_slave_0: entered promiscuous mode [ 662.543824][T11455] hsr_slave_1: entered promiscuous mode [ 662.550383][T11455] debugfs: 'hsr0' already exists in 'hsr' [ 662.601206][T11455] Cannot create hsr debugfs directory [ 662.608205][T11452] ip6_vti0 speed is unknown, defaulting to 1000 [ 663.531246][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 663.796648][ T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 663.831202][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 663.849929][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 663.943591][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 663.961263][ T9] usb 6-1: Product: syz [ 663.971583][ T9] usb 6-1: Manufacturer: syz [ 663.986830][ T9] usb 6-1: SerialNumber: syz [ 664.018127][ T9] usb 6-1: config 0 descriptor?? [ 664.055090][ T9] usb 6-1: selecting invalid altsetting 0 [ 664.261440][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 664.270780][ T9] usb 6-1: USB disconnect, device number 27 [ 664.283200][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 664.301369][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 664.316287][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 664.336625][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 665.159032][T11614] ip6_vti0 speed is unknown, defaulting to 1000 [ 666.461723][ T5837] Bluetooth: hci6: command tx timeout [ 666.696828][T11452] ip6_vti0 speed is unknown, defaulting to 1000 [ 666.806438][T11638] 9pnet_virtio: no channels available for device syz [ 668.549226][ T5837] Bluetooth: hci6: command tx timeout [ 668.801407][ T8004] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 668.987309][T11614] chnl_net:caif_netlink_parms(): no params data found [ 669.013161][ T8004] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 669.047999][ T8004] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 669.082669][ T8004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.146399][T11455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 669.193134][T11455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 669.500336][T11452] ip6_vti0 speed is unknown, defaulting to 1000 [ 669.558782][T11455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 669.614028][T11455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 670.496847][T11614] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.542386][T11614] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.549751][T11614] bridge_slave_0: entered allmulticast mode [ 670.627270][ T5837] Bluetooth: hci6: command tx timeout [ 670.921535][T11686] 9pnet_virtio: no channels available for device syz [ 671.473190][T11614] bridge_slave_0: entered promiscuous mode [ 671.509298][T11614] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.550900][T11614] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.579142][T11614] bridge_slave_1: entered allmulticast mode [ 671.620346][T11614] bridge_slave_1: entered promiscuous mode [ 671.643008][ T8007] usb 2-1: USB disconnect, device number 15 [ 671.806332][T11686] bridge1: entered promiscuous mode [ 671.839446][T11452] ip6_vti0 speed is unknown, defaulting to 1000 [ 672.705480][ T5837] Bluetooth: hci6: command tx timeout [ 674.328272][T11614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.354513][T11455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.412943][T11704] vxcan1: entered allmulticast mode [ 674.426404][T11614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.974983][T11721] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 674.981736][T11721] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 675.451956][T11721] vhci_hcd vhci_hcd.0: Device attached [ 675.492407][T11707] binder: Binderfs stats mode cannot be changed during a remount [ 675.698787][T11722] vhci_hcd: connection closed [ 675.721858][ T49] vhci_hcd: stop threads [ 675.731035][ T49] vhci_hcd: release socket [ 675.751447][ T49] vhci_hcd: disconnect device [ 675.774424][T11716] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 675.954996][T11730] tmpfs: Unknown parameter 'usrquota_inode' [ 676.903667][T11614] team0: Port device team_slave_0 added [ 676.956878][T11614] team0: Port device team_slave_1 added [ 677.056042][T11452] ip6_vti0 speed is unknown, defaulting to 1000 [ 677.432931][T11455] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.478927][T11614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.521810][T11614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.641566][T11614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.694709][T11614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.739489][T11614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.884464][T11614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.053049][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.060207][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.169373][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.176566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.779437][T11614] hsr_slave_0: entered promiscuous mode [ 679.786566][T11614] hsr_slave_1: entered promiscuous mode [ 679.808868][T11614] debugfs: 'hsr0' already exists in 'hsr' [ 679.834234][T11614] Cannot create hsr debugfs directory [ 679.924173][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1465'. [ 680.204447][ T8004] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 680.615413][ T8004] usb 2-1: Using ep0 maxpacket: 8 [ 680.623381][ T8004] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 680.641225][ T8004] usb 2-1: config 179 has no interface number 0 [ 680.647615][ T8004] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 680.681240][ T8004] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 680.723137][ T8004] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 680.757547][T11776] 9pnet_virtio: no channels available for device syz [ 681.015982][ T8004] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 681.286458][ T8004] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 681.359949][ T8004] usb 2-1: config 179 interface 65 has no altsetting 0 [ 681.415666][ T8004] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 681.502511][ T8004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.771939][ T8004] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input19 [ 682.819733][ T5178] input input19: unable to receive magic message: -71 [ 682.985366][ T8004] usb 2-1: USB disconnect, device number 16 [ 682.985434][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 683.012328][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 683.517353][T11455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.622216][T11796] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 683.672883][T11796] comedi comedi3: comedi_config --init_data is deprecated [ 684.316383][T11814] loop6: detected capacity change from 0 to 512 [ 684.358168][T11814] ext4: Unknown parameter 'obj_user' [ 685.384768][T11831] loop5: detected capacity change from 0 to 1024 [ 685.404711][T11831] hfsplus: Unknown parameter '{ [ 685.404711][T11831] OB诗r4|K!BZ"Ek(a3.<8' [ 685.659755][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.703275][ T5919] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 685.752599][T11838] 9pnet_virtio: no channels available for device syz [ 686.559576][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.577308][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 686.615526][ T5919] usb 6-1: unable to get BOS descriptor or descriptor too short [ 686.637089][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 686.660888][ T5919] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.714398][ T5919] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 686.773318][ T5919] usb 6-1: config 1 has no interface number 1 [ 686.801783][ T5919] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.821494][T11455] veth0_vlan: entered promiscuous mode [ 686.847543][ T5919] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 686.895099][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.911011][ T5919] usb 6-1: Product: syz [ 686.922265][ T5919] usb 6-1: Manufacturer: syz [ 686.929786][ T5919] usb 6-1: SerialNumber: syz [ 686.957328][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.148050][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.173969][ T5919] usb 6-1: 2:1 : invalid UAC_AS_GENERAL desc [ 687.267291][ T5919] usb 6-1: USB disconnect, device number 28 [ 687.289466][T11455] veth1_vlan: entered promiscuous mode [ 688.676129][T11860] bridge0: port 3(gretap0) entered blocking state [ 688.683562][T11860] bridge0: port 3(gretap0) entered disabled state [ 688.690257][T11860] gretap0: entered allmulticast mode [ 688.697069][T11860] gretap0: entered promiscuous mode [ 688.702808][T11860] bridge0: port 3(gretap0) entered blocking state [ 688.709354][T11860] bridge0: port 3(gretap0) entered forwarding state [ 689.654668][T11614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 689.695978][T11614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 689.712389][T11614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 689.825618][T11863] bridge1: entered promiscuous mode [ 690.252196][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.267313][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.377361][T11614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 692.012755][T11455] veth0_macvtap: entered promiscuous mode [ 692.025658][T11455] veth1_macvtap: entered promiscuous mode [ 692.868611][T11455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.883518][T11455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.532767][ T6014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.542069][ T6014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.781350][T11902] 9pnet_virtio: no channels available for device syz [ 694.432180][T11903] 9pnet_virtio: no channels available for device syz [ 695.081332][ T6033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.090909][ T6033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.586783][T11920] loop6: detected capacity change from 0 to 4096 [ 696.601307][T11920] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 696.714264][ T6567] smc: removing ib device syz2 [ 697.803670][T11940] 9pnet_virtio: no channels available for device syz [ 697.936938][T11939] loop6: detected capacity change from 0 to 512 [ 697.945122][T11939] ext4: Unknown parameter 'obj_user' [ 698.047852][T11938] SQUASHFS error: Failed to read block 0x0: -5 [ 698.970433][T11953] 9pnet_virtio: no channels available for device syz [ 699.699415][T11948] loop6: detected capacity change from 0 to 1024 [ 699.723633][T11948] EXT4-fs: Ignoring removed orlov option [ 699.729339][T11948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 699.818532][T11948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.851104][T11955] loop1: detected capacity change from 0 to 256 [ 699.896082][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.915644][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.961077][ T12] bond0 (unregistering): Released all slaves [ 700.037091][ T8001] kernel write not supported for file /amidi2 (pid: 8001 comm: kworker/1:10) [ 700.366262][T11885] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.496741][T11923] bridge0: port 3(gretap0) entered blocking state [ 700.497017][ T10] ip6_vti0 speed is unknown, defaulting to 1000 [ 700.505236][T11923] bridge0: port 3(gretap0) entered disabled state [ 700.517449][T11923] gretap0: entered allmulticast mode [ 700.524741][T11923] gretap0: entered promiscuous mode [ 700.534508][T11923] bridge0: port 3(gretap0) entered blocking state [ 700.541169][T11923] bridge0: port 3(gretap0) entered forwarding state [ 700.686353][ T10] syz2: Port: 1 Link DOWN [ 700.737337][ T6318] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.098039][T11885] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.196407][T11955] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1504'. [ 701.278064][T11955] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1504'. [ 702.943167][T11885] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.361467][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.397095][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.633380][T11885] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.097769][T11614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.250921][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1511'. [ 704.260336][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1511'. [ 704.762418][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.769863][T11614] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.801338][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.838587][ T6567] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.845781][ T6567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.127008][ T6567] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.134218][ T6567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.383178][T11614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 705.502664][T12001] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 705.509225][T12001] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 705.928121][T12013] 9pnet_virtio: no channels available for device syz [ 706.733378][T12001] vhci_hcd vhci_hcd.0: Device attached [ 706.796239][T12001] binder: Binderfs stats mode cannot be changed during a remount [ 707.753625][T12025] 9pnet_virtio: no channels available for device syz [ 707.914536][T12025] SQUASHFS error: Failed to read block 0x0: -5 [ 707.938185][ T8004] usb 52-1: SetAddress Request (6) to port 0 [ 708.351358][ T8004] usb 52-1: new SuperSpeed USB device number 6 using vhci_hcd [ 708.922887][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1518'. [ 708.933334][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1518'. [ 709.591080][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 709.609628][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 709.631539][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 709.644027][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 709.652009][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 709.876313][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.921317][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.954485][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.979643][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.378197][T12064] loop1: detected capacity change from 0 to 512 [ 710.426873][T12064] ext4: Unknown parameter 'obj_user' [ 710.629383][ T12] vlan0: left allmulticast mode [ 710.679242][ T12] veth0_vlan: left allmulticast mode [ 710.690909][T12066] FAULT_INJECTION: forcing a failure. [ 710.690909][T12066] name failslab, interval 1, probability 0, space 0, times 0 [ 710.747284][ T12] vlan0: left promiscuous mode [ 710.764171][T12066] CPU: 1 UID: 0 PID: 12066 Comm: syz.6.1524 Not tainted syzkaller #0 PREEMPT(full) [ 710.764196][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 710.764208][T12066] Call Trace: [ 710.764216][T12066] [ 710.764225][T12066] dump_stack_lvl+0x189/0x250 [ 710.764256][T12066] ? __pfx____ratelimit+0x10/0x10 [ 710.764280][T12066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 710.764306][T12066] ? __pfx__printk+0x10/0x10 [ 710.764337][T12066] ? __pfx___might_resched+0x10/0x10 [ 710.764356][T12066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 710.764384][T12066] should_fail_ex+0x414/0x560 [ 710.764418][T12066] should_failslab+0xa8/0x100 [ 710.764439][T12066] __kmalloc_noprof+0xcb/0x7f0 [ 710.764466][T12066] ? tomoyo_encode+0x28b/0x550 [ 710.764501][T12066] tomoyo_encode+0x28b/0x550 [ 710.764535][T12066] tomoyo_realpath_from_path+0x58d/0x5d0 [ 710.764574][T12066] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 710.764598][T12066] tomoyo_path_number_perm+0x1e8/0x5a0 [ 710.764626][T12066] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 710.764656][T12066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 710.764707][T12066] ? __fget_files+0x2a/0x420 [ 710.764729][T12066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 710.764750][T12066] ? __fget_files+0x3a0/0x420 [ 710.764766][T12066] ? __fget_files+0x2a/0x420 [ 710.764788][T12066] security_file_ioctl+0xcb/0x2d0 [ 710.764813][T12066] __se_sys_ioctl+0x47/0x170 [ 710.764840][T12066] do_syscall_64+0xfa/0xfa0 [ 710.764864][T12066] ? lockdep_hardirqs_on+0x9c/0x150 [ 710.764895][T12066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.764913][T12066] ? srso_alias_return_thunk+0x5/0xfbef5 [ 710.764934][T12066] ? exc_page_fault+0xab/0x100 [ 710.764960][T12066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.764978][T12066] RIP: 0033:0x7fb100d8efc9 [ 710.764995][T12066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.765010][T12066] RSP: 002b:00007fb101bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.765029][T12066] RAX: ffffffffffffffda RBX: 00007fb100fe5fa0 RCX: 00007fb100d8efc9 [ 710.765044][T12066] RDX: 0000200000000980 RSI: 0000000000003b72 RDI: 0000000000000003 [ 710.765056][T12066] RBP: 00007fb101bf0090 R08: 0000000000000000 R09: 0000000000000000 [ 710.765068][T12066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.765080][T12066] R13: 00007fb100fe6038 R14: 00007fb100fe5fa0 R15: 00007ffea1894018 [ 710.765112][T12066] [ 710.766488][T12066] ERROR: Out of memory at tomoyo_realpath_from_path. [ 710.782189][ T12] veth1_macvtap: left promiscuous mode [ 711.044242][ T12] veth0_macvtap: left promiscuous mode [ 711.050049][ T12] veth1_vlan: left promiscuous mode [ 711.055984][ T12] veth0_vlan: left promiscuous mode [ 711.669848][T12079] 9pnet_virtio: no channels available for device syz [ 712.452163][ T5841] Bluetooth: hci5: command tx timeout [ 712.489047][T12003] vhci_hcd: connection reset by peer [ 712.603362][ T6568] vhci_hcd: stop threads [ 712.607910][ T6568] vhci_hcd: release socket [ 712.622170][ T6568] vhci_hcd: disconnect device [ 712.741801][T12086] loop3: detected capacity change from 0 to 256 [ 713.763576][ T8004] usb 52-1: device descriptor read/8, error -110 [ 713.770474][T12092] FAULT_INJECTION: forcing a failure. [ 713.770474][T12092] name failslab, interval 1, probability 0, space 0, times 0 [ 713.803012][T12092] CPU: 1 UID: 0 PID: 12092 Comm: syz.1.1533 Not tainted syzkaller #0 PREEMPT(full) [ 713.803049][T12092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 713.803066][T12092] Call Trace: [ 713.803076][T12092] [ 713.803087][T12092] dump_stack_lvl+0x189/0x250 [ 713.803128][T12092] ? __pfx____ratelimit+0x10/0x10 [ 713.803168][T12092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.803204][T12092] ? __pfx__printk+0x10/0x10 [ 713.803238][T12092] ? __pfx___might_resched+0x10/0x10 [ 713.803266][T12092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.803304][T12092] should_fail_ex+0x414/0x560 [ 713.803354][T12092] should_failslab+0xa8/0x100 [ 713.803382][T12092] kmem_cache_alloc_node_noprof+0x77/0x710 [ 713.803420][T12092] ? __alloc_skb+0x112/0x2d0 [ 713.803459][T12092] ? netlink_autobind+0xdb/0x300 [ 713.803491][T12092] __alloc_skb+0x112/0x2d0 [ 713.803536][T12092] netlink_sendmsg+0x5c6/0xb30 [ 713.803571][T12092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.803598][T12092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.803628][T12092] ? aa_sock_msg_perm+0xf1/0x1d0 [ 713.803668][T12092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.803697][T12092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.803727][T12092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.803753][T12092] __sock_sendmsg+0x21c/0x270 [ 713.803791][T12092] ____sys_sendmsg+0x505/0x830 [ 713.803825][T12092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.803862][T12092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.803893][T12092] ? import_iovec+0x74/0xa0 [ 713.803930][T12092] ___sys_sendmsg+0x21f/0x2a0 [ 713.803961][T12092] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.803997][T12092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.804060][T12092] ? __fget_files+0x2a/0x420 [ 713.804083][T12092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.804112][T12092] ? __fget_files+0x3a0/0x420 [ 713.804149][T12092] __x64_sys_sendmsg+0x19b/0x260 [ 713.804185][T12092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 713.804224][T12092] ? __pfx_ksys_write+0x10/0x10 [ 713.804266][T12092] ? do_syscall_64+0xbe/0xfa0 [ 713.804306][T12092] do_syscall_64+0xfa/0xfa0 [ 713.804338][T12092] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.804371][T12092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.804396][T12092] ? srso_alias_return_thunk+0x5/0xfbef5 [ 713.804425][T12092] ? exc_page_fault+0xab/0x100 [ 713.804460][T12092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.804485][T12092] RIP: 0033:0x7feb2838efc9 [ 713.804508][T12092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.804530][T12092] RSP: 002b:00007feb2923e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.804557][T12092] RAX: ffffffffffffffda RBX: 00007feb285e5fa0 RCX: 00007feb2838efc9 [ 713.804576][T12092] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 713.804593][T12092] RBP: 00007feb2923e090 R08: 0000000000000000 R09: 0000000000000000 [ 713.804610][T12092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.804626][T12092] R13: 00007feb285e6038 R14: 00007feb285e5fa0 R15: 00007ffcb582d208 [ 713.804668][T12092] [ 714.331541][T12097] 9pnet_virtio: no channels available for device syz [ 714.349674][T12097] SQUASHFS error: Failed to read block 0x0: -5 [ 714.554244][ T8004] usb usb52-port1: attempt power cycle [ 714.558532][ T5841] Bluetooth: hci5: command tx timeout [ 715.598493][T12105] loop9: detected capacity change from 0 to 1024 [ 715.705553][ T8004] usb usb52-port1: unable to enumerate USB device [ 716.085915][T12117] loop3: detected capacity change from 0 to 1024 [ 716.621471][ T5841] Bluetooth: hci5: command tx timeout [ 716.735588][T12117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.808478][T12127] loop1: detected capacity change from 0 to 136 [ 716.837027][ T30] audit: type=1800 audit(1761894462.609:140): pid=12117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1537" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 718.576305][T12141] 9pnet_virtio: no channels available for device syz [ 718.704534][ T5841] Bluetooth: hci5: command tx timeout [ 719.301969][ T30] audit: type=1800 audit(1761894465.089:141): pid=12117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1537" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 719.407777][T11455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.453595][ T12] team0 (unregistering): Port device team_slave_1 removed [ 719.556369][ T12] team0 (unregistering): Port device team_slave_0 removed [ 720.710229][T12156] CIFS mount error: No usable UNC path provided in device string! [ 720.710229][T12156] [ 720.743168][T12156] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 721.076308][T12158] loop9: detected capacity change from 0 to 2048 [ 721.138841][T12158] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024) [ 721.288743][T12161] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 721.578603][T12150] loop6: detected capacity change from 0 to 32768 [ 721.637403][T12150] *** Log Is Dirty ! *** [ 721.657024][T12150] lmLogInit: exit(-22) [ 721.671251][T12150] lmLogOpen: exit(-22) [ 721.676389][T12150] jfs_mount_rw failed, return code = -22 [ 721.845164][T11614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.638734][T12185] 9pnet_virtio: no channels available for device syz [ 723.363280][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 724.739803][T12053] chnl_net:caif_netlink_parms(): no params data found [ 725.132942][T12204] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1556'. [ 725.212723][T12207] 9pnet_virtio: no channels available for device syz [ 725.255399][T12207] SQUASHFS error: Failed to read block 0x0: -5 [ 726.601740][T12216] loop1: detected capacity change from 0 to 1024 [ 726.773244][T12216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.802447][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 726.821460][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 726.844353][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 726.876110][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 726.886081][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 726.925094][ T30] audit: type=1800 audit(1761894472.709:142): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1558" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 727.436152][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1559'. [ 728.163774][T12239] loop6: detected capacity change from 0 to 2048 [ 728.269742][T12239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 728.566798][T12246] 9pnet_virtio: no channels available for device syz [ 729.122383][ T5837] Bluetooth: hci3: command tx timeout [ 729.581710][T12053] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.596327][ T30] audit: type=1800 audit(1761894475.369:143): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1558" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 729.632032][T12053] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.651673][T12053] bridge_slave_0: entered allmulticast mode [ 729.696363][T12053] bridge_slave_0: entered promiscuous mode [ 729.789918][T12053] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.804938][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.826407][T12053] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.856860][T12053] bridge_slave_1: entered allmulticast mode [ 729.887857][T12053] bridge_slave_1: entered promiscuous mode [ 731.078076][T12053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.145638][T12053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.189474][ T5837] Bluetooth: hci3: command tx timeout [ 732.191745][T12053] team0: Port device team_slave_0 added [ 732.220940][T12261] loop9: detected capacity change from 0 to 32768 [ 732.235973][T12053] team0: Port device team_slave_1 added [ 732.307524][T12261] *** Log Is Dirty ! *** [ 732.337901][T12261] lmLogInit: exit(-22) [ 732.366995][T12261] lmLogOpen: exit(-22) [ 732.381771][T12261] jfs_mount_rw failed, return code = -22 [ 732.654220][T12053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.666909][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.792642][T12053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.267878][ T5837] Bluetooth: hci3: command tx timeout [ 733.345957][T12053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.366473][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.423319][T12053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.773150][T12308] 9pnet_virtio: no channels available for device syz [ 734.608326][T12053] hsr_slave_0: entered promiscuous mode [ 734.618596][T12053] hsr_slave_1: entered promiscuous mode [ 734.625744][T12053] debugfs: 'hsr0' already exists in 'hsr' [ 734.634107][T12053] Cannot create hsr debugfs directory [ 734.812136][T12311] FAULT_INJECTION: forcing a failure. [ 734.812136][T12311] name failslab, interval 1, probability 0, space 0, times 0 [ 734.852082][T12311] CPU: 1 UID: 0 PID: 12311 Comm: syz.9.1574 Not tainted syzkaller #0 PREEMPT(full) [ 734.852118][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 734.852135][T12311] Call Trace: [ 734.852146][T12311] [ 734.852157][T12311] dump_stack_lvl+0x189/0x250 [ 734.852199][T12311] ? __pfx____ratelimit+0x10/0x10 [ 734.852231][T12311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.852266][T12311] ? __pfx__printk+0x10/0x10 [ 734.852300][T12311] ? __pfx___might_resched+0x10/0x10 [ 734.852332][T12311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.852370][T12311] should_fail_ex+0x414/0x560 [ 734.852415][T12311] should_failslab+0xa8/0x100 [ 734.852443][T12311] kmem_cache_alloc_node_noprof+0x77/0x710 [ 734.852481][T12311] ? __alloc_skb+0x112/0x2d0 [ 734.852519][T12311] ? netlink_autobind+0xdb/0x300 [ 734.852551][T12311] __alloc_skb+0x112/0x2d0 [ 734.852594][T12311] netlink_sendmsg+0x5c6/0xb30 [ 734.852630][T12311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.852657][T12311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.852687][T12311] ? aa_sock_msg_perm+0xf1/0x1d0 [ 734.852726][T12311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.852756][T12311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.852785][T12311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.852812][T12311] __sock_sendmsg+0x21c/0x270 [ 734.852850][T12311] ____sys_sendmsg+0x505/0x830 [ 734.852885][T12311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.852930][T12311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.852960][T12311] ? import_iovec+0x74/0xa0 [ 734.852998][T12311] ___sys_sendmsg+0x21f/0x2a0 [ 734.853029][T12311] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.853065][T12311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.853129][T12311] ? __fget_files+0x2a/0x420 [ 734.853151][T12311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.853179][T12311] ? __fget_files+0x3a0/0x420 [ 734.853217][T12311] __x64_sys_sendmsg+0x19b/0x260 [ 734.853247][T12311] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 734.853287][T12311] ? __pfx_ksys_write+0x10/0x10 [ 734.853329][T12311] ? do_syscall_64+0xbe/0xfa0 [ 734.853369][T12311] do_syscall_64+0xfa/0xfa0 [ 734.853400][T12311] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.853434][T12311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.853458][T12311] ? srso_alias_return_thunk+0x5/0xfbef5 [ 734.853487][T12311] ? exc_page_fault+0xab/0x100 [ 734.853523][T12311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.853552][T12311] RIP: 0033:0x7fa32d98efc9 [ 734.853574][T12311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.853597][T12311] RSP: 002b:00007fa32e776038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.853623][T12311] RAX: ffffffffffffffda RBX: 00007fa32dbe5fa0 RCX: 00007fa32d98efc9 [ 734.853643][T12311] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000005 [ 734.853660][T12311] RBP: 00007fa32e776090 R08: 0000000000000000 R09: 0000000000000000 [ 734.853678][T12311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.853694][T12311] R13: 00007fa32dbe6038 R14: 00007fa32dbe5fa0 R15: 00007ffff67f0d78 [ 734.853736][T12311] [ 735.339195][T12316] loop1: detected capacity change from 0 to 1024 [ 735.341436][ T5837] Bluetooth: hci3: command tx timeout [ 735.417072][T12316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.609349][ T30] audit: type=1800 audit(1761894481.339:144): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1575" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 735.833515][T12218] chnl_net:caif_netlink_parms(): no params data found [ 736.976480][T12333] loop9: detected capacity change from 0 to 256 [ 737.128243][ T12] bridge_slave_1: left allmulticast mode [ 737.134451][ T12] bridge_slave_1: left promiscuous mode [ 737.140460][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.329616][ T12] bridge_slave_0: left allmulticast mode [ 737.373713][ T12] bridge_slave_0: left promiscuous mode [ 738.066458][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.118880][ T12] bridge_slave_1: left allmulticast mode [ 738.150720][ T12] bridge_slave_1: left promiscuous mode [ 738.176003][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.217594][ T12] bridge_slave_0: left allmulticast mode [ 738.243404][ T12] bridge_slave_0: left promiscuous mode [ 738.266537][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.326184][ T30] audit: type=1800 audit(1761894484.109:145): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1575" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 738.558687][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.601104][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.635503][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.668349][ T12] bond0 (unregistering): Released all slaves [ 741.058295][T12368] loop9: detected capacity change from 0 to 32768 [ 741.095978][T12368] *** Log Is Dirty ! *** [ 741.111775][T12368] lmLogInit: exit(-22) [ 741.116441][T12368] lmLogOpen: exit(-22) [ 741.120652][T12368] jfs_mount_rw failed, return code = -22 [ 741.524342][T12368] loop9: detected capacity change from 0 to 512 [ 741.539366][T12368] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 741.550840][T12368] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 741.698452][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.719029][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.729497][ T12] bond0 (unregistering): Released all slaves [ 742.100647][T12397] 9pnet_virtio: no channels available for device syz [ 743.056126][ T12] tipc: Disabling bearer [ 743.161117][T12408] 9pnet_virtio: no channels available for device syz [ 743.860962][ T12] tipc: Left network mode [ 744.184414][T12218] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.234781][T12218] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.256866][T12218] bridge_slave_0: entered allmulticast mode [ 744.291664][T12218] bridge_slave_0: entered promiscuous mode [ 744.484113][T12218] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.501879][T12218] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.509199][T12218] bridge_slave_1: entered allmulticast mode [ 744.583236][T12218] bridge_slave_1: entered promiscuous mode [ 744.820338][ T8007] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 744.837394][ T8007] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 744.859316][ T8007] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 744.897833][ T30] audit: type=1326 audit(1761894490.679:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12414 comm="syz.1.1587" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb2838efc9 code=0x0 [ 744.931265][ T8007] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 744.949966][ T8007] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 744.961352][ T8007] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 744.996946][ T8007] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 745.041984][ T8007] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 745.106685][ T8007] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 745.160688][ T8007] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 745.209763][T12218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.224947][ T8007] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 745.350772][T12218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.495448][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 745.680341][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 745.712648][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 745.760363][T12218] team0: Port device team_slave_0 added [ 745.761850][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 745.793787][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.806777][ T10] usb 4-1: Product: syz [ 745.810954][ T10] usb 4-1: Manufacturer: syz [ 745.835067][T12218] team0: Port device team_slave_1 added [ 745.844820][ T10] usb 4-1: SerialNumber: syz [ 745.867225][ T10] usb 4-1: config 0 descriptor?? [ 745.886695][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 745.916387][ T10] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 745.939281][T12433] loop9: detected capacity change from 0 to 256 [ 745.955766][T12415] loop6: detected capacity change from 0 to 32768 [ 746.186917][T12415] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 746.968633][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 746.980829][T12218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.002420][T12218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.028573][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.039769][ T6318] ocfs2: Unmounting device (7,6) on (node local) [ 747.046350][T12218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.049327][T12218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.066224][T12218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.092626][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.100565][T12218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.500393][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 747.509863][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1594'. [ 747.789472][ T10] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 747.811673][ T10] em28xx 4-1:0.0: board has no eeprom [ 747.894060][ T10] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 747.913058][ T10] em28xx 4-1:0.0: dvb set to bulk mode. [ 747.937360][ T5919] em28xx 4-1:0.0: Binding DVB extension [ 747.969550][ T10] usb 4-1: USB disconnect, device number 4 [ 747.996068][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 748.257981][ T5919] em28xx 4-1:0.0: Registering input extension [ 748.316182][ T10] em28xx 4-1:0.0: Closing input extension [ 748.393430][T12218] hsr_slave_0: entered promiscuous mode [ 748.426210][T12218] hsr_slave_1: entered promiscuous mode [ 748.473617][T12218] debugfs: 'hsr0' already exists in 'hsr' [ 748.499853][T12218] Cannot create hsr debugfs directory [ 748.523083][ T10] em28xx 4-1:0.0: Freeing device [ 748.855700][ T12] hsr_slave_0: left promiscuous mode [ 748.881696][ T12] hsr_slave_1: left promiscuous mode [ 748.892282][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.910166][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.921951][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.069408][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.109908][ T12] hsr_slave_0: left promiscuous mode [ 749.150097][ T12] hsr_slave_1: left promiscuous mode [ 749.157746][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.195989][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.283666][ T12] veth1_macvtap: left promiscuous mode [ 749.299674][ T12] veth0_macvtap: left promiscuous mode [ 749.310441][ T12] veth1_vlan: left promiscuous mode [ 749.323016][ T12] veth0_vlan: left promiscuous mode [ 750.161669][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 750.440349][ T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 750.464335][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 750.535757][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 750.548044][ T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 750.556934][ T10] usb 7-1: Product: syz [ 750.561620][ T10] usb 7-1: Manufacturer: syz [ 750.568010][ T10] usb 7-1: SerialNumber: syz [ 750.578302][ T10] usb 7-1: config 0 descriptor?? [ 750.743849][ T10] usb 7-1: selecting invalid altsetting 0 [ 751.141119][ C0] vkms_vblank_simulate: vblank timer overrun [ 751.154309][ T10] usb 7-1: USB disconnect, device number 13 [ 751.294484][ T12] team0 (unregistering): Port device team_slave_1 removed [ 751.354221][ T12] team0 (unregistering): Port device team_slave_0 removed [ 751.682018][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.688394][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.165908][T12496] loop6: detected capacity change from 0 to 40427 [ 752.175391][T12496] F2FS-fs: heap/no_heap options were deprecated [ 752.190083][T12496] F2FS-fs (loop6): build fault injection rate: 19 [ 752.197834][T12496] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 752.233261][T12496] F2FS-fs (loop6): invalid crc value [ 752.288511][ T30] audit: type=1804 audit(1761894498.069:147): pid=12501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1605" name="/newroot/57/bus" dev="tmpfs" ino=335 res=1 errno=0 [ 752.293919][T12496] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 752.875384][T12496] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 752.994059][T12496] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 753.059620][T12496] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 753.326249][T12496] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 753.606258][ T6318] syz-executor: attempt to access beyond end of device [ 753.606258][ T6318] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 753.724220][ T6318] CPU: 1 UID: 0 PID: 6318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 753.724265][ T6318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 753.724284][ T6318] Call Trace: [ 753.724298][ T6318] [ 753.724320][ T6318] dump_stack_lvl+0x189/0x250 [ 753.724383][ T6318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.724423][ T6318] ? __pfx_queue_work_on+0x10/0x10 [ 753.724454][ T6318] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 753.724497][ T6318] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 753.724539][ T6318] f2fs_handle_critical_error+0x37c/0x540 [ 753.724581][ T6318] f2fs_write_end_io+0x886/0xb60 [ 753.724625][ T6318] __submit_merged_bio+0x27a/0x6a0 [ 753.724664][ T6318] __submit_merged_write_cond+0x255/0x530 [ 753.724704][ T6318] f2fs_write_data_pages+0x261d/0x3000 [ 753.724761][ T6318] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 753.724780][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.724854][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.724901][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.724927][ T6318] ? __lock_acquire+0xab9/0xd20 [ 753.724961][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.724987][ T6318] ? do_raw_spin_lock+0x121/0x290 [ 753.725022][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.725050][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.725074][ T6318] ? do_raw_spin_unlock+0x122/0x240 [ 753.725105][ T6318] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 753.725127][ T6318] do_writepages+0x32e/0x550 [ 753.725178][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.725209][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.725235][ T6318] ? do_raw_spin_unlock+0x122/0x240 [ 753.725272][ T6318] filemap_fdatawrite+0x199/0x240 [ 753.725304][ T6318] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 753.725375][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.725404][ T6318] ? do_raw_spin_unlock+0x122/0x240 [ 753.725441][ T6318] f2fs_sync_dirty_inodes+0x31f/0x830 [ 753.725484][ T6318] f2fs_write_checkpoint+0x93e/0x2440 [ 753.725508][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.725533][ T6318] ? __lock_acquire+0xab9/0xd20 [ 753.725582][ T6318] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 753.725661][ T6318] kill_f2fs_super+0x2cc/0x6d0 [ 753.725686][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.725716][ T6318] ? __pfx_kill_f2fs_super+0x10/0x10 [ 753.725759][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.725785][ T6318] ? shrinker_free+0x2ce/0x3e0 [ 753.725816][ T6318] deactivate_locked_super+0xbc/0x130 [ 753.725851][ T6318] cleanup_mnt+0x425/0x4c0 [ 753.725878][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.725904][ T6318] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.725939][ T6318] task_work_run+0x1d4/0x260 [ 753.725979][ T6318] ? __pfx_task_work_run+0x10/0x10 [ 753.726012][ T6318] ? __x64_sys_umount+0x122/0x160 [ 753.726051][ T6318] ? exit_to_user_mode_loop+0x40/0x130 [ 753.726081][ T6318] exit_to_user_mode_loop+0xe9/0x130 [ 753.726107][ T6318] do_syscall_64+0x2bd/0xfa0 [ 753.726142][ T6318] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.726178][ T6318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.726198][ T6318] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.726225][ T6318] ? exc_page_fault+0xab/0x100 [ 753.726260][ T6318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.726286][ T6318] RIP: 0033:0x7fb100d902f7 [ 753.726311][ T6318] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 753.726329][ T6318] RSP: 002b:00007ffea18932a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 753.726351][ T6318] RAX: 0000000000000000 RBX: 00007fb100e11d7d RCX: 00007fb100d902f7 [ 753.726366][ T6318] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea1893360 [ 753.726379][ T6318] RBP: 00007ffea1893360 R08: 0000000000000000 R09: 0000000000000000 [ 753.726392][ T6318] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffea18943f0 [ 753.726407][ T6318] R13: 00007fb100e11d7d R14: 00000000000b7f19 R15: 00007ffea1894430 [ 753.726441][ T6318] [ 753.726496][ T6318] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 754.510160][ T12] team0 (unregistering): Port device team_slave_1 removed [ 754.644416][ T12] team0 (unregistering): Port device team_slave_0 removed [ 754.719540][T12513] loop6: detected capacity change from 0 to 8 [ 754.771990][T12513] SQUASHFS error: Unable to read inode 0x11f [ 754.895611][T12515] loop6: detected capacity change from 0 to 256 [ 756.338205][T12053] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 756.354288][T12053] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 756.520488][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 756.530954][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 756.530998][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 756.531022][ T5837] Workqueue: hci4 hci_rx_work [ 756.531067][ T5837] Call Trace: [ 756.531080][ T5837] [ 756.531092][ T5837] dump_stack_lvl+0x189/0x250 [ 756.531150][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.531196][ T5837] ? __pfx__printk+0x10/0x10 [ 756.531235][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.531277][ T5837] ? kernfs_path_from_node+0x250/0x290 [ 756.531319][ T5837] ? kernfs_path_from_node+0x2f/0x290 [ 756.531362][ T5837] sysfs_create_dir_ns+0x259/0x280 [ 756.531398][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 756.531437][ T5837] ? do_raw_spin_unlock+0x122/0x240 [ 756.531485][ T5837] kobject_add_internal+0x59f/0xb40 [ 756.531535][ T5837] kobject_add+0x155/0x220 [ 756.531571][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.531606][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 756.531644][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.531674][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 756.531702][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.531736][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.531765][ T5837] ? get_device_parent+0x366/0x3a0 [ 756.531802][ T5837] device_add+0x408/0xb50 [ 756.531838][ T5837] hci_conn_add_sysfs+0xd5/0x1e0 [ 756.531869][ T5837] le_conn_complete_evt+0xf39/0x1500 [ 756.531932][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 756.531968][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.531997][ T5837] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 756.532031][ T5837] ? __asan_memcpy+0x40/0x70 [ 756.532073][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.532101][ T5837] ? skb_pull_data+0xfb/0x200 [ 756.532140][ T5837] hci_le_conn_complete_evt+0x187/0x450 [ 756.532186][ T5837] hci_event_packet+0x78f/0x1200 [ 756.532221][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 756.532260][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 756.532300][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.532330][ T5837] ? hci_send_to_monitor+0xe2/0x570 [ 756.532374][ T5837] hci_rx_work+0x46a/0xe80 [ 756.532414][ T5837] ? process_scheduled_works+0x9ef/0x17b0 [ 756.532447][ T5837] process_scheduled_works+0xae1/0x17b0 [ 756.532511][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 756.532549][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.532589][ T5837] worker_thread+0x8a0/0xda0 [ 756.532651][ T5837] kthread+0x711/0x8a0 [ 756.532692][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 756.532721][ T5837] ? __pfx_kthread+0x10/0x10 [ 756.532754][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.532787][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.532817][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.532845][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.532878][ T5837] ? __pfx_kthread+0x10/0x10 [ 756.532921][ T5837] ret_from_fork+0x4bc/0x870 [ 756.532954][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 756.532991][ T5837] ? __switch_to_asm+0x39/0x70 [ 756.533014][ T5837] ? __switch_to_asm+0x33/0x70 [ 756.533034][ T5837] ? __pfx_kthread+0x10/0x10 [ 756.533072][ T5837] ret_from_fork_asm+0x1a/0x30 [ 756.533116][ T5837] [ 756.851981][ T5837] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 756.872782][ T5837] Bluetooth: hci4: failed to register connection device [ 756.931961][ T5837] ================================================================== [ 756.940108][ T5837] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6e4/0x1040 [ 756.948243][ T5837] Read of size 8 at addr ffff88804c1ac480 by task kworker/u9:4/5837 [ 756.956284][ T5837] [ 756.958642][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 756.958688][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 756.958719][ T5837] Workqueue: hci4 hci_rx_work [ 756.958776][ T5837] Call Trace: [ 756.958793][ T5837] [ 756.958808][ T5837] dump_stack_lvl+0x189/0x250 [ 756.958857][ T5837] ? __kasan_check_byte+0x12/0x40 [ 756.958900][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 756.958942][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.958995][ T5837] ? lock_release+0x4b/0x3e0 [ 756.959059][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.959112][ T5837] ? __virt_addr_valid+0x4a5/0x5c0 [ 756.959171][ T5837] print_report+0xca/0x240 [ 756.959233][ T5837] ? l2cap_connect_cfm+0x6e4/0x1040 [ 756.959310][ T5837] kasan_report+0x118/0x150 [ 756.959357][ T5837] ? l2cap_connect_cfm+0x6e4/0x1040 [ 756.959437][ T5837] l2cap_connect_cfm+0x6e4/0x1040 [ 756.959485][ T5837] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 756.959527][ T5837] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 756.959566][ T5837] hci_connect_cfm+0x95/0x140 [ 756.959603][ T5837] le_conn_complete_evt+0xfb8/0x1500 [ 756.959649][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 756.959683][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.959714][ T5837] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 756.959750][ T5837] ? __asan_memcpy+0x40/0x70 [ 756.959788][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.959817][ T5837] ? skb_pull_data+0xfb/0x200 [ 756.959851][ T5837] hci_le_conn_complete_evt+0x187/0x450 [ 756.959901][ T5837] hci_event_packet+0x78f/0x1200 [ 756.959937][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 756.959973][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 756.960007][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.960036][ T5837] ? hci_send_to_monitor+0xe2/0x570 [ 756.960077][ T5837] hci_rx_work+0x46a/0xe80 [ 756.960116][ T5837] ? process_scheduled_works+0x9ef/0x17b0 [ 756.960151][ T5837] process_scheduled_works+0xae1/0x17b0 [ 756.960199][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 756.960231][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.960266][ T5837] worker_thread+0x8a0/0xda0 [ 756.960310][ T5837] kthread+0x711/0x8a0 [ 756.960352][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 756.960379][ T5837] ? __pfx_kthread+0x10/0x10 [ 756.960409][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.960441][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.960472][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 756.960500][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 756.960531][ T5837] ? __pfx_kthread+0x10/0x10 [ 756.960564][ T5837] ret_from_fork+0x4bc/0x870 [ 756.960591][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 756.960619][ T5837] ? __switch_to_asm+0x39/0x70 [ 756.960640][ T5837] ? __switch_to_asm+0x33/0x70 [ 756.960659][ T5837] ? __pfx_kthread+0x10/0x10 [ 756.960692][ T5837] ret_from_fork_asm+0x1a/0x30 [ 756.960725][ T5837] [ 756.960736][ T5837] [ 757.246627][ T5837] Allocated by task 5837: [ 757.250977][ T5837] kasan_save_track+0x3e/0x80 [ 757.255743][ T5837] __kasan_kmalloc+0x93/0xb0 [ 757.260401][ T5837] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 757.265924][ T5837] l2cap_chan_create+0x50/0x760 [ 757.270809][ T5837] l2cap_sock_new_connection_cb+0x182/0x2b0 [ 757.276728][ T5837] l2cap_connect_cfm+0x37a/0x1040 [ 757.281864][ T5837] hci_connect_cfm+0x95/0x140 [ 757.287000][ T5837] le_conn_complete_evt+0xfb8/0x1500 [ 757.292399][ T5837] hci_le_conn_complete_evt+0x187/0x450 [ 757.298172][ T5837] hci_event_packet+0x78f/0x1200 [ 757.303225][ T5837] hci_rx_work+0x46a/0xe80 [ 757.307837][ T5837] process_scheduled_works+0xae1/0x17b0 [ 757.313491][ T5837] worker_thread+0x8a0/0xda0 [ 757.318407][ T5837] kthread+0x711/0x8a0 [ 757.322500][ T5837] ret_from_fork+0x4bc/0x870 [ 757.327090][ T5837] ret_from_fork_asm+0x1a/0x30 [ 757.331874][ T5837] [ 757.334209][ T5837] Freed by task 12518: [ 757.338265][ T5837] kasan_save_track+0x3e/0x80 [ 757.342973][ T5837] __kasan_save_free_info+0x46/0x50 [ 757.348181][ T5837] __kasan_slab_free+0x5c/0x80 [ 757.352973][ T5837] kfree+0x19a/0x6d0 [ 757.356871][ T5837] l2cap_sock_cleanup_listen+0xea/0x3e0 [ 757.362423][ T5837] l2cap_sock_release+0x6a/0x210 [ 757.367379][ T5837] sock_close+0xc3/0x240 [ 757.371724][ T5837] __fput+0x44c/0xa70 [ 757.375715][ T5837] task_work_run+0x1d4/0x260 [ 757.380329][ T5837] exit_to_user_mode_loop+0xe9/0x130 [ 757.385617][ T5837] do_syscall_64+0x2bd/0xfa0 [ 757.390734][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.396624][ T5837] [ 757.398938][ T5837] The buggy address belongs to the object at ffff88804c1ac000 [ 757.398938][ T5837] which belongs to the cache kmalloc-2k of size 2048 [ 757.412999][ T5837] The buggy address is located 1152 bytes inside of [ 757.412999][ T5837] freed 2048-byte region [ffff88804c1ac000, ffff88804c1ac800) [ 757.427332][ T5837] [ 757.429747][ T5837] The buggy address belongs to the physical page: [ 757.436336][ T5837] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4c1a8 [ 757.445148][ T5837] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 757.453656][ T5837] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 757.461208][ T5837] page_type: f5(slab) [ 757.465190][ T5837] raw: 00fff00000000040 ffff88801a027000 dead000000000100 dead000000000122 [ 757.474438][ T5837] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 757.483119][ T5837] head: 00fff00000000040 ffff88801a027000 dead000000000100 dead000000000122 [ 757.491893][ T5837] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 757.500752][ T5837] head: 00fff00000000003 ffffea0001306a01 00000000ffffffff 00000000ffffffff [ 757.509439][ T5837] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 757.518198][ T5837] page dumped because: kasan: bad access detected [ 757.524600][ T5837] page_owner tracks the page as allocated [ 757.530507][ T5837] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5965, tgid 5965 (kworker/0:6), ts 190706530388, free_ts 120496924565 [ 757.551973][ T5837] post_alloc_hook+0x240/0x2a0 [ 757.556777][ T5837] get_page_from_freelist+0x2365/0x2440 [ 757.562332][ T5837] __alloc_frozen_pages_noprof+0x181/0x370 [ 757.568158][ T5837] alloc_pages_mpol+0x232/0x4a0 [ 757.573041][ T5837] allocate_slab+0x96/0x350 [ 757.577542][ T5837] ___slab_alloc+0xe94/0x18a0 [ 757.582303][ T5837] __slab_alloc+0x65/0x100 [ 757.586719][ T5837] __kmalloc_node_track_caller_noprof+0x5c7/0x800 [ 757.593193][ T5837] kmalloc_reserve+0x136/0x290 [ 757.597988][ T5837] __alloc_skb+0x142/0x2d0 [ 757.602416][ T5837] mld_newpack+0x13c/0xc40 [ 757.606856][ T5837] add_grhead+0x5a/0x2a0 [ 757.611179][ T5837] add_grec+0x1452/0x1740 [ 757.615656][ T5837] mld_ifc_work+0x6ed/0xd60 [ 757.620256][ T5837] process_scheduled_works+0xae1/0x17b0 [ 757.625808][ T5837] worker_thread+0x8a0/0xda0 [ 757.630567][ T5837] page last free pid 6119 tgid 6119 stack trace: [ 757.636894][ T5837] __free_frozen_pages+0xbc4/0xd30 [ 757.642026][ T5837] packet_set_ring+0x1713/0x2120 [ 757.646996][ T5837] packet_release+0x7e6/0xd00 [ 757.651809][ T5837] sock_close+0xc3/0x240 [ 757.656087][ T5837] __fput+0x44c/0xa70 [ 757.660071][ T5837] task_work_run+0x1d4/0x260 [ 757.664671][ T5837] exit_to_user_mode_loop+0xe9/0x130 [ 757.670030][ T5837] do_syscall_64+0x2bd/0xfa0 [ 757.674693][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.681037][ T5837] [ 757.683363][ T5837] Memory state around the buggy address: [ 757.689065][ T5837] ffff88804c1ac380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 757.697135][ T5837] ffff88804c1ac400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 757.705238][ T5837] >ffff88804c1ac480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 757.713382][ T5837] ^ [ 757.717662][ T5837] ffff88804c1ac500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 757.726166][ T5837] ffff88804c1ac580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 757.734242][ T5837] ================================================================== [ 757.767600][ T5837] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 757.774950][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 757.784624][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 757.794807][ T5837] Workqueue: hci4 hci_rx_work [ 757.799532][ T5837] Call Trace: [ 757.802964][ T5837] [ 757.805906][ T5837] dump_stack_lvl+0x99/0x250 [ 757.810605][ T5837] ? __asan_memcpy+0x40/0x70 [ 757.815220][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.820467][ T5837] ? __pfx__printk+0x10/0x10 [ 757.825154][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.830805][ T5837] vpanic+0x237/0x6d0 [ 757.834908][ T5837] ? __pfx_vpanic+0x10/0x10 [ 757.839519][ T5837] ? preempt_schedule+0xae/0xc0 [ 757.844573][ T5837] ? __pfx_preempt_schedule+0x10/0x10 [ 757.849975][ T5837] panic+0xb9/0xc0 [ 757.853812][ T5837] ? __pfx_panic+0x10/0x10 [ 757.858255][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.863909][ T5837] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 757.869917][ T5837] ? l2cap_connect_cfm+0x6e4/0x1040 [ 757.875143][ T5837] check_panic_on_warn+0x89/0xb0 [ 757.880198][ T5837] ? l2cap_connect_cfm+0x6e4/0x1040 [ 757.885455][ T5837] end_report+0x78/0x160 [ 757.889749][ T5837] kasan_report+0x129/0x150 [ 757.894526][ T5837] ? l2cap_connect_cfm+0x6e4/0x1040 [ 757.900111][ T5837] l2cap_connect_cfm+0x6e4/0x1040 [ 757.905260][ T5837] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 757.911130][ T5837] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 757.916670][ T5837] hci_connect_cfm+0x95/0x140 [ 757.921417][ T5837] le_conn_complete_evt+0xfb8/0x1500 [ 757.926791][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 757.932799][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.938559][ T5837] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 757.944330][ T5837] ? __asan_memcpy+0x40/0x70 [ 757.948972][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.954652][ T5837] ? skb_pull_data+0xfb/0x200 [ 757.959352][ T5837] hci_le_conn_complete_evt+0x187/0x450 [ 757.965072][ T5837] hci_event_packet+0x78f/0x1200 [ 757.970123][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 757.975471][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 757.980925][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.986702][ T5837] ? hci_send_to_monitor+0xe2/0x570 [ 757.991955][ T5837] hci_rx_work+0x46a/0xe80 [ 757.996396][ T5837] ? process_scheduled_works+0x9ef/0x17b0 [ 758.002124][ T5837] process_scheduled_works+0xae1/0x17b0 [ 758.007695][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 758.013691][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.019339][ T5837] worker_thread+0x8a0/0xda0 [ 758.023953][ T5837] kthread+0x711/0x8a0 [ 758.028036][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 758.033151][ T5837] ? __pfx_kthread+0x10/0x10 [ 758.037746][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.043471][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 758.048675][ T5837] ? srso_alias_return_thunk+0x5/0xfbef5 [ 758.054311][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.059519][ T5837] ? __pfx_kthread+0x10/0x10 [ 758.064127][ T5837] ret_from_fork+0x4bc/0x870 [ 758.068901][ T5837] ? __pfx_ret_from_fork+0x10/0x10 [ 758.074018][ T5837] ? __switch_to_asm+0x39/0x70 [ 758.078778][ T5837] ? __switch_to_asm+0x33/0x70 [ 758.083541][ T5837] ? __pfx_kthread+0x10/0x10 [ 758.088143][ T5837] ret_from_fork_asm+0x1a/0x30 [ 758.092920][ T5837] [ 758.096248][ T5837] Kernel Offset: disabled [ 758.100575][ T5837] Rebooting in 86400 seconds..