last executing test programs:

18m12.363339142s ago: executing program 32 (id=142):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/xfrm_stat\x00')
read$eventfd(r3, &(0x7f0000000080), 0x51)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x28, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, <r4=>0x0}, &(0x7f0000000040)=0x14)
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r4, @empty, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc)

16m4.208604639s ago: executing program 33 (id=301):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000004480)={0x2020}, 0x2020)
lseek(r3, 0xfffffffffffffff5, 0x1)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@remote, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x60, 0x65, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@generic={0x88, 0x2}]}}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "22995ac113fd02e7f376e7d6b2456c7ba350649f5116310d", "968826ce34c5f5d2a37b95275369010d2b4caf20b4ebfdfb61c7b8249315089f"}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1f0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2002c12, &(0x7f0000000500), 0x2, 0xa03, &(0x7f0000003a40)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x8)
r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f00000003c0)={0x100, 0xa883})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x949, 0x0, 0x2}]})
pselect6(0x0, 0x0, &(0x7f00000002c0)={0x18, 0x7, 0x200000000009, 0x40, 0x7, 0x200000400001}, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00')

13m50.843409031s ago: executing program 34 (id=458):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r5, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)

13m16.733815173s ago: executing program 7 (id=471):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000003c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfa, 0x1511, &(0x7f0000002cc0)="$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")
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080)=0xffffffff, 0x4)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
accept(0xffffffffffffffff, 0x0, &(0x7f0000000200))
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r3 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, <r4=>r2})
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4})
close(r5)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x120008, &(0x7f00000001c0)=ANY=[], 0x1, 0x5e8, &(0x7f0000000cc0)="$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")
rename(&(0x7f0000000080)='./file1\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, 0x0, &(0x7f0000000240))
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0)

13m14.046569389s ago: executing program 7 (id=506):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x9)
socket$nl_route(0x10, 0x3, 0x0)
r1 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
process_vm_writev(r3, &(0x7f0000000400)=[{0x0}, {0x0}, {&(0x7f0000000340)=""/116, 0x74}], 0x3, 0x0, 0x0, 0x0)
setresgid(0x0, 0xee01, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setgroups(0x1, &(0x7f0000000080)=[0xee00])
setuid(0xee01)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)

13m10.913894267s ago: executing program 7 (id=509):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4})

12m54.287376576s ago: executing program 35 (id=509):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r4 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4})

12m41.293241356s ago: executing program 0 (id=540):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f0}, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
link(0x0, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000100)=[{0xc, 0x7f, 0x3, 0x7}, {0xa313, 0x8, 0x0, 0x69}]})
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008010)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r7, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48)

12m37.078504914s ago: executing program 0 (id=543):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xc)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4})

12m29.551824477s ago: executing program 0 (id=549):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc040564a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0xf8, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x20000009ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x6}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xf8}}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='utf8', &(0x7f00000001c0)='\x00V\x13\xdb\xbc', 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, 0x0, 0x0)
write$binfmt_aout(r1, 0x0, 0xffffffdb)

12m19.454615811s ago: executing program 0 (id=562):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40408c1}, 0x1)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000080)={0x2, 0x3ff, {0x52, 0x4, 0x9, {0xbf6, 0xb}, {0x200, 0x8}, @ramp={0x81, 0x5a7, {0x15, 0x7f, 0xd9d, 0x9}}}, {0x54, 0x3, 0x98e1, {0x3, 0x31}, {0x0, 0x1}, @period={0x5d, 0xffff, 0x9, 0x3, 0x2, {0xfffe, 0x0, 0x8, 0xffff}, 0x0, 0x0}}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbb81000000000000000000182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0202000100000000fc0100"/78], 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = add_key$fscrypt_provisioning(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x29, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r3, 0xa0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @sdr={0x32344d59, 0x80000001}})
r4 = socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a"], 0x0, 0x28}, 0x28)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}}, 0x4084)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0)={0x0, 0x1c}, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000700)="9cc272d79287a35bfc0cfe207c8b0fefb3a30555e5153f5269f17033", 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

12m16.478200201s ago: executing program 0 (id=567):
socket$inet(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0)
fanotify_init(0x40, 0x40000)
r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00')
r5 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2})
ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f00000001c0)=0x2)
ioctl$VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000200)=0x1)
r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file1'}, 0xb)

12m14.918461854s ago: executing program 0 (id=556):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, 0x0, 0x0)
fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
r2 = socket(0x1d, 0x3, 0xffffffff)
connect$inet(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x800000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101800)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0)
write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
lseek(0xffffffffffffffff, 0x1000000, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
read$FUSE(r7, &(0x7f00000051c0)={0x2020}, 0x2020)
pread64(r7, &(0x7f0000000100)=""/253, 0xfd, 0xadc)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
lgetxattr(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0100637509000100f7c900"], 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
sendmsg$kcm(r5, &(0x7f00000009c0)={&(0x7f00000002c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)="d22442f5fbd22627e959e6b0636af0c0a39e7d4581e74fdd610979ec65a4e224df7a21f65b764a30a171663e3ca80418668469162998586c4279b14e9c5d9f9538e1d2ab2a0d5c0ba35bec80", 0x4c}, {&(0x7f0000000540)="fe628cd1694b9b6f90bf837e8b2f679e4caa187e9db587b666d3f4650cea6f59ed", 0x21}, {&(0x7f0000000580)="a5b75e7a545c9309fac44dddc525eaf0d8d770b0c3ea39cc668197c0ce9f2f49f560d619500ba16aa02b679dbdbecaac851deee5c788dede81692c8d0925f4470865855efdcc895afe77b6cc0c35481a89cc79e03f4a2c447b369681656f91059bf2cabad8c74f7c0b1aa91d1bfb44eb3bd72a3e1fd5c96ffeac6e142adf9144be4f7ec9239e72331a2558f51de5da034468d7511458910ffb5da4720615de974394a2467e7d47da9d5025760e54b608c7d86dcfd1c0543a3cda7e637f8f2a9eff7d", 0xc2}, {&(0x7f0000000680)="90bc9baa1c49261260d2af4295af64ce7aa24235997c2501849bd8d7dff6fc80e1a1c714ff6e0dfc4d59c7d4ca13ef0f3b2976ffdd511074fb1c7645f0b42e1c6af2bc96e2c7a8dc86ad00905a122f11ba9686fec9d1ee39dda153acdc80c898d0c6bd759deb4c44102cf2314b9e8a1998c02686106438939cef9454d335072c17db01c369caa88f8f689b30520341143fb0a0c6f0995832eb7c19395b45cf51e44fe4967fc9d02da3573c9402547caddd2260ceff51879f7b982632f13b865e76fac040b413bb7da2e4fd993a0a1c63e6339af0e2a872d3", 0xd8}, {&(0x7f0000000780)="58fd2f14eec58a42a3", 0x9}, {&(0x7f00000007c0)="ce3f58133b2a5075cc6453b936f55722deff871d812a2fc56e24575b1bcbb5391ab7013863291020cb32d132bccf6243620ba8271dd4216a84ad38ba6db021c8f725c791d3aa061de5dac8512a7ef02eb09acb9f48bb1af05018b516dba4bf75efef1c13d1bb3be5d08dd030f93fe7e00e60efc32929b37f728b6ce5225b6866271bb04c7db9398b6cf4bc47afe6bee9aed1e2963dcdbb2e4a9d174c56eeafb1e3ab1a8c49dc899cda207de7eb33c2b8f512510e538fcc589ea748ab", 0xbc}], 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xc8}, 0x44010)
sendto$inet6(r0, &(0x7f0000000440)="cdf52deeae237f28a6a4d1e3b7eab347f5173a184a07073bc712c899cd34cf2e74ea1371f7abae99f1a6e3dc34ee4835e0b979415321c02734531a4f8eb2dab64976b41d9238f04d76cab215037b790572a5190ecc67b54fb983e24a0e9e70eb48f17ec82a53fb2d143eff11a3e499445284f5c66c91", 0x76, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)

11m59.409131752s ago: executing program 36 (id=556):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, 0x0, 0x0)
fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
r2 = socket(0x1d, 0x3, 0xffffffff)
connect$inet(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x800000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101800)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0)
write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
lseek(0xffffffffffffffff, 0x1000000, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00')
read$FUSE(r7, &(0x7f00000051c0)={0x2020}, 0x2020)
pread64(r7, &(0x7f0000000100)=""/253, 0xfd, 0xadc)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
lgetxattr(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0100637509000100f7c900"], 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
sendmsg$kcm(r5, &(0x7f00000009c0)={&(0x7f00000002c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x80, &(0x7f0000000880)=[{&(0x7f00000004c0)="d22442f5fbd22627e959e6b0636af0c0a39e7d4581e74fdd610979ec65a4e224df7a21f65b764a30a171663e3ca80418668469162998586c4279b14e9c5d9f9538e1d2ab2a0d5c0ba35bec80", 0x4c}, {&(0x7f0000000540)="fe628cd1694b9b6f90bf837e8b2f679e4caa187e9db587b666d3f4650cea6f59ed", 0x21}, {&(0x7f0000000580)="a5b75e7a545c9309fac44dddc525eaf0d8d770b0c3ea39cc668197c0ce9f2f49f560d619500ba16aa02b679dbdbecaac851deee5c788dede81692c8d0925f4470865855efdcc895afe77b6cc0c35481a89cc79e03f4a2c447b369681656f91059bf2cabad8c74f7c0b1aa91d1bfb44eb3bd72a3e1fd5c96ffeac6e142adf9144be4f7ec9239e72331a2558f51de5da034468d7511458910ffb5da4720615de974394a2467e7d47da9d5025760e54b608c7d86dcfd1c0543a3cda7e637f8f2a9eff7d", 0xc2}, {&(0x7f0000000680)="90bc9baa1c49261260d2af4295af64ce7aa24235997c2501849bd8d7dff6fc80e1a1c714ff6e0dfc4d59c7d4ca13ef0f3b2976ffdd511074fb1c7645f0b42e1c6af2bc96e2c7a8dc86ad00905a122f11ba9686fec9d1ee39dda153acdc80c898d0c6bd759deb4c44102cf2314b9e8a1998c02686106438939cef9454d335072c17db01c369caa88f8f689b30520341143fb0a0c6f0995832eb7c19395b45cf51e44fe4967fc9d02da3573c9402547caddd2260ceff51879f7b982632f13b865e76fac040b413bb7da2e4fd993a0a1c63e6339af0e2a872d3", 0xd8}, {&(0x7f0000000780)="58fd2f14eec58a42a3", 0x9}, {&(0x7f00000007c0)="ce3f58133b2a5075cc6453b936f55722deff871d812a2fc56e24575b1bcbb5391ab7013863291020cb32d132bccf6243620ba8271dd4216a84ad38ba6db021c8f725c791d3aa061de5dac8512a7ef02eb09acb9f48bb1af05018b516dba4bf75efef1c13d1bb3be5d08dd030f93fe7e00e60efc32929b37f728b6ce5225b6866271bb04c7db9398b6cf4bc47afe6bee9aed1e2963dcdbb2e4a9d174c56eeafb1e3ab1a8c49dc899cda207de7eb33c2b8f512510e538fcc589ea748ab", 0xbc}], 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xc8}, 0x44010)
sendto$inet6(r0, &(0x7f0000000440)="cdf52deeae237f28a6a4d1e3b7eab347f5173a184a07073bc712c899cd34cf2e74ea1371f7abae99f1a6e3dc34ee4835e0b979415321c02734531a4f8eb2dab64976b41d9238f04d76cab215037b790572a5190ecc67b54fb983e24a0e9e70eb48f17ec82a53fb2d143eff11a3e499445284f5c66c91", 0x76, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c)

10m50.339086543s ago: executing program 4 (id=651):
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x800006dc, 0x0, 0x6, 0x9e93, 0x17, "1012a2c2030800001fe550bf0d08000000e956"})
unshare(0x22020400)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
shmctl$SHM_LOCK(0x0, 0xb)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000001780)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@srh={0x2c, 0x0, 0x4, 0x0, 0x1, 0x8, 0x10}]}}}}}, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b000000000000"], 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x0)
mlockall(0x2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xf46bd000)
mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

10m38.101564597s ago: executing program 4 (id=667):
close(0xffffffffffffffff)
syz_emit_ethernet(0x3a, &(0x7f0000000a40)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@lsrr={0x83, 0x3, 0xe3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xbfffffff, 0xffffff61, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0x8, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x102, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xf3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf423c, 0x0, 0x0, 0x1}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/rnullb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/memory_backed\x00', 0x1, 0x0)
write(r2, &(0x7f0000000180)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0)
write(r3, &(0x7f0000000180), 0x0)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0)
write(r4, &(0x7f0000000180)='4\n', 0x2)
close(r4)
close(0xffffffffffffffff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_nr_conv\x00', 0x1, 0x0)
write(r5, &(0x7f0000000180)='1\n', 0x2)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/size\x00', 0x1, 0x0)
write(r6, &(0x7f0000000180)='64\n', 0x3)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/power\x00', 0x1, 0x0)
write(r7, &(0x7f0000000180)='1\n', 0x2)

10m29.884811173s ago: executing program 4 (id=673):
mkdirat(0xffffffffffffff9c, 0x0, 0x1cc)
write(0xffffffffffffffff, &(0x7f0000000200), 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x2, 0x0, 0x2}}}}}}, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, '.'}}]})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x9c482, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0)
accept4$unix(r2, &(0x7f0000000140), &(0x7f00000001c0)=0x6e, 0x80000)
r3 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x1000000}, 0x0, [0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x40800000000000, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x10, 0xfffffffffffffffe, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x40, 0x0, 0x59ed, 0x1000000000000000, 0x0, 0x4001ff, 0x0, 0x0, 0x0, 0x3, 0xd, 0x100000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x8, 0x2, 0x0, 0x80000000000, 0x0, 0x3f92, 0x0, 0x0, 0xb4b, 0x1, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]})

10m26.399228936s ago: executing program 4 (id=678):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r1, 0x2000000, 0x300}, 0x38)
syz_emit_vhci(0x0, 0x14)
r2 = socket$kcm(0xa, 0x2, 0x0)
r3 = socket(0x2, 0x80002, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x11, @dev={0xac, 0x14, 0x14, 0x40}, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@multicast1, 0x4e20, 0x10000, 0x6, 0x1}}, 0x44)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x202201, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c)
r5 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r5, &(0x7f0000000180)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

10m21.592876602s ago: executing program 4 (id=682):
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x140)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x9, 0x2, 0x0, 0x0, 0x6)
futex(0x0, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x3000000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x100, 0xc)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x0)
fanotify_mark(r6, 0x1, 0x5000002a, r5, 0x0)
mkdirat(r4, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
r7 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393)
renameat2(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x2)

10m19.870197892s ago: executing program 4 (id=683):
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6})
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(0x0, 0x10b, 0x1, 0x0, 0xffffffffffffffff, 0x4000)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
write(0xffffffffffffffff, &(0x7f0000000000)="5a000300010003", 0x7)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
listen(0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
pidfd_getfd(r2, r2, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000001080)="8b4ff4", 0x3, 0x10000, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10)
accept(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x30, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x80202)

10m3.576069967s ago: executing program 37 (id=683):
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6})
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(0x0, 0x10b, 0x1, 0x0, 0xffffffffffffffff, 0x4000)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
write(0xffffffffffffffff, &(0x7f0000000000)="5a000300010003", 0x7)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
listen(0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10)
syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)
pidfd_getfd(r2, r2, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000001080)="8b4ff4", 0x3, 0x10000, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10)
accept(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x30, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x80202)

9m15.154174179s ago: executing program 9 (id=757):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x130)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]})
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r3, 0xda90)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = inotify_init1(0x0)
r5 = dup(r4)
inotify_rm_watch(r5, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={<r6=>0x0, <r7=>0x0})
ppoll(0x0, 0x0, &(0x7f00000001c0)={r6, r7+10000000}, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x80)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r8, 0x40086602, &(0x7f0000000340))
mount(0x0, &(0x7f0000000000)='./mydev\x00', 0x0, 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0)
read$FUSE(r9, 0x0, 0x0)
read$FUSE(r9, &(0x7f0000009780)={0x2020}, 0x2020)

9m12.615903738s ago: executing program 9 (id=761):
syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2900004, 0x0, 0xbe, 0x0, &(0x7f00000007c0))
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
capset(0x0, &(0x7f00000002c0)={0x4, 0x6, 0x5, 0x8, 0x0, 0x2})
fanotify_init(0x8, 0x80000)
truncate(0x0, 0x7f0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f00000000c0)=""/189, 0x0, 0xbd, 0x1}, 0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x4, 0x62cf, 0x9})
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x3, 0x8, 0x48001}}, 0x44)
chdir(&(0x7f00000000c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
open(&(0x7f0000000140)='.\x00', 0x4040, 0x112)

9m9.781038471s ago: executing program 9 (id=752):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1006)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000040)=0xc0000001, 0x3)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8a81bbba17ca66d4, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000300000100001800128008000100677470000c00028008000100", @ANYRES32=r8, @ANYBLOB="0800f1c7f428f28016c53281031a", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x24000840)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

9m6.092754425s ago: executing program 9 (id=762):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000019080), 0x109100, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, 0xee01, 0x0)
keyctl$setperm(0x5, r5, 0x30925)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe4)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0)

9m2.110465041s ago: executing program 9 (id=766):
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x140)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x9, 0x2, 0x0, 0x0, 0x6)
futex(0x0, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x3000000)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x100, 0xc)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0xf00, 0x0)
fanotify_mark(r6, 0x1, 0x5000002a, r5, 0x0)
mkdirat(r4, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
r7 = open(&(0x7f0000000200)='.\x00', 0x301f00, 0x393)
renameat2(r7, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r7, &(0x7f00000002c0)='./file0\x00', 0x2)

9m0.133234104s ago: executing program 9 (id=767):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10)
r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]})
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

8m43.131133682s ago: executing program 38 (id=767):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x114f0c3a338dd13, 0x6, 0x33f6, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10)
r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r3}, 0x38)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000140)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\be \x00', 0x0, 0x5, 0x2, 0x0, 0xc, "00000000020000000000002100", '\x00', "0052008f", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "0000efffffffffffbfff00", "000003cefd70f14003556000"]})
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

2m46.85732913s ago: executing program 5 (id=1544):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)='7777\n', 0x5)

2m45.241306256s ago: executing program 5 (id=1548):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4111, 0x100f}, {&(0x7f0000001a40)=""/4074, 0xfea}, {&(0x7f0000002a40)=""/235, 0xeb}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000080)=""/63, 0x3f}], 0x5}, 0x40000000)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80)

2m43.897337899s ago: executing program 5 (id=1553):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000019080), 0x109100, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, 0xee01, 0x0)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe4)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0)

2m41.553437388s ago: executing program 5 (id=1559):
r0 = socket(0x11, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000080), 0x0, 0x24044015)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4080)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x17f)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

2m40.603048653s ago: executing program 5 (id=1566):
r0 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r0, 0x0, 0x44000)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xc900}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

2m40.209189452s ago: executing program 5 (id=1572):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg(r5, 0x0, 0x10040800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
ioctl$sock_SIOCINQ(r5, 0x541b, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x22, 0x30, &(0x7f0000000400)="f0821c123d981a1a2e7c613e359b3c0a3f3931fe41f06994eb8829966685c85e19aa", &(0x7f00000003c0)="553f2fb5dc93400d8a309712cda62e76f49bae896d8d802404394f0fdef2c2527415389d423ee2ccb489cdd5fc2e1df7"}, 0xb)

2m24.915559549s ago: executing program 39 (id=1572):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg(r5, 0x0, 0x10040800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800)
ioctl$sock_SIOCINQ(r5, 0x541b, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x22, 0x30, &(0x7f0000000400)="f0821c123d981a1a2e7c613e359b3c0a3f3931fe41f06994eb8829966685c85e19aa", &(0x7f00000003c0)="553f2fb5dc93400d8a309712cda62e76f49bae896d8d802404394f0fdef2c2527415389d423ee2ccb489cdd5fc2e1df7"}, 0xb)

10.875014539s ago: executing program 1 (id=2009):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
r1 = socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmsg(r5, 0x0, 0x10040800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6)
ioctl$sock_SIOCINQ(r5, 0x541b, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
syz_clone(0x25000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x22, 0x30, &(0x7f0000000400)="f0821c123d981a1a2e7c613e359b3c0a3f3931fe41f06994eb8829966685c85e19aa", &(0x7f00000003c0)="553f2fb5dc93400d8a309712cda62e76f49bae896d8d802404394f0fdef2c2527415389d423ee2ccb489cdd5fc2e1df7"}, 0xb)

9.761210361s ago: executing program 1 (id=2012):
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x5, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0)
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x5, 0xffffffff, 0x800, 0x9, "e54837b8052b7ff200000400", 0x10007, 0x8})

8.419709204s ago: executing program 2 (id=2017):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000680)={[{@gid}, {@gid_forget}, {@undelete}, {@longad}, {@utf8}, {@unhide}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@partition={'partition', 0x3d, 0xf}}, {@anchor={'anchor', 0x3d, 0x7}}, {@gid_forget}, {@session}, {@umask={'umask', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0xffffffff}}]}, 0x1, 0xc39, &(0x7f0000000a80)="$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")
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
syz_open_dev$usbfs(0x0, 0xffffffffffbffff8, 0x2d0081)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r1 = getpid()
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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")
timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
ptrace$getregs(0xe, r1, 0x4c1, &(0x7f0000000340)=""/202)
prlimit64(r1, 0xe, &(0x7f0000000840)={0x1000008, 0x80000100008a}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
timerfd_create(0x4, 0x363e56b3f91f32b1)
r3 = timerfd_create(0x8, 0x0)
timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x2)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac)

7.481587028s ago: executing program 2 (id=2022):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff3, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)

7.222172771s ago: executing program 2 (id=2026):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

7.197124962s ago: executing program 1 (id=2028):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b703257a3d77ba65f617bee62a9d1612402e69cc86c8fce5989be545ce26a9c4f5f2165f08000000b40d94de59edbb0507bf01e357e13bef384234e823d8137beac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f673cd22ef303bcddff402dacf8c1372a5e8ff5bc596a5375037cf99b4ee7eb6f41587c2904d5cc071c32bc429a286bddc094a"], 0x1, 0x10600, &(0x7f0000020cc0)="$eJzs3D1vW1UYB/DHCX2llAr1hQHElRBSItVWnb4IFlSgFSDaqqIwMIFju5Zb2zeK3cR0YYEBiYmFL8EEn4EFdlZY2FhAYqso8r0niEAlIHHjQH4/6eZ/7vG5j8+xvBzf6AawZx3Lfvm5EkfjUETMR8SRiKJdSUfhYhlPRsQzqWsuHZXU/3vH/og4HBFHJ8XLmpX00lO/3vv+i2+uPP3xd59++8FnP92YzYqB3eC5iOivlO31fpl5p8xbqb+x1i2yf24tZflC/3Y6z8tcby8XFdYbG+MaRZ7tlOPzlTvDSd7sNZqT7HRvFv0rg/INh2udjTrFBbcaq8V5q71cZHeYF9m5W85rnPLucFTWaaV67xflYzTayLK/PW6X61m5XWRzMEr9Zd281R5Pci1lerto5r1WMY/lLX/Mu96V7uDOOFtrrw67+SA7X6s/X6tfqNZX81Z71D5XbfRbF85lC53eZFh11G70L3byvNNr15p5fzFb6DSb1Xo9W7jUXu42Blm9XjtbO1M9v5hap7NXr72d9VrZwiRf7g7ujLq9YXYzX83KKxazpdrZFxazZ+vZjavXs+tvXr589fpb715659pLV19/JQ36y7SyhaUzS0vV+pnqUn1xqys/fb+0V9dfGle2dz17nO8PwL+2lf3/nP0/sE32//b/saf3/9Yf9v9sl+8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCe9cO+L18rGsfK80dT/2Op64mIOBURJyPiRETcf4D52L+p5vGIqKT2g8bv+9McvqpEUWFyzYF0HI6Ii+m49/jD/hQAAADg/+vzrz/8KGJ+0iz+vDjrCbGT0o82B6dVr/jJ55FpVTteFBtPqdqJjZJTcTIi9h37cUrVTkXE3JH3plTtH5nfFAf/EJUy5nZyNgAAwM7YvBOY2u4NAACAXeeTWU+A2Sju16b/xU/3gg+UkW4IHto4e2MGswMAAACmoTLrCQAAAAAPXbH///vn/817/h8AAAD8h5XP/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA3du7mNnEgigP4A9YL+6VFKz5a4bTaIweK2BJyTAFJN7lRQyREHeSWEiKIsCdSHHGI5DFO0O8nmRlb8Nczt+exBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE0PxXp5t725bZqzPzST524AAACAU3bFellOxtX5j3T9V7r0JyLmETGLiGlEnOrdB/G1ljmJiF6an/p+8aaG+4gy4fibYTq+R8S/dDz9bvtfAAAAgMu13SxWEYPjtPz423VBnFN6aDPKlVc+8vmSK21Shl1nSpu+RGYxi4hi/JgpbR4R/Z//M6W9y6A2jF4NvWron7MaAADgPOqdQLbuDQAAgA/nqusC6Ea5XpvexU9rwcNqSAuC32pnAAAAwCfU67oAAAAAoHVl/2//PwAAALhs1f5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtGlXrJfbzWLVNGd/aCbP3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLM/LykYwkAQBvt/qncK3v9WSoNudeWuCgIfM4QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCuv4+R9xqexJvl22vh1PJL8u2pMXTXmrhtLL4zb57bnfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCzPy8nAAIxGAbjW3ta7L8mL8oPevYmCDMgfCQEWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBvuvur/okhsVfVmGliyrhV1ZxVYskqseYgseWgvf3tOD94EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMUOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX2590mYiCMwuj1AAInBFACucWjBhIiBCXwkJAsuQYKoCESIlKLRtgWdiXvON7MG+w5yf2CCeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OCsd744StKkzFlSHj4v/4+TnKR8jeP96ZTN9+pvONvm88/vY82LPF21Sdo0S5wDALC4bt4pzvP+0b9dJ9Pe1L2te1e3exn61/1+GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA27NzPSxRvHAfwZ1d3v1+7dekQBWVBQtT6A3EVL0WBBf0D3hbdRFpL1ENKEHaRLkGX7l261M1Tp/6DTl0iCuq+QUEEQRi7O2OPqbFedlZ6veCZ+TgMM88zB+E9n1EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoL4ezqd1LoRwvPd33fD2y72Zvfb1+8dG0/Ho5PPF+JqNSxRCCDfna9XBDq6lm50Nw839h88PB+Jn+Od5y6trtyq1WnVJoVAotosMfmkBAHBoFZLRyPUfC5tTjWO5yRC2nu7M/+eiOrSZ/7eeDLyO7xXn/6GOrbC7pfl/+vrGxN/yf2llYbG0vLp2YX6hMledq94eGhsfGxwpjw6PlZrvU0reqgAAALC/YjLi/J+f3N3/PxLVoc38/+rlten4Xj3y/y5p/r/c3/+svf5/BpMEAAD4Rxw99e1rbo/juWIx3K2srCwNtbbbPw+3thlM9cD+S0ac/3sms54VAAAA0An19dyO/v9sVIc2+//vv185EV+zJ4TQl/T/L87cqc12bjldK+3/T1yq3Mj67/8zWD4AAAAd0peMuP9faH7/nz+dnpMPIQycadXJvwFsK///fDD+Jr5X/P3/SOeW2JXy5dbzSPP/xrsX8/vl/+a55RB6yxlNFgAAgEPv/2Q08v+nwubU0o/HV4u+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/s2DFKM0EUB/BJNvm+RjEgiKWFNhaigmAVsBAkHsJCFASPEBAPoOBZLLyDSOqk9AApvIHMZEfCNirIrobfDyb/R9hk3840eQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE9Nj8JGrov40pvV7fK98dvwPOakkumzN2sHccW6VW/bf856mc+T06fx3B62DpvrCQAAgMVT5Pk+hPDafTyJ2e6n+X8rXxNn/uHyrM7zfHXuz5ln/7iWHoqzjxv1ZvfphhAur64vdmt7wt9tM+ynHLxs38/vYfW6lS98VyedT/qHpkjH1h7crk67addbd6PR8b9U/v/5pwAAvmsnZ1nk30cx95psDICF1SlXmJv/i36zPQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU4T0AAP//F6aahA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
fallocate(r0, 0x10, 0x3e6d, 0x683)

6.918768055s ago: executing program 8 (id=2029):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000019080), 0x109100, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r4, 0xee01, 0x0)
keyctl$setperm(0x5, r4, 0x30925)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0)

5.627152435s ago: executing program 1 (id=2031):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000540)={'team0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x5c}}, 0x0)

5.583213578s ago: executing program 8 (id=2032):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
syz_clone3(&(0x7f00000036c0)={0x8000000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, &(0x7f00000004c0)=""/138, 0x0}, 0x58)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
dup2(r1, r0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000580)=0xa300010)

4.985104466s ago: executing program 8 (id=2033):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000680)={[{@gid}, {@gid_forget}, {@undelete}, {@longad}, {@utf8}, {@unhide}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@partition={'partition', 0x3d, 0xf}}, {@anchor={'anchor', 0x3d, 0x7}}, {@gid_forget}, {@session}, {@umask={'umask', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0xffffffff}}]}, 0x1, 0xc39, &(0x7f0000000a80)="$eJzs3U9sHNd9B/DfG3HFpdxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRMSOSEml/Pjb13Z19b/a9mfWMLOi3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiD945fKZs+lxjwIAeJSujn75zDn3fwD4SLn+8P//X9/zwQAAAAAAAAAAAAAAAFtJUcSTkWL26moar5531K+0a3fvjQ2PbN1tIFU9j1Tty5/62XPnL3zhhaGL3bzSnv4F/ffap+O10euXGy/P3Jmdm5yfn5xojE23b85MTO54D7vtv9mp6gA07rx+d+LWrfnGuefPb3j53uD7/U+cGLw09OzpZ7ptx4ZHRkbXm9S3fPiQtqvwOBpFnI4Uz33nx6kVEUXs/ljUH+2532ygmsSpahJjwyPVRKbaremF8sVr3QNRRDR6OjW7x2jrcxF9tUc6h+01IxbL4ZcDPlVOb3S2Nde6MTXZuNaaW2gvtGemr6XOaMv5NKKIiyliKSJW+h/cXS2K6IsU3zq+mm5ExJHucfh8VRi8/TiKfZzjDpTjbNQilopDcM4OsP4o4tVI8ZN3TsbN8pjln/hcxKtlfi/irTJfikjlB+NCxHtbfI44nPqiiL8sz/+l1TRRXQ+615UrX2l8afrWTE/b7nXll7w/PHCleEz3h4FN+Wgc8GtTPYpoVVf81fTwv9kBAAAAAAAAAAAAAAAAYK8NRBGfihSv/MefVHXFUdWlH7809IeDv9pbM/70B+ynbPt8RCwWO6vJPZoLA6+laynttJZY3emeq0cRf5rr/77xuAcDAAAAAAAAAAAAAAAAAADwkVbEjyLFi++eTEvRu6Z4e/p243rrxlRnVdju2r/dNdPX1tbWGqmTzZzjORdzLuVczrmSM4rcP2cz5/hAZ8eL+flSzuWcKznjSO6fs5lzPOdizqWcyzlXckZf7p+zmXM852LOpZzLOVdyxgFZuxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MOkiCJ+Fim++bXVFCkimhHj0cnl/sc9OgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg1J+K+G6kaPxR8/62vohI1b8dJ8tfLkTzaJkfj+ZQmS9F83LOVpV9zW88hvGzO7VUxA8jRX/97fsnPJ//WufZ/Y9BvPX19Wef7uvkke6Lg+/3P3Hi+KWhkd94ervHaasBnLrSnr57rzE2PDIy2rO5L7/7x3u2Deb3LfZm6kTE/Btvvt6ampqce/gH5UdgF90P0YPUd/BnWjvwIzxED6LvQAzj8cydj4Dy/v9epPjdd/+ze8Pv3P/r8SudZ/fv8PHTP1u//7+4eUc7vP/3be6X7//lPX2r+/+TPdtezL8bqfVF1BfuzNZORNTn33jzdPtO6/bk7cnpC2fOfHFo6Ivnz9SORtRvtacmex7tyeECAAAAAAAAAAAAAAAAeHRSEb8fKVo/XE2NiLhX1WsNXhp69vQzR+JIVW+1oW77tdHrlxsvz9yZnZucn5+caIxNt2/OTEzu9O3qVbnX2PDIvkzmAw3s8/gH6i/PzL4x1779xwtbvn6sfvnG/MJc6+bWL8dAFBHN3i2nqgGPDY9Ug55qt6arrte2LKb/5dVSEf8VKW5eaKTP5m25/n9zhf+G+v/FzTvap/r/j/VsK98zpSJ+Gil+56+ejs9W4zwWDxyz3O7vIsWpi5/J7eJo2a47hs73CnQqA8u2/xcp/ulnG9t26yGfXG97dscH9pAoz//xSPHdv/h2/GbetvH7H7Y+/8c272ifzv9TPduObfi+gl1PnXz+T0eKl558O34rb0sRi9t9/0f3uzdO5sb3v59jn87/J3q2Deb3/e29mToAAAAAAAAAAMChVktF/H2k+P5IX3ohb9vJ3/+b2Lyjffr7X5/s2TaxN+sVfeCDXR9UAAAAADggaqmIH0WK2wtv36+h3lj/3VP/+Xvr9Z/DadOr1Z/z/Vr1vQF7+ed/vQbz+47vftoAAAAAAAAAAAAAAAAAAABwoKRUxAt5PfXxqp5/Ytv11JcjxSv/81xul06U7brrwA9Wv9avzkyfvjw1NXOztdC6MTXZGJ1t3Zws+z4VKVb/9jO5b1Gtr95db76zxvv6WuxzkWLkH7ptO2uxd9cmf2q97dmy7ccixX//48a23XWsP7He9lzZ9m8ixVf/Zeu2J9bbni/bfjtS/OCrjW7bY2Xb7vejfnK97fM3Z4p9OCsAAAAAAAAAAAAAAAAAAAB81NRSEX8eKf73ztL9Wv68/n+t52nlra/3rPe/yb1qnf/Bav3/7R4/zPr/1fcKLG73rgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OGUoog3I8Xs1dW03F8+76hfaU/fvTc2PLJ1t4FU9TxStS9/6mfPnb/whReGLnbzF/ffa5+K10avX268PHNndm5yfn5yojE23b45MzG54z3stv9mp6oD0Ljz+t2JW7fmG+eeP7/h5XuD7/c/cWLw0tCzp5/pth0bHhkZ7WnTV3vod39A2mb70SjiryPFc9/5cfp+f0QRuz8WH/DZ2W8D1SROVZMYGx6pJjLVbk0vlC9e6x6IIqLR06nZPUaP4FzsSjNisRx+OeBT5fRGZ1tzrRtTk41rrbmF9kJ7Zvpa6oy2nE8jiriYIpYiYqX/wd3VoojXI8W3jq+mf+2PONI9Dp+/OvrlM+e2H0exj3PcgXKcjVrEUnEIztkB1h9F/HOk+Mk7J+Pf+iP6ovMTn4t4tczvRbwVnfOdyg/GhYj3tvgccTj1RRH/X57/S6vpnf7yetC9rlz5SuNL07dmetp2ryuH/v7wKB3wa1M9ivhBdcVfTf/uv2sAAAAAAAAAAAAAAACAA6SIX48UL757MlX1wfdritvTtxvXWzemOmV93dq/bs302traWiN1splzPOdizqWcyzlXckaR++dslllfWxvPzxdzLuVczrmSM47k/jmbOcdzLuZcyrmccyVn9OX+OZs5x3Mu5lzKuZxzJWcckNo9AAAAAAAAAAAAAAAAAADgw6Wo/knxza+tprX+zvrS49HJZeuBfuj9PAAA//9ns/d3")
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
syz_open_dev$usbfs(0x0, 0xffffffffffbffff8, 0x2d0081)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r1 = getpid()
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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")
timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
ptrace$getregs(0xe, r1, 0x4c1, &(0x7f0000000340)=""/202)
prlimit64(r1, 0xe, &(0x7f0000000840)={0x1000008, 0x80000100008a}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
timerfd_create(0x4, 0x363e56b3f91f32b1)
r3 = timerfd_create(0x8, 0x0)
timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x2)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac)

4.795520804s ago: executing program 3 (id=2034):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000500)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x16, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa0100fd, @local}, @echo_reply={0x0, 0x0, 0x0, 0x66, 0x5}}}, 0x2a)

4.24397517s ago: executing program 8 (id=2036):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, 0xee01, 0x0)
keyctl$setperm(0x5, r5, 0x30925)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe4)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0)

4.081244348s ago: executing program 3 (id=2037):
socket$tipc(0x1e, 0x2, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
unshare(0x24040400)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x40000000, 0x0, 0x100000000}, 0x0, 0x0, 0x0)

3.750255554s ago: executing program 6 (id=2038):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r1, &(0x7f0000000240)={0x1a, 0x20, 0xfc, 0x9, 0x2, 0x80, @random='\x00\x00\x00\x00\x00\a'}, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

3.560135982s ago: executing program 3 (id=2039):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

3.427420799s ago: executing program 8 (id=2040):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
read(r1, &(0x7f0000000080)=""/220, 0xdc)
shutdown(r1, 0x1)

3.321990854s ago: executing program 6 (id=2041):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0)
rename(0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

3.320176974s ago: executing program 2 (id=2042):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='-2 -3\n', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/threads\x00', 0x2, 0x0)
write(r1, &(0x7f00000002c0)='1\n', 0x2)

3.050209716s ago: executing program 8 (id=2043):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/remove\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
write(r1, &(0x7f0000000140)='1', 0x1)

3.040365767s ago: executing program 6 (id=2044):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000019080), 0x109100, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r4, 0xee01, 0x0)
keyctl$setperm(0x5, r4, 0x30925)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r5, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe4)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0)

2.12161532s ago: executing program 1 (id=2045):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, 0xee01, 0x0)
keyctl$setperm(0x5, r5, 0x30925)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe4)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0)

1.05370816s ago: executing program 3 (id=2046):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000680)={[{@gid}, {@gid_forget}, {@undelete}, {@longad}, {@utf8}, {@unhide}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@partition={'partition', 0x3d, 0xf}}, {@anchor={'anchor', 0x3d, 0x7}}, {@gid_forget}, {@session}, {@umask={'umask', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0xffffffff}}]}, 0x1, 0xc39, &(0x7f0000000a80)="$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")
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0)
syz_open_dev$usbfs(0x0, 0xffffffffffbffff8, 0x2d0081)
openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
r1 = getpid()
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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")
timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
ptrace$getregs(0xe, r1, 0x4c1, &(0x7f0000000340)=""/202)
prlimit64(r1, 0xe, &(0x7f0000000840)={0x1000008, 0x80000100008a}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
timerfd_create(0x4, 0x363e56b3f91f32b1)
r3 = timerfd_create(0x8, 0x0)
timerfd_settime(r3, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x2)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac)

1.05215174s ago: executing program 6 (id=2047):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./img\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x2, 0x0)
write(r0, &(0x7f00000004c0)='1\n\x00', 0x2)

754.137894ms ago: executing program 6 (id=2048):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x7, 0xffffffff}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
write$P9_RSTATu(r0, 0x0, 0x6e)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f0000000040)=0x3)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000500)='\x00', 0x1})

583.934372ms ago: executing program 1 (id=2049):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, 0xee01, 0x0)
keyctl$setperm(0x5, r5, 0x30925)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe4)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0)

513.295465ms ago: executing program 2 (id=2050):
r0 = socket$inet(0x2, 0x2, 0x1)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="2a00330090000000080211000001080211000000fffffffffffff00f04"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

485.993526ms ago: executing program 6 (id=2051):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8947, &(0x7f0000000040)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000019080), 0x109100, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, 0xee01, 0x0)
keyctl$setperm(0x5, r5, 0x30925)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r6, &(0x7f00000004c0)=ANY=[], 0x102)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0xfffffffffffffffd, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0xd, 0xffffffeffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x3, 0xb7, 0x3, 0xffffff7e}}, 0xe4)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x8082, 0x0)

447.308059ms ago: executing program 3 (id=2052):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r0, &(0x7f0000000900)='1', 0x1)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)

261.316408ms ago: executing program 2 (id=2053):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd2(0xe5c, 0x80000)
r3 = eventfd2(0x42000006, 0x801)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x7, 0x2, r2})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x1, 0x2, r3})

0s ago: executing program 3 (id=2054):
connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10)

kernel console output (not intermixed with test programs):

T8584] erofs: (device loop5): mounted with root inode @ nid 36.
[  756.865933][ T8597] futex_wake_op: syz.5.765 tries to shift op by 144; fix this program
[  756.885838][ T8597] loop5: detected capacity change from 0 to 256
[  756.912399][ T8597] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  756.929952][   T26] kauditd_printk_skb: 454 callbacks suppressed
[  756.929966][   T26] audit: type=1800 audit(1789681839.826:513): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.765" name="file1" dev="loop5" ino=1048710 res=0 errno=0
[  759.227755][ T8613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.768'.
[  759.241922][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.768'.
[  759.444020][ T8610] loop1: detected capacity change from 0 to 4096
[  759.467109][ T8610] EXT4-fs: inline encryption not supported
[  759.473099][ T8610] EXT4-fs: Ignoring removed mblk_io_submit option
[  759.545080][ T8610] EXT4-fs: inline encryption not supported
[  759.583361][ T8622] binder: 8620:8622 ioctl c0306201 0 returned -14
[  760.505940][ T8610] ext4: Unknown parameter 'in'
[  760.592278][   T26] audit: type=1800 audit(1789681843.486:514): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.769" name="c_srate" dev="configfs" ino=49219 res=0 errno=0
[  761.654791][ T8628] usb0: HOST MAC 36:91:87:94:39:27
[  761.660451][ T8628] usb0: MAC da:e9:61:23:8d:7b
[  766.534049][ T8656] block device autoloading is deprecated and will be removed.
[  766.612915][ T8657] loop6: detected capacity change from 0 to 64
[  768.138671][ T8656] syz.1.776: attempt to access beyond end of device
[  768.138671][ T8656] md32: rw=2048, sector=0, nr_sectors = 8 limit=0
[  770.733453][ T8677] loop5: detected capacity change from 0 to 256
[  770.762151][ T8677] FAT-fs (loop5): Unrecognized mount option "rø¶°" or missing value
[  771.148713][ T8679] loop1: detected capacity change from 0 to 512
[  772.659359][ T8679] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #4: comm syz.1.779: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  772.677073][    C1] vkms_vblank_simulate: vblank timer overrun
[  773.252066][ T8679] EXT4-fs error (device loop1): ext4_quota_enable:7052: comm syz.1.779: Bad quota inode: 4, type: 1
[  773.274629][ T8679] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  773.291227][ T8679] EXT4-fs (loop1): mount failed
[  773.862774][ T8699] netlink: 32 bytes leftover after parsing attributes in process `syz.5.782'.
[  774.841005][ T8705] hugetlbfs: syz.5.785 (8705): Using mlock ulimits for SHM_HUGETLB is obsolete
[  774.862687][ T8705] dns_resolver: Unsupported server list version (0)
[  776.880117][ T8709] binder: 8695:8709 ioctl 4018620d 0 returned -22
[  779.170385][   T63] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.307031][   T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  779.318773][   T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  779.328820][   T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  779.338461][   T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  779.396870][   T49] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  779.409110][   T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  779.677680][   T63] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.463634][ T8717] lo speed is unknown, defaulting to 1000
[  780.638100][   T63] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  780.664774][ T4282] Bluetooth: Wrong link type (-22)
[  781.594379][ T4282] Bluetooth: hci1: command 0x0409 tx timeout
[  783.131546][   T63] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  783.365740][ T8746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.787'.
[  783.522970][ T8748] loop1: detected capacity change from 0 to 128
[  783.560859][ T8748] EXT4-fs (loop1): Test dummy encryption mode enabled
[  783.645009][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[  783.993225][ T8748] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  784.004320][ T8748] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  784.862586][ T8751] netlink: 40 bytes leftover after parsing attributes in process `syz.8.791'.
[  785.082646][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.8.791'.
[  785.735302][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[  786.422836][ T8147] EXT4-fs (loop1): unmounting filesystem.
[  786.510470][ T8757] loop8: detected capacity change from 0 to 256
[  786.657449][ T8757] FAT-fs (loop8): Unrecognized mount option "rø¶°" or missing value
[  787.261645][ T8768] xt_CT: You must specify a L4 protocol and not use inversions on it
[  787.549653][ T8774] Cannot find del_set index 4 as target
[  787.632463][ T8776] overlayfs: conflicting options: nfs_export=on,index=off
[  787.804903][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[  790.698309][   T63] netdevsim netdevsim12 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.716573][ T6486] libceph: connect (1)[c::]:6789 error -97
[  790.722549][ T6486] libceph: mon0 (1)[c::]:6789 connect error
[  790.767068][ T6486] libceph: connect (1)[c::]:6789 error -97
[  790.775450][ T6486] libceph: mon0 (1)[c::]:6789 connect error
[  790.947870][ T8717] chnl_net:caif_netlink_parms(): no params data found
[  790.978326][ T8779] ceph: No mds server is up or the cluster is laggy
[  791.047465][ T8794] xt_CT: You must specify a L4 protocol and not use inversions on it
[  791.723536][ T6486] libceph: connect (1)[c::]:6789 error -97
[  791.729777][ T6486] libceph: mon0 (1)[c::]:6789 connect error
[  791.866874][ T8798] ubi: mtd0 is already attached to ubi0
[  792.748617][ T6486] libceph: connect (1)[c::]:6789 error -97
[  792.754724][ T6486] libceph: mon0 (1)[c::]:6789 connect error
[  792.881126][ T8799] loop8: detected capacity change from 0 to 2048
[  794.486032][ T8799] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  794.571027][ T8810] loop6: detected capacity change from 0 to 128
[  796.065605][ T8799] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  796.112999][ T8810] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  796.122568][ T8810] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  796.148074][ T8809] FAULT_INJECTION: forcing a failure.
[  796.148074][ T8809] name failslab, interval 1, probability 0, space 0, times 0
[  796.160802][ T8809] CPU: 0 PID: 8809 Comm: syz.6.801 Not tainted syzkaller #0
[  796.168137][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  796.178232][ T8809] Call Trace:
[  796.181557][ T8809]  <TASK>
[  796.184521][ T8809]  dump_stack_lvl+0x188/0x24e
[  796.189241][ T8809]  ? show_regs_print_info+0x12/0x12
[  796.194471][ T8809]  ? load_image+0x410/0x410
[  796.199236][ T8809]  ? __might_sleep+0xd0/0xd0
[  796.203923][ T8809]  ? __lock_acquire+0x7c40/0x7c40
[  796.208998][ T8809]  ? verify_lock_unused+0x140/0x140
[  796.214242][ T8809]  should_fail_ex+0x390/0x4c0
[  796.218970][ T8809]  should_failslab+0x5/0x20
[  796.223504][ T8809]  slab_pre_alloc_hook+0x59/0x300
[  796.228559][ T8809]  ? io_uring_alloc_task_context+0xaa/0x5b1
[  796.234489][ T8809]  __kmem_cache_alloc_node+0x4f/0x270
[  796.239957][ T8809]  ? io_uring_alloc_task_context+0xaa/0x5b1
[  796.245916][ T8809]  kmalloc_trace+0x26/0xe0
[  796.250376][ T8809]  io_uring_alloc_task_context+0xaa/0x5b1
[  796.256139][ T8809]  ? io_uring_show_cred+0x4d9/0x4d9
[  796.261401][ T8809]  ? __lock_acquire+0x7c40/0x7c40
[  796.266480][ T8809]  ? __rwlock_init+0x140/0x140
[  796.271283][ T8809]  __io_uring_add_tctx_node+0x34b/0x4f0
[  796.276883][ T8809]  ? __io_uring_free+0x1f0/0x1f0
[  796.281858][ T8809]  ? alloc_fd+0x590/0x640
[  796.286238][ T8809]  io_uring_install_fd+0x32/0x70
[  796.291210][ T8809]  io_uring_create+0x8c8/0xd6c
[  796.296018][ T8809]  __x64_sys_io_uring_setup+0x21b/0x230
[  796.301610][ T8809]  ? __ia32_sys_io_uring_enter+0xf0/0xf0
[  796.307298][ T8809]  ? lockdep_hardirqs_on+0x94/0x140
[  796.312524][ T8809]  do_syscall_64+0x4c/0xa0
[  796.316970][ T8809]  ? clear_bhb_loop+0x60/0xb0
[  796.321676][ T8809]  ? clear_bhb_loop+0x60/0xb0
[  796.326387][ T8809]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  796.332315][ T8809] RIP: 0033:0x7f2a0319e159
[  796.336760][ T8809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  796.356393][ T8809] RSP: 002b:00007f2a03fff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9
[  796.364834][ T8809] RAX: ffffffffffffffda RBX: 00007f2a03426090 RCX: 00007f2a0319e159
[  796.372829][ T8809] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000bbc
[  796.380825][ T8809] RBP: 00007f2a0323506b R08: 0000000000000000 R09: 0000000000000000
[  796.388818][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  796.396812][ T8809] R13: 00007f2a03426128 R14: 00007f2a03426090 R15: 00007ffc5bda0858
[  796.404829][ T8809]  </TASK>
[  796.445100][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.452592][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state
[  796.502165][ T8717] device bridge_slave_0 entered promiscuous mode
[  796.557601][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.591237][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state
[  796.606670][ T8816] netlink: 40 bytes leftover after parsing attributes in process `syz.5.803'.
[  796.672057][ T6037] EXT4-fs (loop6): unmounting filesystem.
[  796.798486][ T8717] device bridge_slave_1 entered promiscuous mode
[  797.003378][ T8822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.803'.
[  798.838156][ T8820] netlink: 36 bytes leftover after parsing attributes in process `syz.8.804'.
[  799.347332][ T8820] loop8: detected capacity change from 0 to 128
[  799.355746][ T8820] EXT4-fs (loop8): Test dummy encryption mode enabled
[  799.404328][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  799.439850][ T8820] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  799.448936][ T8820] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  799.737466][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  799.916080][ T7117] EXT4-fs (loop8): unmounting filesystem.
[  800.006028][ T8717] team0: Port device team_slave_0 added
[  800.333680][ T8717] team0: Port device team_slave_1 added
[  800.403878][ T8844] xt_CT: You must specify a L4 protocol and not use inversions on it
[  801.572140][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  801.598125][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  801.686986][ T8864] xt_CT: You must specify a L4 protocol and not use inversions on it
[  801.905941][ T8859] binder: 8857:8859 ioctl c0306201 0 returned -14
[  802.088982][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  802.483844][ T8851] serio: Serial port ptm0
[  802.484003][ T8856] netlink: 48 bytes leftover after parsing attributes in process `syz.6.817'.
[  802.564523][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  802.571864][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  802.602101][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  802.840146][ T8877] loop8: detected capacity change from 0 to 64
[  803.152018][ T8717] device hsr_slave_0 entered promiscuous mode
[  803.172915][ T8717] device hsr_slave_1 entered promiscuous mode
[  803.217144][ T8717] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  803.337714][ T8717] Cannot create hsr debugfs directory
[  803.902823][ T7117] hfs: node 4:3 still has 1 user(s)!
[  804.309866][ T8891] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  805.094644][ T8900] dns_resolver: Unsupported server list version (0)
[  805.666862][ T8907] loop5: detected capacity change from 0 to 512
[  805.947310][ T8907] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #4: comm syz.5.826: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  805.981575][ T8907] EXT4-fs error (device loop5): ext4_quota_enable:7052: comm syz.5.826: Bad quota inode: 4, type: 1
[  806.003292][ T8907] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  806.020158][ T8907] EXT4-fs (loop5): mount failed
[  806.194092][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.816'.
[  806.344711][ T8919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.816'.
[  808.136882][ T8916] xt_CT: You must specify a L4 protocol and not use inversions on it
[  810.155708][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  810.162080][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  810.380266][ T8935] loop1: detected capacity change from 0 to 1024
[  810.554305][ T8935] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  810.879115][ T8941] xt_CT: You must specify a L4 protocol and not use inversions on it
[  811.074684][ T8945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.823'.
[  811.522319][ T8949] loop6: detected capacity change from 0 to 64
[  812.576320][ T6037] hfs: node 4:3 still has 1 user(s)!
[  812.779363][ T8717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  812.836675][ T8935] lo speed is unknown, defaulting to 1000
[  813.210280][ T8963] loop6: detected capacity change from 0 to 40427
[  813.226475][ T8964] binder: 8960:8964 ioctl c0306201 0 returned -14
[  813.250351][ T8963] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  813.257266][ T8963] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  813.482409][ T8147] EXT4-fs (loop1): unmounting filesystem.
[  813.601403][ T8963] F2FS-fs (loop6): invalid crc value
[  813.682643][ T8963] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  813.951284][ T8963] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  813.960134][ T8963] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  816.238450][ T8717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  816.313033][ T8980] tipc: MTU too low for tipc bearer
[  818.270391][ T8717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  818.686116][ T8995] loop8: detected capacity change from 0 to 512
[  818.865284][ T9000] loop1: detected capacity change from 0 to 128
[  818.879752][ T8995] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #4: comm syz.8.830: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  818.898914][ T8995] EXT4-fs error (device loop8): ext4_quota_enable:7052: comm syz.8.830: Bad quota inode: 4, type: 1
[  818.912281][ T8995] EXT4-fs warning (device loop8): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  818.948306][ T8995] EXT4-fs (loop8): mount failed
[  819.007030][ T8717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.345001][   T26] audit: type=1326 audit(1789681902.156:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1acf9e159 code=0x7ffc0000
[  819.369079][    C1] vkms_vblank_simulate: vblank timer overrun
[  819.915689][ T6925] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  820.073320][   T26] audit: type=1326 audit(1789681902.156:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1acf9e159 code=0x7ffc0000
[  820.107909][   T63] device hsr_slave_0 left promiscuous mode
[  820.139870][   T63] device hsr_slave_1 left promiscuous mode
[  820.201508][   T26] audit: type=1326 audit(1789681902.156:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1acf9e159 code=0x7ffc0000
[  820.215840][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  820.243901][   T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[  820.275204][   T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  820.284462][   T26] audit: type=1326 audit(1789681902.156:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb1acf9e159 code=0x7ffc0000
[  820.295126][   T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[  820.339084][   T26] audit: type=1326 audit(1789681902.166:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1acf9e159 code=0x7ffc0000
[  820.380426][   T63] device bridge_slave_1 left promiscuous mode
[  820.394547][   T63] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.413015][   T26] audit: type=1326 audit(1789681902.166:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1acf9e159 code=0x7ffc0000
[  820.437711][    C1] vkms_vblank_simulate: vblank timer overrun
[  820.464327][   T26] audit: type=1326 audit(1789681902.176:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1acf9e159 code=0x7ffc0000
[  820.475820][   T63] device bridge_slave_0 left promiscuous mode
[  820.488289][    C1] vkms_vblank_simulate: vblank timer overrun
[  820.509383][   T26] audit: type=1326 audit(1789681902.176:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb1acf9e159 code=0x7ffc0000
[  820.544204][   T63] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.594291][   T26] audit: type=1326 audit(1789681902.176:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1acf9e159 code=0x7ffc0000
[  820.618234][    C1] vkms_vblank_simulate: vblank timer overrun
[  820.666721][   T63] device veth1_macvtap left promiscuous mode
[  820.673289][   T63] device veth0_macvtap left promiscuous mode
[  820.680366][   T26] audit: type=1326 audit(1789681902.176:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8999 comm="syz.1.831" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1acf9e159 code=0x7ffc0000
[  820.691000][   T63] device veth1_vlan left promiscuous mode
[  820.726540][   T63] device veth0_vlan left promiscuous mode
[  820.844828][ T4286] Bluetooth: hci0: command 0x0406 tx timeout
[  823.140098][   T63] team0 (unregistering): Port device team_slave_1 removed
[  823.197936][   T63] team0 (unregistering): Port device team_slave_0 removed
[  823.256469][   T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  823.319782][   T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  823.761933][   T63] bond0 (unregistering): Released all slaves
[  824.046684][ T8717] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  824.096633][ T8717] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  824.135460][ T8717] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  824.185402][ T8717] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  824.441000][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0
[  824.462166][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  824.477211][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  824.507760][ T8717] 8021q: adding VLAN 0 to HW filter on device team0
[  824.620280][ T8717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  824.630857][ T8717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  824.650192][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  824.665674][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  824.697622][ T8102] bridge0: port 1(bridge_slave_0) entered blocking state
[  824.704832][ T8102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  824.744792][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  824.753764][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  824.792080][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state
[  824.799386][ T8102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  824.809921][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  824.819184][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  824.828729][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  824.838212][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  824.847717][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  824.859348][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  824.870851][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  824.897725][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  824.918261][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  824.935158][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  824.943912][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  824.962086][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  824.974038][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  825.388887][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  825.397494][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  825.418661][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0
[  825.468395][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  825.480393][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  825.510953][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  825.528643][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  825.541886][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  825.559180][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  825.573949][ T8717] device veth0_vlan entered promiscuous mode
[  825.612098][ T8717] device veth1_vlan entered promiscuous mode
[  825.676396][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  825.686034][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  825.697875][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  825.712031][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  825.732947][ T8717] device veth0_macvtap entered promiscuous mode
[  825.756364][ T8717] device veth1_macvtap entered promiscuous mode
[  825.815853][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  825.830146][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.854234][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  825.873330][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.885752][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  825.911095][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.925744][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  825.938620][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.949350][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  825.960263][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.970910][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  825.981715][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.991958][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  826.005610][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.018180][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0
[  826.028749][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  826.040150][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  826.055459][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  826.065181][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  826.076727][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.088223][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.099623][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.110778][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.121114][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.132092][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.142783][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.155791][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.167516][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.178383][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.188573][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.200485][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.211070][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.221938][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.233711][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1
[  826.258081][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  826.275580][ T8129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  826.296548][ T8717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  826.319522][ T8717] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  826.328824][ T8717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  826.341558][ T8717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  826.511212][ T8184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  826.533482][ T8184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.552353][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  826.578907][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  826.587688][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  826.598230][ T8184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  827.062671][ T9073] xt_CT: You must specify a L4 protocol and not use inversions on it
[  827.717780][ T9078] netlink: 'syz.1.846': attribute type 4 has an invalid length.
[  830.199022][ T9084] loop5: detected capacity change from 0 to 512
[  830.254045][ T9079] netlink: 'syz.1.846': attribute type 4 has an invalid length.
[  830.498241][ T9084] EXT4-fs: Mount option(s) incompatible with ext2
[  830.597927][ T9088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.833'.
[  831.314323][ T9093] usb usb7: usbfs: process 9093 (syz.5.834) did not claim interface 0 before use
[  831.612810][ T9096] xt_CT: You must specify a L4 protocol and not use inversions on it
[  832.070861][ T9088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.833'.
[  833.059449][ T9111] NILFS (nullb0): couldn't find nilfs on the device
[  833.768355][ T9105] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found
[  837.109294][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.6.848'.
[  837.383363][ T9136] loop5: detected capacity change from 0 to 512
[  838.730519][ T9129] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  838.766643][ T9136] EXT4-fs error (device loop5): __ext4_iget:5102: inode #11: block 16777240: comm syz.5.842: invalid block
[  838.779010][ T9136] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.842: couldn't read orphan inode 11 (err -117)
[  838.795538][ T9136] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  840.673522][ T5644] EXT4-fs (loop5): unmounting filesystem.
[  840.727271][ T9145] loop2: detected capacity change from 0 to 1024
[  841.359391][ T9150] CIFS: Attempting to mount \\127.0.0.1\share
[  841.800353][ T9166] SET target dimension over the limit!
[  842.642374][ T9174] futex_wake_op: syz.2.855 tries to shift op by 144; fix this program
[  842.701968][ T9174] loop2: detected capacity change from 0 to 256
[  842.763294][ T9174] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  842.830711][   T26] kauditd_printk_skb: 282 callbacks suppressed
[  842.830749][   T26] audit: type=1800 audit(1789681925.716:807): pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.855" name="file1" dev="loop2" ino=1048714 res=0 errno=0
[  843.641882][ T9180] netlink: 40 bytes leftover after parsing attributes in process `syz.6.856'.
[  844.040361][ T9186] netlink: 16 bytes leftover after parsing attributes in process `syz.6.856'.
[  844.484759][ T9150] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)'
[  844.652094][ T9150] CIFS: VFS: cifs_mount failed w/return code = -512
[  844.758011][ T9189] serio: Serial port ptm0
[  844.817083][ T9193] netlink: 48 bytes leftover after parsing attributes in process `syz.2.858'.
[  847.376373][ T9218] using random self ethernet address
[  847.381711][ T9218] using random host ethernet address
[  847.394277][   T26] audit: type=1800 audit(1789681930.286:808): pid=9218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.863" name="host_addr" dev="configfs" ino=51386 res=0 errno=0
[  848.124044][ T9227] syz.2.864: attempt to access beyond end of device
[  848.124044][ T9227] loop2: rw=0, sector=16, nr_sectors = 2 limit=0
[  849.284796][ T9232] loop6: detected capacity change from 0 to 512
[  849.293485][ T9232] EXT4-fs (loop6): bad s_min_extra_isize: 544
[  849.934777][ T6244] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  853.706095][ T9252] loop8: detected capacity change from 0 to 8
[  853.948129][ T4282] Bluetooth: Frame is too long (len 10, expected len 4)
[  853.997902][ T9252] unable to read xattr id index table
[  854.021061][ T9260] loop2: detected capacity change from 0 to 65
[  854.110260][ T9260] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  854.146840][ T9260] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  854.326355][ T9260] BFS-fs: bfs_fill_super(): Last block not available on loop2: 18446744073709551615
[  854.656106][ T9269] xt_CT: You must specify a L4 protocol and not use inversions on it
[  855.391930][ T9273] loop6: detected capacity change from 0 to 2048
[  855.459287][ T9273] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  855.565271][ T9273] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  857.232929][ T9282] tipc: MTU too low for tipc bearer
[  858.757224][ T9286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'.
[  858.894438][ T9286] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  864.736463][ T9315] xt_CT: You must specify a L4 protocol and not use inversions on it
[  865.860252][ T9331] xt_CT: You must specify a L4 protocol and not use inversions on it
[  865.998238][ T9313] device bond1 entered promiscuous mode
[  866.035849][ T9334] loop6: detected capacity change from 0 to 128
[  866.123401][ T9313] 8021q: adding VLAN 0 to HW filter on device bond1
[  866.195065][ T9334] affs: No valid root block on device loop6
[  868.208946][ T9349] loop6: detected capacity change from 0 to 2048
[  868.641756][   T26] audit: type=1326 audit(1789681951.536:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9352 comm="syz.5.895" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa75db9e159 code=0x0
[  868.739115][ T9363] loop2: detected capacity change from 0 to 64
[  868.765716][ T9349] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  869.047518][ T9349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  869.792880][ T8717] hfs: node 4:3 still has 1 user(s)!
[  870.417113][ T9378] block device autoloading is deprecated and will be removed.
[  870.574233][ T8313] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[  872.237363][ T8313] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  872.281688][ T8313] usb 2-1: config 1 interface 0 has no altsetting 0
[  872.329487][ T8313] usb 2-1: string descriptor 0 read error: -22
[  872.467558][ T9385] loop8: detected capacity change from 0 to 2048
[  872.506098][ T9385] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  872.570918][ T9385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  872.654866][ T8313] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  872.664015][ T8313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.697004][ T9372] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  872.776683][ T9394] xt_CT: You must specify a L4 protocol and not use inversions on it
[  873.587563][ T8313] usb 2-1: can't set config #1, error -71
[  873.615494][ T8313] usb 2-1: USB disconnect, device number 2
[  873.688429][ T9401] xt_CT: You must specify a L4 protocol and not use inversions on it
[  874.139616][ T9406] loop6: detected capacity change from 0 to 128
[  874.269678][ T9379] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  874.634653][   T26] audit: type=1800 audit(1789681957.506:810): pid=9419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.906" name="host_addr" dev="configfs" ino=52399 res=0 errno=0
[  875.201591][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  875.208533][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  875.496502][ T9423] loop8: detected capacity change from 0 to 2048
[  875.536550][ T9423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  876.450451][ T9435] nvmet: adding nsid 1 to subsystem testsubsys
[  878.310695][ T9460] xt_CT: You must specify a L4 protocol and not use inversions on it
[  879.074360][   T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  879.093810][ T9463] kAFS: No cell specified
[  879.264274][   T22] usb 2-1: Using ep0 maxpacket: 16
[  879.275713][   T22] usb 2-1: unable to get BOS descriptor or descriptor too short
[  879.287674][   T22] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  879.326257][   T22] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  879.416359][   T22] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  879.427987][   T22] usb 2-1: too many endpoints for config 1 interface 1 altsetting 151: 235, using maximum allowed: 30
[  879.439923][   T22] usb 2-1: config 1 interface 1 altsetting 151 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  879.475005][   T22] usb 2-1: config 1 interface 1 altsetting 151 has 1 endpoint descriptor, different from the interface descriptor's value: 235
[  879.610022][   T22] usb 2-1: config 1 interface 1 has no altsetting 1
[  879.667232][   T22] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[  879.677661][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.688163][   T22] usb 2-1: Product: syz
[  879.692744][   T22] usb 2-1: Manufacturer: syz
[  879.699893][   T22] usb 2-1: SerialNumber: syz
[  879.983373][   T22] usb 2-1: 1:151 : invalid UAC_AS_GENERAL desc
[  880.055285][   T22] usb 2-1: 0:2 : does not exist
[  880.289783][   T22] usb 2-1: USB disconnect, device number 3
[  881.004712][ T4286] Bluetooth: hci1: command 0x0406 tx timeout
[  884.493153][ T9379] udevd[9379]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  885.837245][ T9525] loop6: detected capacity change from 0 to 65
[  886.043213][ T9525] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway
[  887.565609][ T4282] Bluetooth: Wrong link type (-71)
[  889.059625][ T9531] loop8: detected capacity change from 0 to 32768
[  889.149802][ T9548] loop2: detected capacity change from 0 to 2048
[  889.227568][ T9548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  889.265638][ T9551] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  898.696748][ T9668] xt_CT: You must specify a L4 protocol and not use inversions on it
[  900.020753][ T9673] loop8: detected capacity change from 0 to 164
[  900.112002][ T9673] rock: directory entry would overflow storage
[  900.360665][ T9679] xt_CT: You must specify a L4 protocol and not use inversions on it
[  902.587068][ T9673] rock: sig=0x4543, size=28, remaining=18
[  906.131993][ T9688] loop2: detected capacity change from 0 to 2048
[  907.619977][ T9793] loop6: detected capacity change from 0 to 2048
[  907.963079][ T9379] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  907.997432][ T9823] loop8: detected capacity change from 0 to 64
[  908.410060][ T9823] hfs: get root inode failed
[  908.744816][ T9381] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  909.107082][ T4282] Bluetooth: min 9 > max 0
[  909.364823][ T9859] loop2: detected capacity change from 0 to 1764
[  909.513237][ T9857] loop8: detected capacity change from 0 to 8192
[  909.588965][ T9857]  loop8: AHDI p1 p2 p3 p4
[  909.610795][ T9867] loop2: detected capacity change from 0 to 128
[  909.617853][ T9857] loop8: p1 start 65535 is beyond EOD, truncated
[  909.635565][ T9857] loop8: p2 start 15400960 is beyond EOD, truncated
[  909.642330][ T9857] loop8: p3 start 1638400 is beyond EOD, truncated
[  909.666594][ T9867] affs: Unrecognized mount option "reserved=000000021990" or missing value
[  909.679749][ T9867] affs: Error parsing options
[  909.984563][ T9873] loop6: detected capacity change from 0 to 1024
[  911.292508][ T4282] Bluetooth: hci5: command 0x2021 tx timeout
[  911.540082][ T9903] dns_resolver: Unsupported server list version (0)
[  911.758589][ T4282] Bluetooth: hci0: Malformed LE Event: 0x1b
[  912.607245][ T9910] loop6: detected capacity change from 0 to 128
[  913.258612][   T26] audit: type=1326 audit(1789681995.946:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0319e159 code=0x7ffc0000
[  915.019237][   T26] audit: type=1326 audit(1789681995.946:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0319e159 code=0x7ffc0000
[  915.134589][   T26] audit: type=1326 audit(1789681995.946:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0319e159 code=0x7ffc0000
[  915.175301][   T26] audit: type=1326 audit(1789681995.946:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a0319e159 code=0x7ffc0000
[  915.279359][ T9927] Invalid option length (1048488) for dns_resolver key
[  915.296804][   T26] audit: type=1326 audit(1789681995.956:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0319e159 code=0x7ffc0000
[  915.325965][ T4282] Bluetooth: hci0: command 0x0406 tx timeout
[  915.471758][   T26] audit: type=1326 audit(1789681995.966:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0319e159 code=0x7ffc0000
[  915.564652][   T26] audit: type=1326 audit(1789681995.966:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0319e159 code=0x7ffc0000
[  915.589946][   T26] audit: type=1326 audit(1789681995.966:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a0319e159 code=0x7ffc0000
[  915.718050][ T9936] xt_CT: You must specify a L4 protocol and not use inversions on it
[  916.228961][ T9942] dccp_invalid_packet: P.Data Offset(10) too large
[  916.361883][   T26] audit: type=1326 audit(1789681995.966:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0319e159 code=0x7ffc0000
[  916.387816][   T26] audit: type=1326 audit(1789681995.966:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9909 comm="syz.6.978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a0319e159 code=0x7ffc0000
[  919.892566][T10016] xt_CT: You must specify a L4 protocol and not use inversions on it
[  920.433611][T10026] loop8: detected capacity change from 0 to 512
[  920.737356][T10026] EXT4-fs: Mount option(s) incompatible with ext2
[  922.184289][T10035] usb usb7: usbfs: process 10035 (syz.8.1000) did not claim interface 0 before use
[  925.749940][T10043] loop6: detected capacity change from 0 to 2048
[  925.777596][T10043] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=301129, location=301129
[  925.811608][T10043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  927.837149][   T26] kauditd_printk_skb: 58 callbacks suppressed
[  927.837165][   T26] audit: type=1800 audit(1789682010.736:879): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1006" name="file1" dev="loop6" ino=1367 res=0 errno=0
[  929.194072][T10109] loop8: detected capacity change from 0 to 64
[  929.263923][T10109] hfs: can't find a HFS filesystem on dev loop8
[  929.390562][T10114] loop6: detected capacity change from 0 to 512
[  929.464467][T10114] EXT4-fs: Mount option(s) incompatible with ext2
[  931.765535][T10140] CIFS: Attempting to mount \\127.0.0.1\share
[  932.370207][T10149] loop8: detected capacity change from 0 to 4096
[  932.444718][T10146] CIFS: VFS: smb2_get_data_area_len: invalid data area (off=16450 len=256)
[  932.779687][ T4282] Bluetooth: latency 60968 > 499
[  933.385393][T10149] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  933.402843][T10160] loop6: detected capacity change from 0 to 512
[  933.403030][T10140] CIFS: VFS: cifs_mount failed w/return code = -512
[  933.417435][T10160] EXT4-fs: Ignoring removed orlov option
[  933.433010][T10160] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  933.575704][T10149] ntfs3: loop8: Failed to load $Extend.
[  933.724890][ T6037] EXT4-fs (loop6): unmounting filesystem.
[  934.001144][   T26] audit: type=1800 audit(1789682016.896:880): pid=10149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1026" name="file2" dev="loop8" ino=31 res=0 errno=0
[  934.844340][ T4282] Bluetooth: hci5: command 0x2021 tx timeout
[  934.849119][T10177] random: crng reseeded on system resumption
[  936.527555][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  936.533977][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  936.800427][T10185] xt_CT: You must specify a L4 protocol and not use inversions on it
[  946.253383][T10344] loop8: detected capacity change from 0 to 2048
[  946.319926][T10344] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  946.434659][T10351] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  950.616830][   T26] audit: type=1400 audit(1789682033.506:881): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=10409 comm="syz.6.1052"
[  950.834212][T10424] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  952.485225][   T26] audit: type=1326 audit(1789682035.386:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.5.1072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75db9e159 code=0x7ffc0000
[  952.714761][   T26] audit: type=1326 audit(1789682035.386:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.5.1072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75db9e159 code=0x7ffc0000
[  952.874724][T10470] loop8: detected capacity change from 0 to 64
[  952.944349][T10469] loop6: detected capacity change from 0 to 64
[  952.989164][   T26] audit: type=1326 audit(1789682035.486:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.5.1072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fa75db9e159 code=0x7ffc0000
[  953.877903][   T26] audit: type=1326 audit(1789682035.486:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.5.1072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75db9e159 code=0x7ffc0000
[  954.536355][   T26] audit: type=1326 audit(1789682035.486:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.5.1072" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75db9e159 code=0x7ffc0000
[  955.927851][T10528] comedi comedi1: no devices specified
[  956.527362][T10535] loop8: detected capacity change from 0 to 1024
[  957.851638][T10583] loop8: detected capacity change from 0 to 512
[  958.187806][T10583] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  958.445660][T10583] EXT4-fs (loop8): orphan cleanup on readonly fs
[  958.668082][T10583] Quota error (device loop8): find_block_dqentry: Quota for id 0 referenced but not present
[  958.792350][T10583] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  958.964349][T10583] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.1086: Failed to acquire dquot type 1
[  959.219975][T10583] EXT4-fs (loop8): Remounting filesystem read-only
[  959.321275][T10583] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1086: bg 0: block 40: padding at end of block bitmap is not set
[  959.399251][T10583] EXT4-fs (loop8): Remounting filesystem read-only
[  959.424250][T10583] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  959.472298][T10583] EXT4-fs (loop8): Remounting filesystem read-only
[  959.504790][T10583] EXT4-fs (loop8): 1 truncate cleaned up
[  959.541582][T10583] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  959.759789][ T7117] EXT4-fs (loop8): unmounting filesystem.
[  959.964873][T10603] loop8: detected capacity change from 0 to 512
[  960.029451][T10603] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  962.240040][T10603] EXT4-fs (loop8): orphan cleanup on readonly fs
[  962.414404][T10603] EXT4-fs error (device loop8): ext4_ext_check_inode:520: inode #4: comm syz.8.1091: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  962.475699][T10603] EXT4-fs error (device loop8): ext4_quota_enable:7052: comm syz.8.1091: Bad quota inode: 4, type: 1
[  962.495253][T10603] EXT4-fs warning (device loop8): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  962.520313][T10603] EXT4-fs (loop8): Cannot turn on quotas: error -117
[  962.604403][T10603] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  963.196573][ T7117] EXT4-fs (loop8): unmounting filesystem.
[  963.462919][T10653] loop8: detected capacity change from 0 to 256
[  963.867670][T10669] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1101'.
[  963.911597][T10669] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1101'.
[  963.960463][T10669] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1101'.
[  965.474227][    T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  967.725989][    T7] usb 3-1: config 0 has an invalid interface number: 2 but max is 0
[  967.744214][    T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  967.819295][    T7] usb 3-1: config 0 has no interface number 0
[  967.864064][    T7] usb 3-1: config 0 interface 2 has no altsetting 0
[  967.977339][    T7] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  968.095799][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.204426][    T7] usb 3-1: Product: syz
[  968.283216][    T7] usb 3-1: Manufacturer: syz
[  968.359134][    T7] usb 3-1: SerialNumber: syz
[  968.411469][    T7] usb 3-1: config 0 descriptor??
[  968.533550][    T7] usb 3-1: can't set config #0, error -71
[  968.539967][T10286] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  968.606719][    T7] usb 3-1: USB disconnect, device number 4
[  968.744703][T10286] usb 9-1: Using ep0 maxpacket: 32
[  968.752827][T10286] usb 9-1: unable to get BOS descriptor or descriptor too short
[  968.796735][T10286] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7
[  968.828148][T10286] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1032, setting to 1024
[  968.864688][T10286] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[  968.920097][T10286] usb 9-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40
[  968.954235][T10286] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.985212][T10286] usb 9-1: Product: syz
[  968.989449][T10286] usb 9-1: Manufacturer: syz
[  969.011414][T10286] usb 9-1: SerialNumber: syz
[  969.055826][T10769] ip_tables: iptables: counters copy to user failed while replacing table
[  969.164243][    T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  969.253137][T10286] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  969.273380][T10286] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  969.366746][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  969.384234][T10286] snd-usb-audio: probe of 9-1:1.0 failed with error -71
[  969.395901][    T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  969.449800][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  969.466409][T10244] udevd[10244]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  969.491233][T10286] usb 9-1: USB disconnect, device number 3
[  969.513097][    T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  969.576115][    T7] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  969.675443][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.754918][    T7] usb 3-1: config 0 descriptor??
[  971.456914][    T7] hdpvr 3-1:0.0: firmware version 0x8 dated 
[  971.748152][    T7] hdpvr 3-1:0.0: device init failed
[  971.867047][    T7] hdpvr: probe of 3-1:0.0 failed with error -12
[  972.192893][    T7] usb 3-1: USB disconnect, device number 5
[  972.604933][  T955] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  972.794411][  T955] usb 9-1: Using ep0 maxpacket: 32
[  972.841372][  T955] usb 9-1: config 0 has an invalid interface number: 35 but max is 0
[  974.518763][T10801] comedi comedi1: reset error (fatal)
[  975.127231][  T955] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  975.725788][  T955] usb 9-1: config 0 has no interface number 0
[  975.731990][  T955] usb 9-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  976.202583][  T955] usb 9-1: string descriptor 0 read error: -71
[  976.289188][  T955] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  976.371668][  T955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.393674][  T955] usb 9-1: config 0 descriptor??
[  976.399094][  T955] usb 9-1: can't set config #0, error -71
[  976.407877][  T955] usb 9-1: USB disconnect, device number 4
[  977.719073][T10886] loop8: detected capacity change from 0 to 64
[  977.835696][T10886] Bad inode number on dev loop8: 2 is out of range
[  978.193921][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1139'.
[  978.235978][T10898] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1139'.
[  978.525904][T10909] xt_CT: You must specify a L4 protocol and not use inversions on it
[  978.794394][ T4327] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  978.804437][T10913] loop8: detected capacity change from 0 to 2048
[  978.831150][T10913] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  978.856258][T10913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  979.004299][ T4327] usb 3-1: Using ep0 maxpacket: 16
[  979.014280][ T4327] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  979.217739][ T4327] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  979.425679][ T4327] usb 3-1: config 1 has no interface number 1
[  979.521116][ T4327] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  979.724382][ T6486] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  979.728145][ T4327] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  979.786853][ T4327] usb 3-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  979.914490][ T4327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  979.944195][ T6486] usb 2-1: Using ep0 maxpacket: 16
[  979.958195][ T6486] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  979.979244][ T4327] usb 3-1: Product: syz
[  979.983493][ T4327] usb 3-1: Manufacturer: syz
[  980.100052][ T6486] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.134826][ T4327] usb 3-1: SerialNumber: syz
[  980.163036][ T6486] usb 2-1: Product: syz
[  980.190858][ T6486] usb 2-1: Manufacturer: syz
[  980.374760][ T6486] usb 2-1: SerialNumber: syz
[  980.475200][ T4327] usb 3-1: 0:1 : does not exist
[  980.480139][ T4327] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  980.494377][ T4327] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  980.500520][ T4327] usb 3-1: 2:1 : invalid channels 0
[  980.559209][ T6486] usb 2-1: config 0 descriptor??
[  980.589938][ T6486] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  980.762578][ T4327] usb 3-1: USB disconnect, device number 6
[  980.783878][ T6486] ssu100: probe of 2-1:0.0 failed with error -71
[  980.834688][ T6486] usb 2-1: USB disconnect, device number 4
[  981.305905][T10244] udevd[10244]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  984.186390][T10988] xt_CT: You must specify a L4 protocol and not use inversions on it
[  984.384266][T11019] netlink: 'syz.5.1157': attribute type 12 has an invalid length.
[  984.645245][T11025] fuse: Bad value for 'fd'
[  987.553022][T11033] loop8: detected capacity change from 0 to 4096
[  987.580085][T11033] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512)
[  990.495418][T11096] xt_CT: You must specify a L4 protocol and not use inversions on it
[  997.944591][T11255] xt_CT: You must specify a L4 protocol and not use inversions on it
[  997.967760][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  997.974389][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1004.343739][T11358] fuse: Bad value for 'fd'
[ 1006.242833][T11394] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1006.754124][T11422] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1024.055560][T11632] fuse: Bad value for 'fd'
[ 1026.445506][T11647] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1031.895161][ T4286] Bluetooth: Fragment is too long (len 53, expected 9)
[ 1032.334558][T11770] netlink: 'syz.8.1266': attribute type 29 has an invalid length.
[ 1032.362888][T11770] netlink: 'syz.8.1266': attribute type 29 has an invalid length.
[ 1032.414576][T11772] netlink: 'syz.8.1266': attribute type 29 has an invalid length.
[ 1033.503679][T11792] fuse: Bad value for 'fd'
[ 1036.263475][T11819] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1036.736355][T11825] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1039.725072][T11851] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1040.963617][ T1200] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1041.265872][ T1200] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1041.294453][ T1200] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1041.320890][ T1200] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1041.363181][ T1200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1041.502388][ T1200] usb 2-1: SerialNumber: syz
[ 1042.006459][ T1200] usb 2-1: 0:2 : does not exist
[ 1042.893149][ T1200] usb 2-1: USB disconnect, device number 5
[ 1043.666960][T11840] udevd[11840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1047.405016][ T1200] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1047.444312][T10286] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[ 1047.686450][ T1200] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1047.749177][T10286] usb 3-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1048.964756][ T1200] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1048.975727][T10286] usb 3-1: config 0 interface 0 altsetting 238 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1048.985743][T10286] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1048.992512][ T1200] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[ 1049.001767][ T1200] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.010468][T10286] usb 3-1: New USB device found, idVendor=056a, idProduct=da2f, bcdDevice=76.4b
[ 1049.024565][T10286] usb 3-1: New USB device strings: Mfr=81, Product=0, SerialNumber=0
[ 1049.032717][T10286] usb 3-1: Manufacturer: syz
[ 1049.041708][ T1200] usb 9-1: 1:1 : no or invalid class specific endpoint descriptor
[ 1049.051692][T10286] usb 3-1: config 0 descriptor??
[ 1049.477602][T10286] wacom 0003:056A:DA2F.0003: unknown main item tag 0x2
[ 1049.581303][ T1200] usb 9-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 4)
[ 1049.605888][T10286] wacom 0003:056A:DA2F.0003: unknown main item tag 0x1
[ 1050.561007][T10286] wacom 0003:056A:DA2F.0003: ignoring exceeding usage max
[ 1052.041478][T10286] wacom 0003:056A:DA2F.0003: Unknown device_type for 'syz'. Ignoring.
[ 1052.561712][ T1200] usb 9-1: USB disconnect, device number 5
[ 1052.587905][T10286] usb 3-1: USB disconnect, device number 7
[ 1055.774163][ T1200] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1055.976851][ T1200] usb 2-1: Using ep0 maxpacket: 32
[ 1056.937997][ T1200] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1057.632657][ T1200] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1057.836560][ T1200] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1057.991846][ T1200] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1058.172145][ T1200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1058.304865][ T1200] usb 2-1: Product: syz
[ 1058.373488][ T1200] usb 2-1: Manufacturer: syz
[ 1058.467071][ T1200] usb 2-1: SerialNumber: syz
[ 1058.571622][ T1200] usb 2-1: config 0 descriptor??
[ 1058.614547][ T1200] usb 2-1: can't set config #0, error -71
[ 1058.665194][ T1200] usb 2-1: USB disconnect, device number 6
[ 1059.407749][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1059.414185][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1065.864594][ T4327] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1066.084336][ T4327] usb 9-1: Using ep0 maxpacket: 32
[ 1066.148953][ T4327] usb 9-1: config 245 has an invalid interface number: 214 but max is 0
[ 1066.361524][ T4327] usb 9-1: config 245 has no interface number 0
[ 1066.553245][ T4327] usb 9-1: config 245 interface 214 altsetting 70 bulk endpoint 0x5 has invalid maxpacket 64
[ 1066.783923][ T4327] usb 9-1: config 245 interface 214 has no altsetting 0
[ 1066.964491][ T4327] usb 9-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=1e.fa
[ 1067.143897][ T4327] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.296256][ T4327] usb 9-1: Product: syz
[ 1067.389111][ T4327] usb 9-1: Manufacturer: syz
[ 1067.501935][ T4327] usb 9-1: SerialNumber: syz
[ 1067.852223][T12250] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1068.936580][    T7] usb 9-1: USB disconnect, device number 6
[ 1068.943370][    T7] f81534a_ctrl 9-1:245.214: failed to enable ports: -19
[ 1077.968939][T12377] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1084.675978][T12473] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1084.757967][T12476] fuse: Bad value for 'fd'
[ 1087.844966][T12534] netlink: 'syz.5.1389': attribute type 25 has an invalid length.
[ 1087.881532][T12534] netlink: 'syz.5.1389': attribute type 28 has an invalid length.
[ 1089.824198][ T4672] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1090.028490][ T4672] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1090.060146][ T4672] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1090.109122][ T4672] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1090.138529][ T4672] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[ 1090.168336][ T4672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1090.218366][ T4672] usb 2-1: config 0 descriptor??
[ 1090.654547][ T4672] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0
[ 1090.672571][ T4672] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0
[ 1090.683850][ T4672] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0
[ 1090.709561][ T4672] holtek_kbd 0003:04D9:A055.0004: item fetching failed at offset 23/24
[ 1090.733304][ T4672] holtek_kbd: probe of 0003:04D9:A055.0004 failed with error -22
[ 1090.950512][ T4672] usb 2-1: USB disconnect, device number 7
[ 1091.359833][T12585] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1091.694262][ T8314] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1091.835349][T12599] nvmet: disable ns before setting buffered_io value.
[ 1091.839622][   T26] audit: type=1800 audit(1789682174.736:887): pid=12599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1409" name="buffered_io" dev="configfs" ino=56720 res=0 errno=0
[ 1091.984042][ T8314] usb 3-1: Using ep0 maxpacket: 32
[ 1092.006372][ T8314] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 126, using maximum allowed: 30
[ 1092.048225][ T8314] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1092.080516][ T8314] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 126
[ 1092.099789][ T8314] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1092.123282][ T8314] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00
[ 1092.136594][ T8314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1092.174511][ T8314] usb 3-1: config 0 descriptor??
[ 1092.600321][ T8314] logitech 0003:046D:C286.0005: ignoring exceeding usage max
[ 1092.667342][ T8314] logitech 0003:046D:C286.0005: hidraw0: USB HID v0.01 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0
[ 1092.709656][ T8314] logitech 0003:046D:C286.0005: no inputs found
[ 1092.813173][  T955] usb 3-1: USB disconnect, device number 8
[ 1093.010983][T12619] fido_id[12619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1097.547084][T12693] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1104.309631][T12797] program syz.6.1456 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1104.614179][   T33] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1104.919202][   T33] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1104.948685][   T33] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[ 1105.003150][   T33] usb 9-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[ 1105.072321][   T33] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1105.092684][   T33] usb 9-1: Product: syz
[ 1105.113002][   T33] usb 9-1: Manufacturer: syz
[ 1105.146326][   T33] usb 9-1: SerialNumber: syz
[ 1105.193544][T12796] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1105.214400][T12796] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1105.232816][   T33] mos7840 9-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 1105.577744][T12820] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1106.679223][   T33] mos7840: probe of ttyUSB0 failed with error -71
[ 1107.102470][   T33] usb 9-1: USB disconnect, device number 7
[ 1107.246166][   T33] mos7840 9-1:1.0: device disconnected
[ 1112.905035][T12895] fuse: Bad value for 'fd'
[ 1114.578163][T12929] fuse: Bad value for 'fd'
[ 1120.221934][T12988] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1120.851130][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1120.857831][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1122.111106][T13004] fuse: Bad value for 'fd'
[ 1125.140190][T13046] sg_write: data in/out 1024/136 bytes for SCSI command 0x0-- guessing data in;
[ 1125.140190][T13046]    program syz.6.1521 not setting count and/or reply_len properly
[ 1125.678287][T13066] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1126.420587][T13078] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1128.685167][ T4286] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1131.469565][T13171] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1548'.
[ 1131.517804][T13171] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1548'.
[ 1131.554519][T13172] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1548'.
[ 1131.574343][T13175] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1549'.
[ 1131.608229][T13176] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1548'.
[ 1131.644545][T13175] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1549'.
[ 1131.874302][T13187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1549'.
[ 1132.252156][T13180] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1549'.
[ 1135.546506][T13244] pi3usb30532 0-0005: Error reading config register -5
[ 1135.626637][T13244] pi3usb30532: probe of 0-0005 failed with error -5
[ 1135.679855][T13244] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05
[ 1137.237094][T13300] fuse: Bad value for 'fd'
[ 1150.545349][T13405] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1586'.
[ 1150.600375][T13405] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1586'.
[ 1150.611848][T13405] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1586'.
[ 1153.322035][T13097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1153.333622][T13097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1153.342822][T13097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1153.353974][T13097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1153.369881][T13097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1153.383333][T13097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1153.481045][T13445] lo speed is unknown, defaulting to 1000
[ 1154.738001][ T4491] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.867982][T13478] bond0: option slaves: invalid value (-dummy0)
[ 1154.924442][ T4286] Bluetooth: hci5: command 0x2016 tx timeout
[ 1155.104201][ T6245] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1155.271790][ T4491] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1155.406157][ T4286] Bluetooth: hci2: command 0x0409 tx timeout
[ 1155.851298][ T4491] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1155.914667][ T6245] usb 2-1: Using ep0 maxpacket: 32
[ 1155.927764][ T6245] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 1155.948263][ T6245] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1155.990317][ T6245] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1156.011367][ T6245] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1156.025144][ T6245] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1156.039492][ T6245] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1156.048873][ T6245] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1156.057425][ T6245] usb 2-1: Product: syz
[ 1156.061796][ T6245] usb 2-1: Manufacturer: syz
[ 1156.066508][ T6245] usb 2-1: SerialNumber: syz
[ 1156.082810][ T6245] usb 2-1: config 0 descriptor??
[ 1156.091117][ T6245] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1156.109693][ T6245] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1156.195715][ T4491] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1156.358255][ T6245] usb 2-1: USB disconnect, device number 8
[ 1156.385584][ T6245] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[ 1156.519577][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'.
[ 1156.585669][T13445] chnl_net:caif_netlink_parms(): no params data found
[ 1157.484211][ T4286] Bluetooth: hci2: command 0x041b tx timeout
[ 1158.200504][ T4491] tipc: Disabling bearer <udp:syz1>
[ 1158.206456][ T4491] tipc: Left network mode
[ 1158.302998][T13445] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1158.321023][T13445] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1158.342519][T13445] device bridge_slave_0 entered promiscuous mode
[ 1158.464300][   T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1158.607044][T13445] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1158.631937][T13445] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1158.657866][   T14] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1159.564116][ T4286] Bluetooth: hci2: command 0x040f tx timeout
[ 1160.360345][T13445] device bridge_slave_1 entered promiscuous mode
[ 1160.367951][   T14] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1160.615131][   T14] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[ 1160.735537][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1160.791634][   T14] usb 2-1: Product: syz
[ 1160.813577][   T14] usb 2-1: Manufacturer: syz
[ 1160.856514][   T14] usb 2-1: SerialNumber: syz
[ 1160.919242][   T14] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[ 1161.025480][   T14] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[ 1161.025480][   T14]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 1161.163208][T13445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1161.176830][T13445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1161.463157][   T14] ums-sddr09: probe of 2-1:1.0 failed with error -5
[ 1161.638613][T13445] team0: Port device team_slave_0 added
[ 1161.645605][ T4286] Bluetooth: hci2: command 0x0419 tx timeout
[ 1161.743633][   T14] usb 2-1: USB disconnect, device number 9
[ 1162.333641][T13565] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers
[ 1162.397359][T13445] team0: Port device team_slave_1 added
[ 1162.599105][T13445] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1162.619648][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1162.677622][T13445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1162.754343][ T4672] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1162.765278][T13445] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1162.781791][T13445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1162.844651][T13445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1162.945031][ T4672] usb 9-1: Using ep0 maxpacket: 32
[ 1162.953975][ T4672] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[ 1162.990992][ T4672] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1163.005214][ T4672] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1163.024301][ T4672] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1163.059813][ T4672] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1163.087911][ T4672] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1163.118999][ T4672] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1163.141581][ T4672] usb 9-1: Product: syz
[ 1163.154717][ T4672] usb 9-1: Manufacturer: syz
[ 1163.166288][ T4672] usb 9-1: SerialNumber: syz
[ 1163.202795][ T4672] usb 9-1: config 0 descriptor??
[ 1163.217101][ T4672] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1163.257060][ T4672] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1163.292408][T13445] device hsr_slave_0 entered promiscuous mode
[ 1163.309398][T13445] device hsr_slave_1 entered promiscuous mode
[ 1163.366294][T13445] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1163.376526][T13445] Cannot create hsr debugfs directory
[ 1163.459182][ T4672] usb 9-1: USB disconnect, device number 8
[ 1163.485236][ T4672] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[ 1168.208620][T13445] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.383335][ T4491] device hsr_slave_0 left promiscuous mode
[ 1168.401617][ T4491] device hsr_slave_1 left promiscuous mode
[ 1168.454795][ T4491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1168.462519][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1168.497141][ T4491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1168.519674][ T4491] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1168.552770][ T4491] device bridge_slave_1 left promiscuous mode
[ 1168.565657][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1168.601525][ T4491] device bridge_slave_0 left promiscuous mode
[ 1168.612711][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1168.724656][ T4491] device veth1_macvtap left promiscuous mode
[ 1168.736709][ T4491] device veth0_macvtap left promiscuous mode
[ 1168.750950][ T4491] device veth1_vlan left promiscuous mode
[ 1168.766292][ T4491] device veth0_vlan left promiscuous mode
[ 1170.226287][ T4322] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1170.426717][ T4322] usb 3-1: Using ep0 maxpacket: 32
[ 1170.442195][ T4322] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[ 1170.464599][ T4322] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1170.476218][ T4322] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1170.487771][ T4322] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1170.502197][ T4322] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1170.526283][ T4322] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1170.551250][ T4322] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1170.560189][ T4322] usb 3-1: Product: syz
[ 1170.564696][ T4322] usb 3-1: Manufacturer: syz
[ 1170.569405][ T4322] usb 3-1: SerialNumber: syz
[ 1170.590698][ T4322] usb 3-1: config 0 descriptor??
[ 1170.599915][ T4322] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1170.627699][ T4322] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1170.639549][ T4491] team0 (unregistering): Port device team_slave_1 removed
[ 1170.728620][ T4491] team0 (unregistering): Port device team_slave_0 removed
[ 1170.802318][ T4491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1170.826555][ T6245] usb 3-1: USB disconnect, device number 9
[ 1170.845605][ T6245] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[ 1170.923435][ T4491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1171.481724][ T4491] bond0 (unregistering): Released all slaves
[ 1171.639032][T13445] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.725192][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1645'.
[ 1171.744404][ T4322] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1171.944540][ T4322] usb 3-1: Using ep0 maxpacket: 16
[ 1171.952010][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1171.974902][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1172.005748][ T4322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1172.026513][ T4322] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1172.045173][ T4322] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1172.110112][ T4322] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1172.131485][T13445] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1172.166888][ T4322] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1172.188769][ T4322] usb 3-1: Manufacturer: syz
[ 1172.280523][ T4322] usb 3-1: config 0 descriptor??
[ 1173.935986][T13445] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.315711][ T4322] rc_core: IR keymap rc-hauppauge not found
[ 1174.324257][ T4322] Registered IR keymap rc-empty
[ 1174.337797][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1174.378138][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1174.425658][ T4322] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1174.451549][ T4322] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13
[ 1174.756557][T13709] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1175.506628][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1175.554131][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1175.584547][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1175.614531][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1175.616411][T13717] Console: switching to colour VGA+ 80x25
[ 1175.644333][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1175.674192][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1175.674803][T13445] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1175.685501][T13445] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1175.704321][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1175.708171][T13445] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1175.722160][T13445] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1175.734294][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1175.764354][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1175.924221][ T4322] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1175.956000][ T4322] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[ 1175.956027][ T4322] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1175.970079][ T4322] usb 3-1: USB disconnect, device number 10
[ 1176.038092][T13719] Console: switching to colour frame buffer device 128x48
[ 1176.107372][T13445] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1176.136551][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1176.137310][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1176.168972][T13445] 8021q: adding VLAN 0 to HW filter on device team0
[ 1176.314267][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1176.333550][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1176.354984][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1176.362198][ T9830] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1176.405295][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1176.435002][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1176.454330][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1176.461535][ T9830] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1176.531462][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1176.566158][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1176.595288][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1176.628535][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1176.668389][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1176.689890][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1176.846747][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1659'.
[ 1176.894821][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1176.919351][ T9830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1176.954626][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1177.005000][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1177.027392][T13445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1177.059670][T13445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1177.087631][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1177.112880][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1177.629779][T13765] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1180.695583][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1180.720397][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1180.774119][ T4559] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1180.784605][T13445] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1180.905038][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1180.929911][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1180.967421][ T4559] usb 9-1: Using ep0 maxpacket: 16
[ 1180.985274][ T4559] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1181.008195][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1181.027022][ T4559] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1181.037723][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1181.057855][T13445] device veth0_vlan entered promiscuous mode
[ 1181.074212][ T4559] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1181.089292][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1181.107928][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1181.124142][ T4559] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1181.140675][T13445] device veth1_vlan entered promiscuous mode
[ 1181.146990][ T4559] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1181.189613][ T4559] usb 9-1: config 0 descriptor??
[ 1181.229476][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1181.250688][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1181.289270][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1181.320281][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1181.380331][T13445] device veth0_macvtap entered promiscuous mode
[ 1181.429864][T13445] device veth1_macvtap entered promiscuous mode
[ 1181.507269][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1181.539588][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1181.574196][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1181.605262][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1181.627608][ T4559] microsoft 0003:045E:07DA.0006: No inputs registered, leaving
[ 1181.645973][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1181.665174][ T4559] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[ 1181.684089][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1181.694453][ T4559] microsoft 0003:045E:07DA.0006: no inputs found
[ 1181.709490][ T4559] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway
[ 1181.719523][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1181.765135][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1181.783276][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1181.805298][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1181.845205][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1181.864974][ T5387] usb 9-1: USB disconnect, device number 9
[ 1181.902338][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1181.936997][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1181.962474][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.002228][T13817] fido_id[13817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1182.018373][T13445] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1182.039907][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1182.061481][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1182.094908][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1182.125502][ T9606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1182.165023][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1182.181643][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.209177][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1182.234074][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.254281][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1182.275425][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.297541][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1182.301287][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.315982][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1182.331857][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.368440][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1182.413084][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.464056][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1182.488928][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.501347][T13445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1182.520471][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1182.533557][T13445] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1182.585410][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1182.596979][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1182.622460][T13445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.654347][T13445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.684271][T13445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1182.712874][T13445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1183.160877][ T8574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1183.182353][ T8574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1183.241281][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1183.282061][ T4466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1183.307449][ T4466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1183.356703][ T8574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1183.711632][T13868] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1188.815204][T13911] fuse: Bad value for 'fd'
[ 1196.086094][T13954] lo speed is unknown, defaulting to 1000
[ 1196.159101][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'.
[ 1196.694582][ T8311] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1196.965350][ T8311] usb 3-1: Using ep0 maxpacket: 16
[ 1197.012952][ T8311] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[ 1197.253124][ T8311] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1197.450195][ T8311] usb 3-1: config 0 has no interface number 0
[ 1197.590362][ T8311] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[ 1197.771880][ T8311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.922189][ T8311] usb 3-1: Product: syz
[ 1198.002180][ T8311] usb 3-1: Manufacturer: syz
[ 1198.088916][ T8311] usb 3-1: SerialNumber: syz
[ 1198.349118][ T8311] usb 3-1: config 0 descriptor??
[ 1198.635969][ T8311] uvcvideo 3-1:0.105: Found Unit with invalid ID 0
[ 1198.861252][ T8311] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[ 1199.002943][ T8311] usb 3-1: No valid video chain found.
[ 1199.212029][ T8311] usb 3-1: USB disconnect, device number 11
[ 1200.607228][T14004] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1210.725218][ T6245] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1210.941076][T14066] lo speed is unknown, defaulting to 1000
[ 1211.032429][ T6245] usb 4-1: Using ep0 maxpacket: 16
[ 1211.040534][ T6245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1211.072368][ T6245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1211.092704][ T6245] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1211.116323][ T6245] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1211.137760][ T6245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1211.159152][ T6245] usb 4-1: config 0 descriptor??
[ 1211.272352][T14073] gadgetfs: bound to dummy_udc driver
[ 1211.681784][ T8311] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[ 1211.728916][ T6245] microsoft 0003:045E:07DA.0007: No inputs registered, leaving
[ 1211.741819][    C0] gadgetfs: connected
[ 1211.751463][T14068] gadgetfs: suspended from state 3
[ 1211.757416][T14068] gadgetfs: disconnected
[ 1212.000109][ T6245] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[ 1212.060301][ T6245] microsoft 0003:045E:07DA.0007: no inputs found
[ 1212.094636][ T6245] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway
[ 1212.112218][ T6245] usb 4-1: USB disconnect, device number 6
[ 1213.373672][T14085] fido_id[14085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1213.575595][T14101] FAULT_INJECTION: forcing a failure.
[ 1213.575595][T14101] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 1213.692927][T14101] CPU: 0 PID: 14101 Comm: syz.3.1736 Not tainted syzkaller #0
[ 1213.700488][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1213.710634][T14101] Call Trace:
[ 1213.713970][T14101]  <TASK>
[ 1213.716976][T14101]  dump_stack_lvl+0x188/0x24e
[ 1213.721798][T14101]  ? show_regs_print_info+0x12/0x12
[ 1213.727056][T14101]  ? load_image+0x410/0x410
[ 1213.731621][T14101]  ? __lock_acquire+0x7c40/0x7c40
[ 1213.736789][T14101]  should_fail_ex+0x390/0x4c0
[ 1213.741535][T14101]  prepare_alloc_pages+0x1e1/0x5b0
[ 1213.746732][T14101]  __alloc_pages+0x130/0x4f0
[ 1213.751404][T14101]  ? zone_statistics+0x170/0x170
[ 1213.756420][T14101]  ? alloc_pages+0x4dd/0x740
[ 1213.761086][T14101]  kimage_alloc_pages+0xc5/0x330
[ 1213.766086][T14101]  kimage_alloc_control_pages+0x47f/0xb30
[ 1213.771878][T14101]  ? kimage_free_pages+0x1e0/0x1e0
[ 1213.777089][T14101]  ? do_kexec_load+0x28f/0x670
[ 1213.781921][T14101]  do_kexec_load+0x39e/0x670
[ 1213.786580][T14101]  __se_sys_kexec_load+0x170/0x1c0
[ 1213.791765][T14101]  do_syscall_64+0x4c/0xa0
[ 1213.796235][T14101]  ? clear_bhb_loop+0x60/0xb0
[ 1213.800995][T14101]  ? clear_bhb_loop+0x60/0xb0
[ 1213.805724][T14101]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1213.811680][T14101] RIP: 0033:0x7f1b6fd9e159
[ 1213.816145][T14101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1213.835805][T14101] RSP: 002b:00007f1b70be3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6
[ 1213.844270][T14101] RAX: ffffffffffffffda RBX: 00007f1b70025fa0 RCX: 00007f1b6fd9e159
[ 1213.852292][T14101] RDX: 0000200000000580 RSI: 0000000000000001 RDI: 0000000000003e00
[ 1213.860306][T14101] RBP: 00007f1b6fe3506b R08: 0000000000000000 R09: 0000000000000000
[ 1213.868325][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1213.876341][T14101] R13: 00007f1b70026038 R14: 00007f1b70025fa0 R15: 00007ffdd6405bf8
[ 1213.884370][T14101]  </TASK>
[ 1213.907367][T14101] kexec: Could not allocate swap buffer
[ 1220.298357][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1754'.
[ 1222.550487][T14217] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1223.934094][ T8313] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1224.154153][ T8313] usb 9-1: Using ep0 maxpacket: 32
[ 1224.161333][ T8313] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1224.191758][ T8313] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1224.244095][ T9347] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[ 1224.288053][ T8313] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1224.426992][ T8313] usb 9-1: Product: syz
[ 1224.503647][ T8313] usb 9-1: Manufacturer: syz
[ 1224.596095][ T8313] usb 9-1: SerialNumber: syz
[ 1224.797206][ T8313] usb 9-1: config 0 descriptor??
[ 1224.890592][T14243] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1224.969221][ T8313] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1225.091002][ T8313] hub: probe of 9-1:0.0 failed with error -5
[ 1226.388931][ T8313] usb 9-1: USB disconnect, device number 10
[ 1226.464264][ T9347] usb 3-1: device descriptor read/64, error -71
[ 1226.734107][ T9347] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[ 1226.899526][T14282] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1782'.
[ 1226.924187][ T9347] usb 3-1: device descriptor read/64, error -71
[ 1227.054222][ T9347] usb usb3-port1: attempt power cycle
[ 1229.432607][T14340] Illegal XDP return value 4294967277 on prog  (id 46) dev syz_tun, expect packet loss!
[ 1231.098815][T14365] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1238.301511][T14440] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.1820'.
[ 1243.729113][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1243.735508][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[ 1249.104754][ T5386] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1249.411051][ T5386] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1249.458759][ T5386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1249.524546][T14570] block device autoloading is deprecated and will be removed.
[ 1249.534850][ T5386] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1249.550024][ T5386] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1249.575354][ T5386] usb 2-1: Manufacturer: syz
[ 1249.598477][ T5386] usb 2-1: config 0 descriptor??
[ 1249.844180][T14572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1249.855487][ T5386] rc_core: IR keymap rc-hauppauge not found
[ 1249.861797][ T5386] Registered IR keymap rc-empty
[ 1249.877793][ T5386] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1249.898268][T14572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1249.906777][T14580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'.
[ 1249.939567][ T5386] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16
[ 1250.015056][ T5386] usb 2-1: USB disconnect, device number 11
[ 1250.984252][ T8313] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1251.196313][ T8313] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1251.227161][ T8313] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1251.260688][ T8313] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1251.317486][ T8313] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1251.339621][ T8313] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1251.365373][ T8313] usb 9-1: Product: syz
[ 1251.374469][ T8313] usb 9-1: Manufacturer: syz
[ 1251.384368][ T8313] usb 9-1: SerialNumber: syz
[ 1251.432193][ T8313] hub 9-1:1.0: bad descriptor, ignoring hub
[ 1251.453645][ T8313] hub: probe of 9-1:1.0 failed with error -5
[ 1251.620598][ T8313] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1253.364225][T14612] usb 9-1: reset high-speed USB device number 11 using dummy_hcd
[ 1253.615323][T14612] usb 9-1: device firmware changed
[ 1253.657903][T14216] usb 9-1: USB disconnect, device number 11
[ 1253.691994][T14216] usblp0: removed
[ 1254.190007][T14698] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[ 1254.689928][   T26] audit: type=1326 audit(1789682337.586:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14708 comm="syz.2.1876" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabc539e159 code=0x0
[ 1255.033307][   T26] audit: type=1400 audit(1789682337.926:889): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="test" pid=14719 comm="syz.8.1879" name="test" offset=36
[ 1257.197727][T14743] nvme nvme0: failed to connect socket: -512
[ 1260.658639][T14788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1893'.
[ 1263.489977][T14876] gadgetfs: bound to dummy_udc driver
[ 1263.882093][T14884] [U] ÿéÃ7ËN+¢Yëhí5Ä»<ÎÏ•/æ·¡ç
[ 1266.104210][T14216] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1266.314188][T14216] usb 2-1: Using ep0 maxpacket: 8
[ 1266.323183][T14216] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1266.379071][T14216] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1266.438367][T14216] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1266.483924][T14216] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1266.546779][T14216] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1266.576569][T14216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.815432][T14216] usb 2-1: GET_CAPABILITIES returned 0
[ 1266.820992][T14216] usbtmc 2-1:16.0: can't read capabilities
[ 1267.087393][    C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1267.151707][T14216] usb 2-1: USB disconnect, device number 12
[ 1269.039955][T15011] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1271.448873][T15070] binder: 15069:15070 ioctl c0306201 2000000003c0 returned -14
[ 1274.384432][ T5387] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1274.584174][ T5387] usb 3-1: Using ep0 maxpacket: 16
[ 1274.591613][ T5387] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1274.616158][ T5387] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1274.650024][ T5387] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1274.677278][ T5387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1274.743711][ T5387] usb 3-1: config 0 descriptor??
[ 1275.015319][ T5387] usbhid 3-1:0.0: can't add hid device: -71
[ 1275.025030][ T5387] usbhid: probe of 3-1:0.0 failed with error -71
[ 1275.059784][ T5387] usb 3-1: USB disconnect, device number 15
[ 1276.524413][ T4286] Bluetooth: hci2: command 0x0406 tx timeout
[ 1278.743915][T15190] lo speed is unknown, defaulting to 1000
[ 1279.171347][ T9347] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1279.184510][ T5386] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1279.364063][ T9347] usb 4-1: Using ep0 maxpacket: 32
[ 1279.371200][ T9347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1279.392945][ T9347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1279.406942][ T5386] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1279.422138][ T9347] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1279.427293][ T5386] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1279.461713][ T5386] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[ 1279.480799][ T9347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.493386][ T5386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.511646][ T9347] usb 4-1: config 0 descriptor??
[ 1279.938645][ T9347] ft260 0003:0403:6030.0008: unknown main item tag 0x0
[ 1279.968313][ T9347] ft260 0003:0403:6030.0008: unknown main item tag 0x0
[ 1279.978309][ T5386] wacom 0003:056A:033B.0009: unknown main item tag 0x0
[ 1280.019687][ T5386] wacom 0003:056A:033B.0009: unbalanced collection at end of report description
[ 1280.067960][ T9347] ft260 0003:0403:6030.0008: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[ 1280.081014][ T5386] wacom 0003:056A:033B.0009: parse failed
[ 1280.124301][ T5386] wacom: probe of 0003:056A:033B.0009 failed with error -22
[ 1280.177213][ T5386] usb 2-1: USB disconnect, device number 13
[ 1280.215649][ T9347] ft260 0003:0403:6030.0008: chip code: 0000 0000
[ 1280.337905][T15190] netlink: 'syz.8.1983': attribute type 4 has an invalid length.
[ 1280.818178][ T9347] ft260 0003:0403:6030.0008: failed to retrieve status: -71
[ 1280.836581][ T9347] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71
[ 1280.985160][ T9347] usb 4-1: USB disconnect, device number 7
[ 1281.515871][T15240] fido_id[15240]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1285.384833][T15309] Could not find key with description: [0123456789abcdef]
[ 1285.419871][T15309] process_request_key_err: No key
[ 1285.424872][ T8313] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[ 1285.444182][T15309] Could not find valid key in user session keyring for sig specified in mount option: [0123456789abcdef]
[ 1285.484262][T15309] One or more global auth toks could not properly register; rc = [-2]
[ 1285.492684][T15309] Error parsing options; rc = [-2]
[ 1285.614097][ T8313] usb 9-1: Using ep0 maxpacket: 8
[ 1285.626308][ T8313] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1285.651333][ T8313] usb 9-1: config 0 has no interface number 0
[ 1285.675240][ T8313] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1285.744100][ T8313] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1285.753240][ T8313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1285.984965][ T8313] usb 9-1: config 0 descriptor??
[ 1286.021984][ T8313] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1286.035441][T15341] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1286.374166][ T8313] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1286.566256][ T8313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1286.585535][ T8313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1286.609264][ T8313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1286.638565][ T8313] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1286.648232][ T8313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1286.681879][ T8313] usb 3-1: config 0 descriptor??
[ 1287.125318][ T8313] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd
[ 1287.135486][T14268] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1287.160207][ T8313] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[ 1287.199712][ T8313] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1287.275232][ T8313] usb 9-1: USB disconnect, device number 13
[ 1287.339639][T14268] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1287.374837][T14268] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1287.417681][T14268] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 1287.427688][T14268] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 1287.445853][T14268] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[ 1287.474331][T14268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1287.492316][T15362] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1287.499957][ T5386] usb 3-1: USB disconnect, device number 16
[ 1287.522310][T15362] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1287.566440][T14268] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected
[ 1287.609714][T14268] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84
[ 1287.657174][T14268] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2
[ 1287.694729][T15369] fido_id[15369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1287.743902][T14268] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1287.930027][T14268] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88
[ 1287.968707][T14268] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6
[ 1288.032383][T14268] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1288.484736][  T955] usb 2-1: USB disconnect, device number 14
[ 1288.519096][  T955] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1288.594109][  T955] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1288.656973][  T955] keyspan 2-1:1.0: device disconnected
[ 1288.694364][T15398] FAULT_INJECTION: forcing a failure.
[ 1288.694364][T15398] name failslab, interval 1, probability 0, space 0, times 0
[ 1288.721856][T15398] CPU: 0 PID: 15398 Comm: syz.8.2019 Not tainted syzkaller #0
[ 1288.729399][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1288.739491][T15398] Call Trace:
[ 1288.742799][T15398]  <TASK>
[ 1288.745754][T15398]  dump_stack_lvl+0x188/0x24e
[ 1288.750498][T15398]  ? show_regs_print_info+0x12/0x12
[ 1288.755726][T15398]  ? load_image+0x410/0x410
[ 1288.760270][T15398]  should_fail_ex+0x390/0x4c0
[ 1288.764993][T15398]  should_failslab+0x5/0x20
[ 1288.769524][T15398]  slab_pre_alloc_hook+0x59/0x300
[ 1288.774587][T15398]  ? __hw_addr_add_ex+0x1f4/0x700
[ 1288.779642][T15398]  __kmem_cache_alloc_node+0x4f/0x270
[ 1288.785052][T15398]  ? trace_contention_end+0x5f/0x170
[ 1288.790367][T15398]  ? __hw_addr_add_ex+0x1f4/0x700
[ 1288.795455][T15398]  kmalloc_trace+0x26/0xe0
[ 1288.799898][T15398]  __hw_addr_add_ex+0x1f4/0x700
[ 1288.804782][T15398]  dev_addr_init+0x143/0x220
[ 1288.809401][T15398]  ? dev_addr_flush+0x210/0x210
[ 1288.814291][T15398]  alloc_netdev_mqs+0x26a/0xf10
[ 1288.819168][T15398]  ? tun_not_capable+0x1f0/0x1f0
[ 1288.824140][T15398]  tun_set_iff+0x546/0xea0
[ 1288.828602][T15398]  __tun_chr_ioctl+0x770/0x1ed0
[ 1288.833497][T15398]  ? tun_flow_create+0x310/0x310
[ 1288.838483][T15398]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1288.843450][T15398]  ? security_file_ioctl+0x7c/0xa0
[ 1288.848594][T15398]  ? tun_chr_poll+0x630/0x630
[ 1288.853331][T15398]  __se_sys_ioctl+0xfa/0x170
[ 1288.857958][T15398]  do_syscall_64+0x4c/0xa0
[ 1288.862404][T15398]  ? clear_bhb_loop+0x60/0xb0
[ 1288.867136][T15398]  ? clear_bhb_loop+0x60/0xb0
[ 1288.871838][T15398]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1288.877766][T15398] RIP: 0033:0x7f844979e159
[ 1288.882209][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1288.901846][T15398] RSP: 002b:00007f844a69f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1288.910282][T15398] RAX: ffffffffffffffda RBX: 00007f8449a25fa0 RCX: 00007f844979e159
[ 1288.918287][T15398] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 0000000000000003
[ 1288.926282][T15398] RBP: 00007f844983506b R08: 0000000000000000 R09: 0000000000000000
[ 1288.934272][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1288.942257][T15398] R13: 00007f8449a26038 R14: 00007f8449a25fa0 R15: 00007ffff055e088
[ 1288.950267][T15398]  </TASK>
[ 1290.385049][T15419] loop1: detected capacity change from 0 to 131072
[ 1290.411660][T15419] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[ 1290.420258][T15419] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1290.482543][T15419] F2FS-fs (loop1): invalid crc value
[ 1290.554142][  T955] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1290.578403][T15419] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1290.680622][T15419] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1290.688250][T15419] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[ 1290.745601][  T955] usb 3-1: Using ep0 maxpacket: 32
[ 1290.752991][  T955] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[ 1290.771192][  T955] usb 3-1: config 2 has no interface number 0
[ 1290.811215][  T955] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[ 1290.851787][  T955] usb 3-1: config 2 interface 88 has no altsetting 0
[ 1290.948000][  T955] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 1291.060250][  T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1291.119478][  T955] usb 3-1: Product: syz
[ 1291.151571][  T955] usb 3-1: Manufacturer: syz
[ 1291.188644][  T955] usb 3-1: SerialNumber: syz
[ 1291.247791][T15416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1291.492767][T15416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1292.562005][  T955] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1292.598170][  T955] asix: probe of 3-1:2.88 failed with error -71
[ 1292.664333][  T955] usb 3-1: USB disconnect, device number 17
[ 1293.365010][ T5387] kernel read not supported for file /video9 (pid: 5387 comm: kworker/1:9)
[ 1293.374128][T14216] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1293.568305][T14216] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1293.611823][T14216] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1293.658749][T14216] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1293.678154][T14216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1293.708490][T14216] usb 4-1: SerialNumber: syz
[ 1293.942144][T14216] usb 4-1: 0:2 : does not exist
[ 1294.055690][T14216] usb 4-1: USB disconnect, device number 8
[ 1294.086362][ T4794] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1294.097505][ T4794] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 100390)
[ 1294.109856][ T4794] Buffer I/O error on device sda1, logical block 100352
[ 1294.117737][ T4794] device offline error, dev sda, sector 811278 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1294.128268][ T4794] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 101409)
[ 1294.139929][ T4794] Buffer I/O error on device sda1, logical block 101371
[ 1294.146991][ T4794] device offline error, dev sda, sector 811302 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1294.157545][ T4794] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 101412)
[ 1294.169486][ T4794] Buffer I/O error on device sda1, logical block 101374
[ 1294.176818][ T4794] Buffer I/O error on device sda1, logical block 101375
[ 1294.183884][ T4794] device offline error, dev sda, sector 815342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1294.195241][ T4794] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2035 starting block 101917)
[ 1294.207328][ T4794] Buffer I/O error on device sda1, logical block 101879
[ 1294.214412][ T4794] Buffer I/O error on device sda1, logical block 101880
[ 1294.221381][ T4794] Buffer I/O error on device sda1, logical block 101881
[ 1294.228464][ T4794] Buffer I/O error on device sda1, logical block 101882
[ 1294.235494][ T4794] Buffer I/O error on device sda1, logical block 101883
[ 1294.242479][ T4794] Buffer I/O error on device sda1, logical block 101884
[ 1294.249539][ T4794] device offline error, dev sda, sector 704854 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1294.260031][ T4794] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 88106)
[ 1294.271949][ T4794] device offline error, dev sda, sector 704966 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1294.282472][ T4794] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 88120)
[ 1294.294718][ T4794] device offline error, dev sda, sector 705078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1294.305409][ T4794] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 88134)
[ 1294.317365][ T4794] device offline error, dev sda, sector 705094 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1294.327874][ T4794] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 88136)
[ 1294.409579][   T53] device offline error, dev sda, sector 705142 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1294.421694][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 88142)
[ 1294.434132][   T53] device offline error, dev sda, sector 705182 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[ 1294.445583][   T53] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 88147)
[ 1294.570263][ T3602] Aborting journal on device sda1-8.
[ 1294.587120][   T53] Buffer I/O error on dev sda1, logical block 131072, lost sync page write
[ 1294.598400][ T3602] JBD2: I/O error when updating journal superblock for sda1-8.
[ 1294.627354][T15541] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2045: Detected aborted journal
[ 1294.658421][T15504] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2039: Detected aborted journal
[ 1294.679817][T15229] udevd[15229]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1294.709364][   T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[ 1294.722532][T15504] EXT4-fs (sda1): I/O error while writing superblock
[ 1294.725016][T15541] EXT4-fs (sda1): previous I/O error to superblock detected
[ 1294.771301][T15504] EXT4-fs (sda1): Remounting filesystem read-only
[ 1294.805191][ T4794] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[ 1294.823735][T15541] EXT4-fs (sda1): I/O error while writing superblock
[ 1294.830688][T15541] EXT4-fs (sda1): Remounting filesystem read-only
[ 1294.848293][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[ 1294.849315][T15541] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.2045: Detected aborted journal
[ 1294.870940][ T4794] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[ 1294.879299][T15541] EXT4-fs (sda1): I/O error while writing superblock
[ 1294.887082][T15541] EXT4-fs (sda1): Remounting filesystem read-only
[ 1294.894399][T15504] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.2039: Detected aborted journal
[ 1294.908856][   T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[ 1294.917440][ T4260] EXT4-fs (sda1): I/O error while writing superblock
[ 1294.935385][T15504] EXT4-fs (sda1): previous I/O error to superblock detected
[ 1294.980905][ T4260] EXT4-fs (sda1): Remounting filesystem read-only
[ 1295.020088][   T26] audit: type=1800 audit(1789682377.916:890): pid=15540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd-run-hook" name="dhcpcd-run-hooks" dev="sda1" ino=273 res=0 errno=0
[ 1295.034827][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[ 1295.074828][T15512] NFSD: attempt to initialize umh client tracking in a container ignored.
[ 1295.074856][ T4794] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[ 1295.127572][T15512] NFSD: attempt to initialize legacy client tracking in a container ignored.
[ 1295.137794][ T4794] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[ 1295.146402][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[ 1295.221125][T15512] NFSD: Unable to initialize client recovery tracking! (-22)
[ 1295.263797][T15512] NFSD: starting 90-second grace period (net f0000800)
[ 1295.306749][   T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[ 1295.315641][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[ 1295.354205][   T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[ 1295.362718][ T4260] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[ 1295.433596][T15559] EXT4-fs error (device sda1): ext4_get_inode_loc:4658: inode #1312: block 226: comm kworker/u4:35: unable to read itable block
[ 1295.465055][   T53] Buffer I/O error on dev sda1, logical block 0, lost sync page write
[ 1295.536947][   T26] audit: type=1800 audit(1789682378.436:891): pid=15565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2047" name="enable" dev="configfs" ino=66590 res=0 errno=0
[ 1295.852300][T15523] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[ 1296.120343][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'.
[ 1296.735256][T15614] 
[ 1296.737635][T15614] ======================================================
[ 1296.744669][T15614] WARNING: possible circular locking dependency detected
[ 1296.751732][T15614] syzkaller #0 Not tainted
[ 1296.756181][T15614] ------------------------------------------------------
[ 1296.763228][T15614] syz.3.2054/15614 is trying to acquire lock:
[ 1296.769327][T15614] ffff888037060428 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfb/0xe20
[ 1296.778438][T15614] 
[ 1296.778438][T15614] but task is already holding lock:
[ 1296.785838][T15614] ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0
[ 1296.794870][T15614] 
[ 1296.794870][T15614] which lock already depends on the new lock.
[ 1296.794870][T15614] 
[ 1296.805394][T15614] 
[ 1296.805394][T15614] the existing dependency chain (in reverse order) is:
[ 1296.814434][T15614] 
[ 1296.814434][T15614] -> #2 (rfcomm_mutex){+.+.}-{3:3}:
[ 1296.821845][T15614]        __mutex_lock+0x12d/0xae0
[ 1296.826887][T15614]        rfcomm_security_cfm+0x95/0x780
[ 1296.832454][T15614]        hci_auth_complete_evt+0x365/0xba0
[ 1296.838271][T15614]        hci_event_packet+0x806/0x1290
[ 1296.843741][T15614]        hci_rx_work+0x3eb/0xd40
[ 1296.848709][T15614]        process_one_work+0x8ab/0x1160
[ 1296.854208][T15614]        worker_thread+0xaf5/0x12a0
[ 1296.859468][T15614]        kthread+0x29d/0x330
[ 1296.864089][T15614]        ret_from_fork+0x1f/0x30
[ 1296.869066][T15614] 
[ 1296.869066][T15614] -> #1 (hci_cb_list_lock){+.+.}-{3:3}:
[ 1296.876835][T15614]        __mutex_lock+0x12d/0xae0
[ 1296.881872][T15614]        hci_remote_features_evt+0x464/0xa10
[ 1296.887868][T15614]        hci_event_packet+0x806/0x1290
[ 1296.893339][T15614]        hci_rx_work+0x3eb/0xd40
[ 1296.898293][T15614]        process_one_work+0x8ab/0x1160
[ 1296.903772][T15614]        worker_thread+0xaf5/0x12a0
[ 1296.909071][T15614]        kthread+0x29d/0x330
[ 1296.913670][T15614]        ret_from_fork+0x1f/0x30
[ 1296.918622][T15614] 
[ 1296.918622][T15614] -> #0 (&hdev->lock){+.+.}-{3:3}:
[ 1296.925948][T15614]        __lock_acquire+0x2d18/0x7c40
[ 1296.931342][T15614]        lock_acquire+0x1bb/0x4a0
[ 1296.936391][T15614]        __mutex_lock+0x12d/0xae0
[ 1296.941429][T15614]        l2cap_chan_connect+0xfb/0xe20
[ 1296.946915][T15614]        l2cap_sock_connect+0x576/0x750
[ 1296.952470][T15614]        kernel_connect+0x13e/0x1c0
[ 1296.957676][T15614]        rfcomm_dlc_open+0x600/0x10c0
[ 1296.963061][T15614]        rfcomm_sock_connect+0x2e9/0x600
[ 1296.968701][T15614]        __sys_connect+0x3cb/0x450
[ 1296.973817][T15614]        __x64_sys_connect+0x76/0x80
[ 1296.979109][T15614]        do_syscall_64+0x4c/0xa0
[ 1296.984098][T15614]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1296.990585][T15614] 
[ 1296.990585][T15614] other info that might help us debug this:
[ 1296.990585][T15614] 
[ 1297.000819][T15614] Chain exists of:
[ 1297.000819][T15614]   &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex
[ 1297.000819][T15614] 
[ 1297.013428][T15614]  Possible unsafe locking scenario:
[ 1297.013428][T15614] 
[ 1297.020877][T15614]        CPU0                    CPU1
[ 1297.026249][T15614]        ----                    ----
[ 1297.031610][T15614]   lock(rfcomm_mutex);
[ 1297.035772][T15614]                                lock(hci_cb_list_lock);
[ 1297.042802][T15614]                                lock(rfcomm_mutex);
[ 1297.049488][T15614]   lock(&hdev->lock);
[ 1297.053578][T15614] 
[ 1297.053578][T15614]  *** DEADLOCK ***
[ 1297.053578][T15614] 
[ 1297.061828][T15614] 1 lock held by syz.3.2054/15614:
[ 1297.066939][T15614]  #0: ffffffff8ded61c8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x99/0x10c0
[ 1297.076437][T15614] 
[ 1297.076437][T15614] stack backtrace:
[ 1297.082334][T15614] CPU: 1 PID: 15614 Comm: syz.3.2054 Not tainted syzkaller #0
[ 1297.089877][T15614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1297.099969][T15614] Call Trace:
[ 1297.103270][T15614]  <TASK>
[ 1297.106209][T15614]  dump_stack_lvl+0x188/0x24e
[ 1297.110907][T15614]  ? load_image+0x410/0x410
[ 1297.115475][T15614]  ? show_regs_print_info+0x12/0x12
[ 1297.120706][T15614]  ? print_circular_bug+0x12b/0x1a0
[ 1297.125942][T15614]  check_noncircular+0x296/0x330
[ 1297.130894][T15614]  ? add_chain_block+0x9b0/0x9b0
[ 1297.135852][T15614]  ? lockdep_lock+0xf1/0x1f0
[ 1297.140495][T15614]  ? _find_first_zero_bit+0xd2/0x100
[ 1297.145800][T15614]  __lock_acquire+0x2d18/0x7c40
[ 1297.150672][T15614]  ? verify_lock_unused+0x140/0x140
[ 1297.155894][T15614]  ? __lock_acquire+0x1465/0x7c40
[ 1297.160955][T15614]  ? verify_lock_unused+0x140/0x140
[ 1297.166169][T15614]  ? register_lock_class+0xc0/0x870
[ 1297.171387][T15614]  ? mark_lock+0x94/0x320
[ 1297.175753][T15614]  lock_acquire+0x1bb/0x4a0
[ 1297.180271][T15614]  ? l2cap_chan_connect+0xfb/0xe20
[ 1297.185423][T15614]  ? __might_sleep+0xd0/0xd0
[ 1297.190035][T15614]  ? read_lock_is_recursive+0x10/0x10
[ 1297.195424][T15614]  ? __lock_acquire+0x7c40/0x7c40
[ 1297.200471][T15614]  ? __lock_acquire+0x1465/0x7c40
[ 1297.205514][T15614]  __mutex_lock+0x12d/0xae0
[ 1297.210028][T15614]  ? l2cap_chan_connect+0xfb/0xe20
[ 1297.215150][T15614]  ? do_raw_read_unlock+0x39/0x70
[ 1297.220201][T15614]  ? _raw_read_unlock+0x24/0x40
[ 1297.225074][T15614]  ? hci_get_route+0x3a1/0x4d0
[ 1297.229859][T15614]  ? l2cap_chan_connect+0xfb/0xe20
[ 1297.235004][T15614]  ? mutex_lock_nested+0x10/0x10
[ 1297.239960][T15614]  ? print_unlock_imbalance_bug+0x160/0x160
[ 1297.245883][T15614]  ? mark_lock+0x94/0x320
[ 1297.250243][T15614]  l2cap_chan_connect+0xfb/0xe20
[ 1297.255203][T15614]  ? lock_chain_count+0x20/0x20
[ 1297.260072][T15614]  ? l2cap_sock_connect+0x13e/0x750
[ 1297.265316][T15614]  ? l2cap_chan_le_send_credits+0x590/0x590
[ 1297.271250][T15614]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1297.276638][T15614]  ? _local_bh_enable+0xa0/0xa0
[ 1297.281508][T15614]  l2cap_sock_connect+0x576/0x750
[ 1297.286565][T15614]  ? l2cap_sock_bind+0x870/0x870
[ 1297.291544][T15614]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1297.297550][T15614]  ? memset+0x1e/0x40
[ 1297.301560][T15614]  ? kernel_connect+0xee/0x1c0
[ 1297.306374][T15614]  kernel_connect+0x13e/0x1c0
[ 1297.311084][T15614]  ? kernel_accept+0x420/0x420
[ 1297.315876][T15614]  ? rfcomm_dlc_open+0x5c4/0x10c0
[ 1297.320949][T15614]  rfcomm_dlc_open+0x600/0x10c0
[ 1297.325819][T15614]  ? lock_chain_count+0x20/0x20
[ 1297.330697][T15614]  ? rfcomm_sock_connect+0x2c2/0x600
[ 1297.336020][T15614]  ? rfcomm_dlc_free+0x40/0x40
[ 1297.340823][T15614]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1297.346238][T15614]  ? lockdep_hardirqs_on+0x94/0x140
[ 1297.351459][T15614]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1297.356853][T15614]  ? _local_bh_enable+0xa0/0xa0
[ 1297.361717][T15614]  ? do_raw_spin_unlock+0x11d/0x230
[ 1297.366932][T15614]  rfcomm_sock_connect+0x2e9/0x600
[ 1297.372096][T15614]  ? rfcomm_sock_bind+0x550/0x550
[ 1297.377159][T15614]  __sys_connect+0x3cb/0x450
[ 1297.381776][T15614]  ? __sys_connect_file+0x170/0x170
[ 1297.387023][T15614]  __x64_sys_connect+0x76/0x80
[ 1297.391814][T15614]  do_syscall_64+0x4c/0xa0
[ 1297.396246][T15614]  ? clear_bhb_loop+0x60/0xb0
[ 1297.400944][T15614]  ? clear_bhb_loop+0x60/0xb0
[ 1297.405663][T15614]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1297.411584][T15614] RIP: 0033:0x7f1b6fd9e159
[ 1297.416014][T15614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1297.435634][T15614] RSP: 002b:00007f1b70bc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1297.444073][T15614] RAX: ffffffffffffffda RBX: 00007f1b70026090 RCX: 00007f1b6fd9e159
[ 1297.452094][T15614] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000006
[ 1297.460078][T15614] RBP: 00007f1b6fe3506b R08: 0000000000000000 R09: 0000000000000000
[ 1297.468062][T15614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1297.476076][T15614] R13: 00007f1b70026128 R14: 00007f1b70026090 R15: 00007ffdd6405bf8
[ 1297.484078][T15614]  </TASK>
[ 1297.628770][T15528] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000
[ 1297.689443][T15528] pci 0000:00:03.0: BAR 0 [io  0xc000-0xc03f]
[ 1297.705936][T15528] pci 0000:00:03.0: BAR 1 [mem 0xfe800000-0xfe80007f]
[ 1297.781176][T15528] virtio-pci 0000:00:03.0: BAR 0 [io  0xc000-0xc03f]: not claimed; can't enable device
[ 1297.791727][T15528] virtio-pci: probe of 0000:00:03.0 failed with error -22
[ 1300.805730][ T3640] EXT4-fs error: 54 callbacks suppressed
[ 1300.805749][ T3640] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #259: comm udevd: reading directory lblock 0
[ 1300.830159][ T3640] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4643: inode #1222: block 221: comm udevd: unable to read itable block
[ 1300.852722][ T3640] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4643: inode #1222: block 221: comm udevd: unable to read itable block
[ 1300.867677][ T3640] EXT4-fs error (device sda1): __ext4_get_inode_loc_noinmem:4643: inode #1222: block 221: comm udevd: unable to read itable block
[ 1300.881463][ T3640] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1642: comm udevd: reading directory lblock 0
[ 1300.893126][ T3640] EXT4-fs error (device sda1): __ext4_find_entry:1687: inode #1480: comm udevd: reading directory lblock 0
[ 1305.166559][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[ 1305.172917][ T1281] ieee802154 phy1 wpan1: encryption failed: -22