last executing test programs:

14.132822159s ago: executing program 2 (id=9):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0x4, 0x0, 0x0, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x7}]}, 0x20}}, 0x40880)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9})
dup2(r2, r1)

13.918281488s ago: executing program 2 (id=11):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0x4}, {0x0, 0x1b}}}, 0x24}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006)

13.369827741s ago: executing program 2 (id=12):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'})

13.134233397s ago: executing program 2 (id=14):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet6_dccp(0xa, 0x6, 0x0)
pipe(&(0x7f0000000080))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0)

12.774237132s ago: executing program 2 (id=16):
io_uring_setup(0x835fc, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})
chdir(&(0x7f0000000140)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)

12.168772458s ago: executing program 2 (id=21):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "86f146dc200afe6b", "352b3fc5064288714bcf94d3565768eb", "15fe66b7", "31bbe4f365a4ac26"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
recvfrom$inet6(r0, 0x0, 0x0, 0x260, 0x0, 0x0)

9.357302998s ago: executing program 1 (id=32):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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")
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})

9.156961026s ago: executing program 0 (id=34):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0)=0x8, 0x4)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000080))

8.99848819s ago: executing program 0 (id=35):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c)
ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0)
write$input_event(r0, &(0x7f00000005c0), 0x200005d8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = io_uring_setup(0xc25, &(0x7f0000000740))
dup2(r1, r2)
ioctl$UI_DEV_CREATE(r0, 0x5501)

8.677061806s ago: executing program 1 (id=36):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

7.888404077s ago: executing program 1 (id=38):
r0 = syz_usb_connect$uac1(0x3, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x7, 0x5, 0x1, 0x5}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x8, 0x1, "7ffbf5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x7, 0x1, {0x7, 0x25, 0x1, 0x1, 0x7, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x8, 0x58, 0x1, {0x7, 0x25, 0x1, 0x40, 0x8, 0x1}}}}}}}]}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0)
bpf$ITER_CREATE(0x21, 0x0, 0x0)

5.780382338s ago: executing program 1 (id=44):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005800)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x50}}, 0x0)
syz_mount_image$jfs(&(0x7f0000000440), &(0x7f00000000c0)='./file1\x00', 0x20108c0, &(0x7f0000007680)=ANY=[@ANYBLOB="646973636172642c696f636861727365743d63703835352c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f646973636172642c646973636172643d3078303030303030303030303030303030382c6572726f72733d636f6e74696e7565006969736f383835392d342c756d61736b3d3078303030303030303030303030303038312c696f6368617257fd743d6d6163677265656b2c71756f74612c6572726f72733d72656d6f756e742d726f2c726573697a653d3078303030303030303030181829303030303030312c756d61736b3d3078303030303030303030303032303034352c66736d616769633d3078303030303030303030303030303030392c646566636f6e746578743d726f6f742c66736e616d653d757d407d587d5b2d292b2c000d1c13f7c892c8615d265c6376539175380511bac765713e83a65e4fdf011c705fc6838005120385ac61b970f45d1492a0612eb8000000000000808fc76f91b7b9a5ce77887858ea333961d1ef1e4eabd4c84e81dbf575c47e9b8eea9d6806fa159e052514676312b4931cffed0000000000000000000000ce7774e1702d7ff58725c46a3d9f5f98b7ab46fb7be980026851aefea20506f5caf84a78b5c15d6365b3d469ed0fa865bd9b8d80b8850ea8dc8209377972a176dfb1970200dade8e1c289f5eac9801413104891721392eb88dc6a9b42c2b5b8d382cbde928f38d2a77832ec7c440eec2aa839dd6043a3e7f108c21a9976be3eaedf2a10a95583da1e88a5147bd9d8fc1af1f38a2242c8d18eb77928581bde8bd5642305d66b53363b56fb3aeed3b5a3d9e433046041e4d471b597e1519e7d4778eb97d1af228fef2d95335caa92e865be4801c69fcdd043eccbe028b2b4a0a3832b8f76399cc875e6863b545"], 0xfe, 0x61d0, &(0x7f0000001480)="$eJzs3c1vHGcdB/Dfvtsuba0eqhIh5KblpZQmcVJCoEDbAxy49IByRYlct4rqAkoCSiuLuPKFAyf+AhASNxDiiDjwB/TAlRsnTkSykUA9MWjs54lnN7tZp4531p7PR3JmfvPMep/xd2dfMjP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3//eD1ZbEXHtZ2nBcsRnohPRjlgs65WIWFxZzut3I+K52GuOZyOiN4gob7/3z9MRr0bEx09F7OxurpWLLx6yH9/9499/+8Mn3vrbH3rn//un253XJq13584v//Pnu0fbZgAAAGiaoiiKVvqYfyZ9vm/X3SkAYCby63+R5OWnvv7VP9/6yzz1R61Wq9XqGdRVxXh3q0VEbFVvU75ncDgeAE6Yrfik7i5QI/k3Wjcinqi7E8Bca9XdAY7Fzu7mWivl26q+Hqzst+dzQYby32rdv75j0nSa0XNMZvX42o5OPDOhP4sz6sM8yfm3R/O/tt/eT+sdd/6zMin//v6lT42T8++M5j/i9OTfHpt/U+X8u4+Uf0f+AAAAAAAwx/L//y/XfPx3cPRNOZSHHf9dmVEfAAAAAAAAAOBxO+r4f/cZ/w8AAADmVvlZvfTrpw6WTfoutnL51VbEk2n938+kh8DcSRfLLNXdDwAAAAAAAAAAAABoku7+ObxXWxG9iHhyaakoivKnarR+VEe9/UnX9O2HJqv7SR4AAPZ9/NTwtf/RiliIiKvpu/56S0tLRbGwuFQsFYuD/H62P1goFiufa/O0XDboH+INcbdflL9soXK7qmmfl6e1j/6+8r76RecQHXtMeumvOaG5prABINl/NdrxinTKFMXTk958wBD7/ym0HMt1P66Yf3U/TAEAAIDjVxRF0Upf530mHfNv190pAGAm8uv/6HGBI9XtCe0Rj+f3q9VqtVqt/lR1VTHe3WoREVvV25TvGQzHDwAnzFZ8UncXqJH8G60bEc/V3QlgrrXq7gDHYmd3c62V8m1VXw/S+O75XJCh/Ldae7fLtx83nWb0HJNZPb62oxPPTOjPszPqwzzJ+bdH87+2395P6x13/rMyKf/+3iVzzZPz74zmP+L05N8em39T5fy7j5R/R/4AAAAAADDH8v//Lzv+mzcZAAAAAAAAAE6cnd3NtXzdaz7+/7kx67n+83TK+bceNf/FNC//Ey3n3x7J/8sj63Uq8/fePNj//727ufa72//6bJ4eNv9BnmmlR1YrPSJa6Z5a3TQ9ytY9aLvX6Zf31Gu1O910zk/ReyduxEasx4Whddvp73HQvjrUXva0N9R+cai9+0D7paH2XvregWIxt5+LtfhxbMTbe+1l22DK9i9MaS+mtOf8O57/Gynn3638lPkvpfbWyLR076P2A/t9dTruft648flfXDj+zZlqOzr3t62q3L6zNfRn72/yRD9+emv95rk712/fvrkaaTK09GKkyWOW8+/t/QwOnv9f2G/Pz/vV/fXeR/1Hzn9ebEd3Yv4vVObL7X1pxn2rQ86/n35y/m+n9vH7/0nKf/iV5mH7/8sz6xMAAAAAAAAAAAAAAAAcTlEUe5eIvhERl9P1P3VdmwkAzFZ+/S+SvFytVqvVavXpq6uK8V6vFhHx1+ptyvcMPx/3ywCAefa/iPhH3Z2gNvJvsPx9f+X0xbo7A8zUrQ8+fO/6xsb6zVt19wQAAAAAAAAA+LTy+J8rlfGfX4yI5ZH1hsZ/fTNWjjr+ZzfP3B9g9DEP9D3BdrvfaVeGG38+9sbnPjdp/O+z8eD433lM3E51OyboTWnvT2kfTGlfGLv0IK2xF3pU5Pyfr4x3XuZ/ZmT49ZM7/uuwh43/OjrmfRPk/M9WHs9l/l8aWa+af/Gbuct/67Arbkd7KP/zt9//yflbH3z4yo33r7+7/u76jy6trl64dPnylStXzr9zY2P9wv6/x9PrOZDzz2NfOw+0WXL+OXP5N0vO/wupln+z5Py/mGr5N0vOP7/fk3+z5PzzZx/5N0vO/6VUy79Zcv5fSbX8m2Vnd3NQ5v9yquXfLHn//2qq5d8sOf9XUi3/Zsn5n0u1/Jsl538+1YfI39fDnyI5/3yEy/7fLDn/1VTLv1ly/hdTLf9myflfSrX8myXn/2qq5d8sOf+vpVr+zZLzv5xq+TdLzv/rqZZ/s+T8r6Ra/s2S8/9GquXfLDn/b6Za/s2S838t1fJvlpz/t1It/2bJ+X871fJvlpz/d1It/2bJ+b+eavk3y8H3/5sxY6acGdgv3ru+UfczEwAAAAAAAAAAAAAwahanE9e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrvOuH/iZvXntNI3bpqmTv9uuHdd1nE12fYkv/WPipkkakpaSKw2X2Ma7drb1LV6bJiGSXdLSSHVEhYoIL4C2iiASqmqhvigolLxAXF4gAkLlDSpCikSE0iitqASoZNHMeZ5nZ2ZnZ3a94/XsOZ+PZP92Z86Z88yZ55yd39rfOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTb8LHJL1WyLKv+qf21NsveUf169cja2m0fudIjBAAAAJbqf2t/v3VNumH/AlaqW+avP/D3356ZmZnJPt3/24NfnZlJd4xk2eCqLKvdF138t0cr9csEz2bDlb667/s6bL6/w/0DHe4f7HD/UIf7V3W4f7jD/XN2wByr89/H1B5sU+3Ltfkuza7NBmv3bWqx1rOVVX198Xc5NZXaOjODR7Kp7Fg2mY03LJ8vW6kt//KG6rbuyeK2+uq2tb46Q374zOE4hkrYx5satjX7mNEPPpqN/OiHzxz+wzNvXN+qdtwNDY+Xj3PLxuo4vxBuycdayValfRLH2Vc3zvUtXpP+hnFWautVv24e51sLHGf/7DCXVfNrPpz11b5+tbafBup/rZf20/pw23/dmGXZ+dlhNy8zZ1tZX7am4Za+2ddnOJ+R1ceoTqV3ZwOLmqcbFjBPq3ViU+M8bT4m4uu/Iaw3MM8Y6l+mH3x+aM7rvth5GlWf9XzHSvMc7Pax0itzMM6LV2tP+rmWc3BTeP7PbJ5/DracOy3mYHredXNwY6c52DfUXxtzehEqtXVm5+C2huX7a1uq1Orrm9vPwbEzx0+NTT/19C1Txw8dnTw6eWLHtm3jO3bt2rNnz9iRqWOT4/nfl7i3e9+arC8dAxvDvovHwIeblq2fqjNf795xONzmOFzbtGy3j8OB5idXWZ4Dcu6czo+Nh6o7ffhCXzbPMVZ7fbYu/ThMz7vuOByoOw5b/kxpcRwOLOA4rC5zauvC3rMM1P1pNYbL9bNgbd0cbH4/0jwHu/1+pFfm4HCYF/+ydf6fBevDeJ8bXez7kf45czA93XDuqd6S3u8P76mVVvPyhuodVw1lZ6cnT9/65KEzZ05vy0JZFu+pmyvN83VN3XPK5szXvkXP1/1TH3juhha3rw37aviW6l/D875W1WV23tr+tar9dGu9Pxtu3Z6F0mXLvT9b/TSv7s/US7bZn9VlvjC29PfiqS+tO/8OznP+jX3/2/n20kM92z84kB+//WnvDDacjxtfqoHauatS2/ZbYws7Hw+GP8t9Pr62zfl4XdOy3T4fDzY/uXg+rnT6bcfSNL+ew2GeHBtvfz6uLrNu+2Ln5EDb8/GNoVbC/r8pdAqpL6qbO/PN27StgYHB8LwG4hYa5+mOhuUHQ29W3dZL2y9tnm65MX+s/vTsZi3XPB1pWrbb8zSdr+abp5VOv327NM2v53CYF9fuaD9Pq8u8snPp587V8cu6c+dQpzk42D9UHfNgmoT5+X5mdZyDt2aHs5PZsWyidu9QbT5VatsavW1hc3Ao/Fnuc+W6NnNwS9Oy3Z6D6efYfHOvMjD3yXdB8+s5HObFC7e1n4PVZe7c3d33rlvCLWmZuveuzb9fm+93Xjc07abL+Tuv6jj/cnf7381Wlzm2Z7F9Zvv9dHO45aoW+6n5+J3vmJrIlmc/rQvjfGPP/PupOp7qMl/du8D5tD/LsnNP3FH7fW/495U/Ofu9bzf8u0urf9M598Qdb1595K8WM34AVr6387Im/1lX9y9TC/n3fwAAAGBFiH1/X6iJ/h8AAAAKI/b98X+FJ/p/AAAAKIzY9w+EmpSk/1935xtTb5/LUjJ/Joj3p91wb75czLiOh+9HZmZVb7/jxckf/9m5hW27L8uyn9z7ay2XX3dvHFduJIzz4l2Nt89d8dyCtn/w4dnl6vPrXwuPH5/PQqdBqwjueJZlL1/zfG07I49eqNVX7j1Yqw+cf+7Z6jJv7c2/j+u//p58+d8L4d/9Rw41rP962A+vhTp+X+v9Edf71oWb1u9+ZHZ7cb3KxnfWnvYLj+WPGz8n5yvP5svH/Tzf+P/8yy99q7r8kx9qPf5zfa3H/1J43BdD/e/358vXvwbV7+N6Xwzjj9uL6936je+2HP/FL+XLn7o7X+5gqHH7W8L3m+5+Y6p+fz1ZOdTwvLKP58vF7Y9/7zdr98fHi4/fPP7hAxca9kfz/HjlH/PHGWtaPt4etxP9adP2q49TPz/j9l/6jYMN+7nT9i8+8Pr7q4/bvP2bm5brb1q/+RObfv+Lz7fcXhzP/m+eang+++8Px3HY/guPhfkY7v+fi883bDc6eH/j+Scu/7W15xqeT3TPj/LtX7z9aK3++8iPf/eqd1z9zvMfrO67LHv1wfzxOm3/6B+cbBj/16/bWns94v0xo9+8/fnE7Z/+3OiJk9Nnpybq9mrts3M+kY9n1fDqNdXxXhPOrc3fHzh55vHJ0yPjI+NZNlLcj9C7ZN8I9c28nF/s+lsfDq/nDb/z8prN//DlePs/P5TffuG+/OfWh8NyXwm3r81fv5nKErf/wobrasd35ZX8+4Ycexes3/Qfexa0YHj+ze8L4nw/9d7Ha/uhel/t50Y8rpc4/u9P5I/znbBfZ8InM2+8bnZ79cvHz0a48GB+vC95/4XTXHxd/yi83p98LX/8OK74fL8f3sd8d13j+S7Oj++c62t+/NqneJwP55PsfH5/XCru7wtvXddyePFzSLLz19e+/630ONcv6mnOZ/qp6bFjUyfOPjl2ZnL6zNj0U08fOH7y7IkzB2qf5XngM53Wnz0/ramdnyYmd+3MxldnWXYyG1+GE9blGX/1q4WN/9TDhyd2j2+emDxy6OyRMw+fmjx99PD09OHJienNh44cmfxcp/WnJvZt2753x+7to0enJvbt2bt3x97RqRMnq8PIB9XBrvHPjp44faC2yvS+nXu33XbbzvHR4ycnJvftHh8fPdtp/drPptHq2r86enry2KEzU8cnR6ennp7ct23vrl3bO34a4PFTR6ZHxk6fPTF2dnry9Fj+XEbO1G6u/uzrtD7FNP2v+fvZZpX8g/iyT928K30+a9WLn5/3ofJFmj5A9I3wWTR/+65Texbyfez7B0NNStL/AwAAQBnEvn8o1ET/DwAAAIUR+/5VoSb6fwAAACiM2PcPh5qUpP+X/5f/X1j+P7+/6/n/ytxwrPz/7HpXOv9/6ok8V7rS8/8xPy//Xw5XOP+/5O3L/8v/Fy//v/D8/Eofv/y//D9z9Vr+P/b9q7OslP0/AAAAlEHs+9eEmuj/AQAAoDBi339VqIn+HwAAAAoj9v3vCDUpSf8v/7+g/P/2ToGr4uf/Xf9f/j9bmfn/+OLI/5fGovP3jzzU8K38fyD/f0Xz/6vnGZ78f2+PX/5f/p9mg/Pec6Xy/7HvvzrUpCT9PwAAAJRB7PvfGWqi/wcAAIDCiH3/NaEm+n8AAAAojNj3rw01KUn/L//v+v/y//L/hc7/L/X6/3WDkf9fGVz/vz35/w4uOf8/7Pr/KzH/P9jd8fd2/r/j8OX/uSx67fr/se9/V6hJSfp/AAAAKIPY97871ET/DwAAAIUR+/73hJro/wEAAKAwYt9/bahJSfp/+X/5f/l/+X/5/9bb73z9//wr+f/eIv/fnvx/Bz1y/X/5/5U5/t7O/3f7+v+DdzWvL/9PK72W/499/3tDTUrS/wMAAEAZxL7/ulAT/T8AAAAURuz73xdqov8HAACAwoh9/7pQk5L0//L/8v/y//L/8v+tt985/5+T/+8t8v/tyf93IP8v/y//v7D8f4s3v/L/tNKd/H/dIkvM/8e+//pQk5L0/wAAAFAGse+/IdRE/w8AAACFEfv+/xdqov8HAACAwoh9//pQk5L0//L/8v/y/+XK/988JP8v/19s8v/tyf93IP8v/y//v8Dr/8+1mPz/qk4PRmF0J/+fZd3K/8e+//2hJiXp/wEAAKAMYt//gVAT/T8AAAAURuz7Pxhqov8HAACAwoh9/0ioSUn6f/n/YuX///gvXvhgJv8v/99h+wXN/8dpIP9fcvL/7cn/dyD/L/8v/78s+X/Ko9fy/7Hv3xBqUpL+HwAAAMog9v0bQ030/wAAAFAYse+/MdRE/w8AAACFEfv+TaEmJen/5f+Llf+P5P/l/9tt/0rk///ptbx2Mf8/lLn+v/x/C/L/LdQdpPL/Hcj/dzM/P5Bl8v8rL/8f3/3K/9MdvZb/j33/h0JNStL/AwAAQBnEvn9zqIn+HwAAAAoj9v0fDjXR/wMAAEBhxL5/S6hJSfp/+X/5f/l/+f+CXP8/kf8vN/n/9hab/x+S/5f/d/3/kuX/Xf+f7uq1/H/s+28KNSlJ/w8AAABlEPv+raEm+n8AAAAojPj/N/P/96r/BwAAgCKKff9oqElJ+n/5/wXm/8NznO+h5f8bx9+r+f+K/L/8v/x/4cn/t+f6/x3I/8v/y//L/9NVvZb/j33/LaEmJen/AQAAoAxi339rqIn+HwAAAAoj9v1joSb6fwAAACiM2PePh5qUpP+X/3f9/zLl/13/X/5f/r/45P/bk//vQP5f/r9o+f8sk//niuq1/H/s+7eFmpSk/wcAAIAyiH3/9lAT/T8AAAAURuz7d4Sa6P8BAACgMGLfvzPUpCT9v/y//L/8v/y//H/r7cv/r0zy/+3J/3cg/y//X7T8v+v/c4X1Wv4/9v23hZqUpP8HAACAMoh9/65QE/0/AAAAFEbs+3eHmoT+v9X/6wYAAABWltj37wk1Kcm//8v/FyT//+t/07Bt+X/5/3bb707+f7X8f6jy/72loPn/5sPiksn/dyD/L/8v/y//T1f1Wv4/9v17Q01K0v8DAABAGcS+/yOhJvp/AAAAKIzY9///UBP9PwAAABRG7Pt/KtSkJP2//H9B8v9N5P/l/9tt3/X/5f+LrKD5/8UamO+OQuX/++T/5f97a/zy//L/zHX58//xq4Xl/2Pfvy/UpCT9PwAAAJRB7Pt/OtRE/w8AAACFEfv+20NN9P8AAABQGLHv3x9qUpL+X/5f/l/+X/7/8uT/b8+a9WL+vzp55P+LRf6/vULl/13/X/6/x8Yv/y//z1y9dv3/2Pd/NNSkJP0/AAAAlEHs++8INdH/AwAAQGHEvv9joSb6fwAAACiM2PffGWpSkv5f/l/+X/7/0vL/5+vGK//fyPX/W5P/Xx7y/+3J/3cg/y//L/8v/09X9Vr+P/b9d4WalKT/BwAAgDKIff/doSb6fwAAACiM2Pd/PNRE/w8AAACFEfv+e0JNStL/y//L/8v/u/6//H/r7cv/r0zy/+3J/3cg/y//L/8v/09X9Vr+P/b9PxNqUpL+HwAAAMog9v33hpro/wEAAKAwYt9/X6iJ/h8AAAAKI/b9nwg1KUn/L/8v/y//L/8v/996+13M/+/L5P+Xjfx/e/L/Hcj/y//L/8v/01W9lv+Pff8nQ01K0v8DAABAGcS+/2dDTfT/AAAAUBix7/9UqIn+HwAAAAoj9v0/F2pSkv5f/l/+v7fy/zPn6teT/5f/z7qV/6+u5Pr/pSD/3578fwct8v+r5P/l/+X/5f+5ZL2W/499//2hJiXp/wEAAKAMYt//QKiJ/h8AAAAKI/b9D4aa6P8BAACgMGLf/1CoSUn6f/n/Uub/01Puvfy/6//L/xfy+v818v/LQ/6/Pfn/Dlz/X/5f/l/+n67qtfx/7PsfDjUpSf8PAAAAZRD7/kdCTfT/AAAAUBix7//5UBP9PwAAABRG7Ps/HWpSkv5f/r+U+f8evv5/0fL/Aw3zo0z5/+G61zPNS/l/+f9lIP/fnvx/B/L/8v+9nP8Ps3n1POvL/9OLei3/H/v+R0NNStL/AwAAQBnEvv8XQk30/wAAAFAYse//xVAT/T8AAAAURuz7fynUpCT9v/y//L/8v+v/X478f/3rGcn/y/8vhxWe//+7q+X/5f/l/1fs+F3/X/6fuXot/x/7/l8ONZm38XvzPxfwNAEAAIAeEvv+x0JNSvLv/wAAAFAGse8/EGqi/wcAAIDCiH3/wVCTkvT/8v/N+f94RVX5f/l/+f+l5P9rr+M3G/Ow8v/y/8uhe/n/912dZa7/L/8v/y//L/8v/89S9Fr+P/b9h0JNStL/AwAAQBnEvv9XQk30/wAAAFAYse8/HGqi/wcAAIDCiH3/RKhJSfr/K5j/H+zN/L/r/19q/v8n8v/y/4H8f2vy/8tjhV//X/5f/l/+fwWPX/5f/p+5ei3/H/v+yVCTkvT/AAAAUGDp18Gx7z8SaqL/BwAAgMKIff/RUBP9PwAAABRG7PsfDzUpSf/v+v/y/67/fyXy/wMNy8v/5+T/5f+7Qf6/Pfn/DuT/5f/l/+X/6apey//Hvn8q1KQk/T8AAACUQez7PxNqov8HAACAwoh9/2dDTfT/AAAAUBix7z8WalKS/l/+X/6/7Pn/Spadd/1/+f9W25f/X5nk/9uT/+9A/l/+X/5f/p+u6rX8//+xdx9Ncp3XHYfbNImwcNn+Bl575aW9oj+Ct965yms60tkSSeUsUTkHKuecJYrKOedM5RypSKkKKg7OOcBgGrcBTKP73vc8z+YYKMI9IId0/Y361Zu7/4a4pcn+BwAAgA5y9/9T3GL/AwAAwDBy9/9z3GL/AwAAwDBy9/9L3NJk/+v/9f/d+//VXt7/P/zX6//P0v/r/7fhSH9/7fq/7mJR+EX7/7/66xv/Qf+v/9f/T+re/69WN+v/9f9cYG79f+7+f41bmux/AAAA6CB3/7/FLfY/AAAADCN3/7/HLfY/AAAADCN3/41xS5P9r//X/+v/9f+H+v879P/6/2Xz/v80/f8G+n/9v/f/9f9s1dz6/9z9/xG3NNn/AAAA0EHu/v+MW+x/AAAAGEbu/v+KW+x/AAAAGEbu/v+OW5rsf/2//l//v5T+/4T3/y/4/ej/9f/r6P+n6f830P/r//X/+n+2am79f+7+/4lbmux/AAAA6CB3///GLfY/AAAADCN3///FLfY/AAAADCN3///HLU32v/5f/391+/8/Obj6/7MW8f6//l//v3C3rc79N0H/f5T+f4MN/f9qpf+fcsn9/Prf3nK+/ovQ/+v/OWpu/X/u/nvFLX+7Wp240t8kAAAAMCu5++8dtzT5838AAADoIHf/TXGL/Q8AAADDyN1/c9zSZP/r//X/3v/X/+v/13++/n+ZvP8/7fj9/1/+2Q3/2Lf/9/7/NO//b7v/v+c7Q//Pss2t/8/df0vc0mT/AwAAQAe5++8Tt9j/AAAAMIzc/feNW+x/AAAAGEbu/vvFLU32v/5/tP7/jw/9uvP6/4PaRf+v/9f/6/9Hp/+f5v3/DQ7+M3e6fqj/1/97/1//z/HMrf/P3X//uKXJ/gcAAIAOcvc/IG6x/wEAAGAYufsfGLfY/wAAADCM3P0Pilua7H/9/2j9/+Ff5/1//f+6z9f/6/9Hpv+fpv/fYJT3/6/wu2bf/fxx7fvr1//r/zlqbv1/7v4Hxy1N9j8AAAB0kLv/IXGL/Q8AAADDyN3/0LjF/gcAAIBh5O5/WNzSZP/r//X/y+j/8xP0//r/q9//J/3/Mun/p+n/Nxil/79C++7nl/716//1/xw1t/4/d//D45Ym+x8AAAA6yN3/iLjF/gcAAIBh5O5/ZNxi/wMAAMAwcvc/Km5psv/1//r/ZfT/3v/X/3v/X/9/afT/0/T/G+j/9f/6f/0/WzW3/j93/61xS5P9DwAAAB3k7n903GL/AwAAwDBy9z8mbrH/AQAAYBi5+x8btzTZ//p//b/+X/+v/1//+fr/ZdL/T9P/b6D/1//r//X/bNWM+v/zftWp1ePilib7HwAAADrI3f/4uMX+BwAAgGHk7n9C3GL/AwAAwDBy9z8xbmmy//X/s+n/D3K+sfr/06vVSv+/atr/nz7vn2d9X+r/9f87oP+fpv/fQP+v/9f/6//Zqhn1/wc/zt3/pLilyf4HAACADnL3Pzlusf8BAABgGLn7nxK32P8AAAAwjNz9T41bmux//f9s+v8DY/X/3v+/8PujU//v/f+j9P+7of+fpv/fQP+v/9f/6//Zqrn1/7n7nxY3nbjuin+LAAAAwMzk7n963NLkz/8BAACgg9z9z4hb7H8AAABYqFuP/Ezu/mfGLU32v/5/u/3/ifN+Tv+v/7/w+0P/r//X/199+v9p+v8N9P/6f/2//p+tmlv/n7v/WXFLk/0PAAAAHeTuvy1usf8BAABgGLn7nx232P8AAAAwjNz9z4lbmux//b/3//X/+n/9//rP1/8vk/5/mv5/A/2//n+//f/Jc/+j/p8xXEb/f+bMmZuuev+fu/+5cUuT/Q8AAAAd5O5/Xtxi/wMAAMAwcvc/P26x/wEAAGAYuftfELc02f/6/6b9f36rL6v/v3m10v/r//X/+v9p+v9p+v8N9P/6f+//6//Zqrm9/5+7/4VxS5P9DwAAAB3k7n9R3GL/AwAAwDBy9784brH/AQAAYBi5+18StzTZ//r/pv2/9//1//r/Xff/d6/0/zuxiP7/9MU/f+79/y36f/3/hHb9/9/9zaEf6v/1/xw1t/4/d/9L45Ym+x8AAAA6yN3/srjF/gcAAIBh5O5/edxi/wMAAMAwcve/Im66tsn+1//r//X/+n/9//rP3/H7/ydWq5X+fwsW0f9PmHv/v533/y/8t/wc/b/+f8lfv/5f/89Rc+v/c/e/Mm5psv8BAACgg9z9r4pb7H8AAAAYRu7+V8ct9j8AAAAMI3f/a+KWJvtf/6//1//r/4fv/29ZRP/v/f8t0f9Pm0f/f3H6f/3/kr9+/b/+n0u3r/4/d/9r45Ym+x8AAAA6yN3/urjF/gcAAIBh5O5/fdxi/wMAAMAwcve/IW5psv/1//r/y+n/8+vU/4/V/5+cXf9/6tD/vibv/+v/t0T/P03/v4H+X/+v/79V/882ze39/9z9b4xbmux/AAAA6CB3/5vi1v/r1v4HAACAYeTuf3PcYv8DAADAMHL3vyVuabL/9f/6f+//6/93/P7/n9++6/f/9f+t6P+n6f830P/r//X/3v9nq+bW/+fuf2vc0mT/AwAAQAe5+2+PW+x/AAAAGEbu/rfFLfY/AAAADCN3/x1xS5P9r//X/+v/9f877v8v4f3/w3bR/1+j/x+G/n/abvr/0/p//X/1838U/xbo//fd/6/0/+zF3Pr/3P1vj1ua7H8AAADoIHf/O+IW+x8AAACGkbv/nXGL/Q8AAACLdO2an8vd/664pcn+1//r//X/+n/9//rP1/8v0176//ym0P97/z/06f//4tCPlvb+/4X/92vs/t/7/+zH3Pr/3P3vjlua7H8AAADoIHf/e+IW+x8AAACGkbv/vXGL/Q8AAADDyN3/vrilyf7X/+v/9f/6f/3/+s/X/y+T9/+n6f830P/v9f38pX/9+n/9P0fNrf/P3f/+uKXJ/gcAAIAOcvd/IG6x/wEAAGAYufs/GLfY/wAAADCMg92fcVnD/a//1//r//X/+v/1n3+c/v/06ij9/27o/6fp/zfQ/+v/9f/6f7Zqbv3/hw5+1anVh+OWJvsfAAAAOsjd/5G4xf4HAACAYeTu/2jcYv8DAADAMHL3fyxuabL/9f/6/2X0/2fOnLlJ/6//P/z7Odf/3zm7/n8d/f9u6P+n6f830P/r//X/+n+2am79f+7+j8ctTfY/AAAAdJC7/xNxi/0PAAAAw8jd/8m4xf4HAACAYeTu/1Tc0mT/6/9n0P+f0v97/1//vxrs/f919P+7of+fpv/fYMT+/9Sl//b33c8f176/fv2//p+j5tb/5+7/dNzSZP8DAABAB7n7PxO32P8AAAAwjNz9n41b7H8AAAAYRu7+z8UtTfa//n93/f89f++6vP9/erX+69f/6//1//r/q03/P03/v8GI/f9l2Hc/v/SvX/+v/+eoufX/ufs/H7ccHn7XXd7vEgAAAJiT3P1fiFua/Pk/AAAAdJC7/4txi/0PAAAAw8jd/6W4pcn+1//P4P3/Aft/7/+v//7Q/8+6/79G/z8G/f80/f8G+n/9v/5/S/1/fjfr/7ubW/+fu//LcUuT/Q8AAAAd5O7/Stxi/wMAAMAwcvd/NW6x/wEAAGAYufvvjFvO2//r2u5R6P/1//p//b/+f/3n6/+XSf8/7VL7/5Or4/X/Sf+v/9f/d+3/vf/PWXPr/3P3fy1u8ef/AAAAsDjXXeTnc/d/PW6x/wEAAGAYufu/EbfY/wAAADCM3P3fjFvuumZfX9JO6f/1//p//b/+f/3n6/+XSf8/zfv/G+j/t9HPX6//H6P/X630/xzf3Pr/3P3filv8+T8AAAAMI3f/t+MW+x8AAACGkbv/O3GL/Q8AAADDyN3/3bilyf7X/+v/j9n/H6SZ+v+z9P9n6f/X0//vhv5/mv5/A/2/9//1/97/Z6vm1v/n7v9e3NJk/wMAAEAHufu/H7fY/wAAADCM3P0/iFvsfwAAABhG7v4fxi1N9v/O+v8LA+H4W63/X3z/7/1//b/+X/8/K/r/afr/DfT/+n/9v/6frZpb/5+7/0dxS5P9DwAAAB3k7v9x3GL/AwAAwDBy9/8kbrH/AQAAYBi5+38atzTZ/97/1//r//X/+v/1n6//Xyb9/zT9/3r1D0r/r//X/+v/2aq59f+5+38WtzTZ/wAAANBB7v6fxy32PwAAAAwjd/9dcYv9DwAAAMPI3f+LuKXJ/tf/6//1//p//f/6z9f/L5P+f9o++/+//9PNH+v9/733//kl6P/1//p/tmJu/X/u/l/GLU32PwAAAHSQu/9XcYv9DwAAAMPI3f/ruMX+BwAAgGHk7v9N3NJk/2/o/0/WX6j/n6T/P/z16//Xf3/o//X/+v+rT/8/zfv/G+j/vf+v/9f/s1Vz6/9z9/82bmmy/wEAAKCD3P13xy32PwAAAAwjd//v4hb7HwAAAIaRu//3cUuT/e/9/yX1/9fr//X/+n/9v/5/A/3/NP3/Bvp//b/+X//PVs2t/8/d/4cAAAD//2GkTPg=")
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @private=0x4a010104, 0x2, 0x1, 'ovf\x00', 0x20, 0xc, 0x80}, 0x2c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

5.079844149s ago: executing program 1 (id=47):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x0, 0x0, 0x0)

4.349830421s ago: executing program 0 (id=51):
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"])
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x5}]}]}]}}]}, 0x4c}}, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x1})
ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040))

4.140922461s ago: executing program 0 (id=52):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x10, 0xffff}}}, 0x24}}, 0x0)

3.534843187s ago: executing program 4 (id=55):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f1, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)
close(r0)

3.360971001s ago: executing program 3 (id=56):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x3, 0x4)
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'w\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

3.359929332s ago: executing program 4 (id=57):
r0 = userfaultfd(0x801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000600))
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

3.202215588s ago: executing program 3 (id=58):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x3, @remote, 0x8}}}, 0x90)

3.180760463s ago: executing program 4 (id=59):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f00000005c0), 0x10)
recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000022c0)=""/4085, 0xff5}, {0x0}], 0x2}}], 0x1, 0x10000, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4)
sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x8, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0)

3.056868399s ago: executing program 3 (id=60):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
socket(0x28, 0x5, 0x4)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
listen(r2, 0xd79)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000001100)={0x0, [[0x3], [0xc], [0x9]], '\x00', [{0x0, 0xfffffff5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x1a8, 0xd0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)

2.970877928s ago: executing program 3 (id=61):
syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xba, 0x5d, 0x8d, 0x10, 0x499, 0x5003, 0xffcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x0, 0xf6, 0x6e, 0x8d}}]}}]}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r0 = io_uring_setup(0x79cd, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x1000})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)

1.236730007s ago: executing program 3 (id=62):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
r1 = syz_io_uring_setup(0x222c, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0})
io_uring_enter(r1, 0x54, 0x0, 0xf, 0x0, 0x0)

1.075723728s ago: executing program 3 (id=63):
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}})
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
fcntl$setstatus(r2, 0x4, 0x42400)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040))

508.33355ms ago: executing program 4 (id=64):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
r1 = socket(0x2, 0x3, 0xff)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x29}, @void, @val={0xc, 0x99, {0x2, 0x3f}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x52, 0xc5, "9b5045b4dd73e7ccf3f14d55807ab5341bcbf6a7f3070a691418ff358b39af6f5d66655d6951f762b764620dee6ddac5ab9e25a846234bd95b2d9d196717b008997cd5e69520a5b292d1d50bfd74"}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[], 0x14)

435.416274ms ago: executing program 0 (id=65):
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x27a)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r0, &(0x7f0000000fc0)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a90740f8cb9694c01f0000b95936415d219753d982b3e68b52070adabe6f61dce71ee97249cf86cdd7b9a6b4b3d24ddebcf8ea3bc4b95202caf747a6d08820eb839fd9865278a155d209a9b481dc20956ca89d1f634957b4333b07d4d908b012aebd6211cfac054ba3068ed9ee4411c7fb40e35bd02f68f1874106a395079c1c09", 0xa8)
write$binfmt_misc(r0, &(0x7f0000000300)="38ad09ec60e9ba971eb5010a3c39e65d3f54ec4d9f07e60c45dceaf6d30e56ccf90edb8cf95119f3324635fe7ae835923a9a1fe4e2cc02992bb9c7567468078a12a82c41fd5bce0598f194632c7b78f03b0f1fb3e75a7bf41533883195f4277c6bbde841eeb7af5a1f4383ad83c43d0c8ae7bda6ab8364b68c454b03264e2c8daf4324ee8951bfd36962298542c41800bd1a9a5634b4f46134e0564a8778769bf1466071c60c1a29e16a0b8131df41ae83862a5f93895f9d476a0a54faf3a53c3786c3dbe83f24552c7ea3edd3ba40b3b230098005a52220cc", 0xd9)
write$qrtrtun(r0, &(0x7f0000000900)="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", 0x2dd)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)

392.061376ms ago: executing program 1 (id=66):
r0 = gettid()
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20)
syz_pidfd_open(r0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xa6, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x64b, 0x2}, {0x6, 0x24, 0x1a, 0x6, 0x16}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0xa2, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x6, 0x2, 0x3e}}}}}}}]}}, 0xfffffffffffffffc)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc8, 0x8}}}, 0x7)

279.515309ms ago: executing program 4 (id=67):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$video(&(0x7f0000000400), 0x9, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)

70.237778ms ago: executing program 0 (id=68):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400})
r1 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x1})
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18)

0s ago: executing program 4 (id=69):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$eJzs3c1vHGcdB/DvrNeuHargtEkboSKiRCpIFolf5IK5EBBCPlSoKgfOVuI0VjZOZbvIrRC4FMEJiUP/gILkGyck7kHhXG69+lgJiUvEIeJiNLOz9tq7ju3Eb4HPJxo/z8zzzDO//e0zM951Vhvg/9bsWJoPU2R27O3Vcn1jfaq1sT71Ut3cSlLWG0mzXaRYTIpHyc2yveha0lX2+HRh5t0vHm982V5r1kvVv/G0/fro03etXnIlyUBd9ho86CF2jHcrycs9XYYOOtaOjmXSrtUlnLrNHmuH2f0w5y1wxnTuTkX7vtljNDmXZLj+PSD11aFxchEej0Nd5QAAAOAF9fmD044AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXjz19/8X9dKoy1xJ0fn+/6HOtrr+Qnt42gEAAAAAAAAAwBH4xpM8yWrOd9Y3i+pv/lerlYv5z2bylXyQ5cxnKdezmrmsZCVLmUgy2jXQ0OrcysrSxNaepf57Tvbdc/KkHjEAAAAAAAAA/E/6dWa3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnQZEMtItqudipj6bRbFczVP5YS/7Rqb8gin4bH558HAAAAPBchp9hn68+yZOs5nxnfbOoXvO/Vr1eHs4HWcxKFrKSVuZzu34NXb7qb2ysT7U21qful0vvuD/416HCqEZM+72H/ke+XPUYyZ0sVFuu51YVzO00qj1Llzvx9I/r4zKm4vu1A0bWrNNaHuwPe72LcCQO+1bEaBlcspWR8Tq2MhsX2hkoqjdqkt2Z2PfZae4+UhoZ3DrSRBpb7/xcPIacn6vL8vH89lhzflhbmWikysRk1+x77emZSL751z//7G5r8d7dO8tjZ+ch7WNgj+2758RUVyZe75eJ7oHOdCaah+w/XmXi0tb6bH6cn2YsV/JOlrKQn2cuK5nPZt0+V8/n8ufo0+fMzR1r7+wXyVD9vLRTfZCYruRHVW0uV6t9z2chRR7kdubzVvVvMhP5TqYznZmuZ/jSnnFXj6066xu7z/rOM/23vsFf+1ZdGUnyu7rsycEue83Oo9K+9pd5vdCV1/asf7zV60LXeTDelaVXOtkZ7Dv4s1wbm1+rK+UxPqnLs2G0zkR5AnXuEp3oXm1nolndi3rn+R+rc2O5tXhv6e7c+3uMv7Zr/c26LKfV+tcPGmX/p+JolfPllQzXV5Kds6Nse3XrKnNhx111qP6LS7ut0dN2qWoris6Z+pOeM7Wcr+WZOlT/Dtc70mTV9nrftqmq7XJX247ft/Igrdw+gfwB8JxGc25o5J8jn498NvKbkbsjbw//8KXvvvTGUAb/Pvi95vjAm403ir/ks/xy+/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7JY//OjeXKs1v9S/0ti7aZ/KfiPvqhT1F/o807HOYGU4yY4tg+WGIzvEJwfsPLI7jJ7K5q+SE89P50sE+/f5fVlp5iAD3tyvz8enPhPOemUg/SfAKV+YgGN3Y+X++zeWP/zo2wv3596bf29+cXB6emZ8ZvqtqRt3Flrz4+2fpx0lcBy2b/qnHQkAAAAAAAAAAABwUP0+GHD15f0+NHKgz3j4n4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkZgdS/NhikyMXx8v1zfWp1rl0qlv92wmaTSS4hdJ8Si5mfaS0a7hivzpUTb7HOfThZl3v3i88eX2WM12/6RRl89hrV5yJclAXR7VeLeee7zi351HWCbsWidxcNr+GwAA///UmvRo")
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r2 = dup(r1)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts.
[   55.193744][ T5816] cgroup: Unknown subsys name 'net'
[   55.300990][ T5816] cgroup: Unknown subsys name 'cpuset'
[   55.308790][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   56.552916][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   60.383156][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   60.392205][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   60.408364][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   60.421438][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   60.429252][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   60.437930][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   60.447780][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   60.456096][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   60.465049][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   60.469434][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   60.473827][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   60.481319][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   60.487632][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   60.493616][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   60.502289][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   60.509324][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   60.514330][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   60.526301][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   60.528649][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   60.542993][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   60.544169][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   60.550618][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   60.558408][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   60.571126][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   60.573808][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   60.587455][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   60.590011][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   60.609884][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   60.619004][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   60.658797][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   61.015456][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   61.112495][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   61.172862][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   61.201984][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.209287][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.216696][ T5827] bridge_slave_0: entered allmulticast mode
[   61.224529][ T5827] bridge_slave_0: entered promiscuous mode
[   61.249370][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   61.265031][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.272275][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.279802][ T5827] bridge_slave_1: entered allmulticast mode
[   61.286452][ T5827] bridge_slave_1: entered promiscuous mode
[   61.293796][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   61.394396][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.423654][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.431111][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.438412][ T5826] bridge_slave_0: entered allmulticast mode
[   61.444992][ T5826] bridge_slave_0: entered promiscuous mode
[   61.467296][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.490139][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.497276][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.505083][ T5826] bridge_slave_1: entered allmulticast mode
[   61.511790][ T5826] bridge_slave_1: entered promiscuous mode
[   61.549034][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.556528][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.563904][ T5839] bridge_slave_0: entered allmulticast mode
[   61.570753][ T5839] bridge_slave_0: entered promiscuous mode
[   61.595731][ T5827] team0: Port device team_slave_0 added
[   61.616864][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.624385][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.632248][ T5839] bridge_slave_1: entered allmulticast mode
[   61.638884][ T5839] bridge_slave_1: entered promiscuous mode
[   61.661063][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.668269][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.675473][ T5831] bridge_slave_0: entered allmulticast mode
[   61.682482][ T5831] bridge_slave_0: entered promiscuous mode
[   61.690518][ T5827] team0: Port device team_slave_1 added
[   61.696462][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.704297][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.711553][ T5831] bridge_slave_1: entered allmulticast mode
[   61.718602][ T5831] bridge_slave_1: entered promiscuous mode
[   61.725548][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.732801][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.740131][ T5828] bridge_slave_0: entered allmulticast mode
[   61.746700][ T5828] bridge_slave_0: entered promiscuous mode
[   61.772324][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.798363][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.805660][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.813111][ T5828] bridge_slave_1: entered allmulticast mode
[   61.820242][ T5828] bridge_slave_1: entered promiscuous mode
[   61.829380][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.840958][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.852402][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.872499][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   61.879817][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   61.905923][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   61.929094][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.969321][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   61.976299][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.003362][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.016523][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.033639][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.074751][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.095360][ T5839] team0: Port device team_slave_0 added
[   62.104493][ T5839] team0: Port device team_slave_1 added
[   62.113125][ T5826] team0: Port device team_slave_0 added
[   62.144741][ T5828] team0: Port device team_slave_0 added
[   62.159338][ T5826] team0: Port device team_slave_1 added
[   62.185313][ T5831] team0: Port device team_slave_0 added
[   62.194695][ T5828] team0: Port device team_slave_1 added
[   62.232394][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.239451][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.265972][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.278696][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.285676][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.312532][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.326024][ T5831] team0: Port device team_slave_1 added
[   62.340236][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.347212][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.373614][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.385514][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.392762][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.418895][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.434438][ T5827] hsr_slave_0: entered promiscuous mode
[   62.441379][ T5827] hsr_slave_1: entered promiscuous mode
[   62.460234][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.467207][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.496466][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.511105][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.518309][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.544362][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.588667][ T5844] Bluetooth: hci1: command tx timeout
[   62.601715][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.609183][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.636202][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.649770][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.656732][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   62.682892][ T5844] Bluetooth: hci4: command tx timeout
[   62.688450][ T5841] Bluetooth: hci0: command tx timeout
[   62.688548][ T5835] Bluetooth: hci2: command tx timeout
[   62.700771][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.735021][ T5826] hsr_slave_0: entered promiscuous mode
[   62.743715][ T5826] hsr_slave_1: entered promiscuous mode
[   62.749592][ T5835] Bluetooth: hci3: command tx timeout
[   62.755509][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.763941][ T5826] Cannot create hsr debugfs directory
[   62.793751][ T5828] hsr_slave_0: entered promiscuous mode
[   62.800016][ T5828] hsr_slave_1: entered promiscuous mode
[   62.806245][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.814512][ T5828] Cannot create hsr debugfs directory
[   62.870891][ T5839] hsr_slave_0: entered promiscuous mode
[   62.877453][ T5839] hsr_slave_1: entered promiscuous mode
[   62.883899][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.892343][ T5839] Cannot create hsr debugfs directory
[   62.902159][ T5831] hsr_slave_0: entered promiscuous mode
[   62.908879][ T5831] hsr_slave_1: entered promiscuous mode
[   62.914943][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   62.922603][ T5831] Cannot create hsr debugfs directory
[   63.222626][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   63.254072][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   63.263959][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   63.290872][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   63.337299][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.349160][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.362675][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.377536][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.437878][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.464743][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.476536][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.486931][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.545404][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.581682][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.593535][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.617336][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.664322][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.678523][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   63.700429][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   63.713502][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   63.734842][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   63.742015][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   63.769149][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.795873][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.803125][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.837061][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.844237][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.862393][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   63.902903][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.910041][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.945514][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.952653][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.985184][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.004115][ T5827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.014649][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.046577][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   64.060940][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.087228][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.094860][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.104354][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.111562][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.167296][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   64.246044][  T423] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.253310][  T423] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.265128][  T423] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.272312][  T423] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.320193][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.367519][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   64.395881][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.403101][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.432327][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.470848][  T423] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.478408][  T423] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.544510][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.668319][ T5835] Bluetooth: hci1: command tx timeout
[   64.668403][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.691856][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.748717][ T5835] Bluetooth: hci0: command tx timeout
[   64.757932][ T5835] Bluetooth: hci2: command tx timeout
[   64.767863][ T5844] Bluetooth: hci4: command tx timeout
[   64.806074][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.829213][ T5835] Bluetooth: hci3: command tx timeout
[   64.844520][ T5826] veth0_vlan: entered promiscuous mode
[   64.855548][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.874359][ T5826] veth1_vlan: entered promiscuous mode
[   64.896519][ T5827] veth0_vlan: entered promiscuous mode
[   64.931230][ T5827] veth1_vlan: entered promiscuous mode
[   64.964911][ T5826] veth0_macvtap: entered promiscuous mode
[   64.979681][ T5826] veth1_macvtap: entered promiscuous mode
[   65.006917][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.049685][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.064230][ T5827] veth0_macvtap: entered promiscuous mode
[   65.073485][ T5827] veth1_macvtap: entered promiscuous mode
[   65.085852][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.095661][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.104924][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.113833][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.124306][ T5828] veth0_vlan: entered promiscuous mode
[   65.136735][ T5831] veth0_vlan: entered promiscuous mode
[   65.153282][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.176259][ T5828] veth1_vlan: entered promiscuous mode
[   65.192898][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.203983][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.215718][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.225008][ T5831] veth1_vlan: entered promiscuous mode
[   65.248559][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.259106][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.271163][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.292953][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.303266][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.313946][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.323087][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.398324][ T5831] veth0_macvtap: entered promiscuous mode
[   65.431818][ T5831] veth1_macvtap: entered promiscuous mode
[   65.443447][ T5828] veth0_macvtap: entered promiscuous mode
[   65.452598][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.455250][ T5828] veth1_macvtap: entered promiscuous mode
[   65.472667][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.519508][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.535398][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.545748][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.556587][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.570785][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.586104][ T5839] veth0_vlan: entered promiscuous mode
[   65.598964][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.611891][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.622409][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.634939][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.646507][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.658942][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.668389][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.677196][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.686553][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.699674][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.710682][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.721588][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.732335][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.742346][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   65.753173][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.763879][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.771847][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.779838][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.807336][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.818162][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.829569][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.840935][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.851186][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.862023][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.876055][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.892637][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.899807][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.914482][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.915944][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.923461][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.938502][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.954340][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.956148][ T5839] veth1_vlan: entered promiscuous mode
[   66.025316][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.033839][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.145809][ T5839] veth0_macvtap: entered promiscuous mode
[   66.166234][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.178585][ T5839] veth1_macvtap: entered promiscuous mode
[   66.195886][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.223560][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.266593][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.302673][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.314689][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.325211][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.336144][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.346728][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.360412][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.373351][ T5916] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   66.391739][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.486735][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.504026][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.531412][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.555113][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.566594][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.584910][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.595592][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.606936][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.625390][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.691460][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.709734][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.722153][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.747738][ T5835] Bluetooth: hci1: command tx timeout
[   66.748117][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.758214][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.763120][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.803698][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.826747][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.844646][ T5835] Bluetooth: hci2: command tx timeout
[   66.850202][ T5835] Bluetooth: hci4: command tx timeout
[   66.855847][ T5835] Bluetooth: hci0: command tx timeout
[   66.908078][ T5844] Bluetooth: hci3: command tx timeout
[   66.993759][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.002052][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.140264][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.148848][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.191272][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'.
[   67.463458][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.486154][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.972294][ T5933] loop1: detected capacity change from 0 to 32768
[   67.995621][ T5933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2 (5933)
[   68.024954][   T51] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   68.033592][ T5933] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   68.044475][ T5933] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   68.065476][ T5933] BTRFS info (device loop1): using free-space-tree
[   68.356460][ T5964] loop2: detected capacity change from 0 to 4096
[   68.447702][   T51] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   68.456965][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.486612][ T5969] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.531236][   T51] usb 4-1: config 0 descriptor??
[   68.570264][   T51] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   68.640896][ T5964] loop2: detected capacity change from 4096 to 64
[   68.841421][ T5844] Bluetooth: hci1: command tx timeout
[   68.875760][ T5826] syz-executor: attempt to access beyond end of device
[   68.875760][ T5826] loop2: rw=0, sector=288, nr_sectors = 8 limit=64
[   68.911264][ T5844] Bluetooth: hci0: command tx timeout
[   68.916760][ T5844] Bluetooth: hci4: command tx timeout
[   68.930625][ T5844] Bluetooth: hci2: command tx timeout
[   68.970715][ T5826] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=226)
[   68.983891][ T5826] NILFS (loop2): error -5 truncating bmap (ino=15)
[   68.992106][ T5835] Bluetooth: hci3: command tx timeout
[   68.999671][ T5826] syz-executor: attempt to access beyond end of device
[   68.999671][ T5826] loop2: rw=0, sector=248, nr_sectors = 8 limit=64
[   69.014097][ T5826] NILFS (loop2): I/O error reading meta-data file (ino=3, block-offset=34)
[   69.023724][ T5826] NILFS (loop2): error -5 truncating bmap (ino=17)
[   69.026917][ T5831] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   69.109480][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   69.296103][ T5881] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[   69.308213][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.327787][ T5881] usb 5-1: Product: syz
[   69.332119][ T5881] usb 5-1: Manufacturer: syz
[   69.336773][ T5881] usb 5-1: SerialNumber: syz
[   69.341724][ T5879] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   69.403020][ T5881] usb 5-1: config 0 descriptor??
[   69.510525][ T5879] usb 1-1: Using ep0 maxpacket: 32
[   69.527190][ T5879] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[   69.547527][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.556331][ T5879] usb 1-1: Product: syz
[   69.571624][ T5879] usb 1-1: Manufacturer: syz
[   69.577039][ T5879] usb 1-1: SerialNumber: syz
[   69.585473][ T5879] usb 1-1: config 0 descriptor??
[   69.633455][ T5980] 9pnet: p9_errstr2errno: server reported unknown error 184467440
[   69.663807][ T5881] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22
[   69.683804][ T5881] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[   69.700024][ T5881] usb 5-1: USB disconnect, device number 2
[   69.801895][   T51] gspca_stv06xx: I2C: Read error writing address: -71
[   69.814818][   T51] usb 4-1: USB disconnect, device number 2
[   70.004249][ T5879] airspy 1-1:0.0: Board ID: 00
[   70.010116][ T5879] airspy 1-1:0.0: Firmware version: 
[   70.478006][ T5992] tipc: Failed to remove unknown binding: 66,1,1/0:1678930964/1678930966
[   70.487248][ T5992] tipc: Failed to remove unknown binding: 66,1,1/0:1678930964/1678930966
[   70.811371][ T6001] loop1: detected capacity change from 0 to 2048
[   70.841229][ T6001] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   70.871642][ T5987] udevd[5987]: incorrect nilfs2 checksum on /dev/loop1
[   70.896229][ T6003] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.939540][   T29] audit: type=1800 audit(1733417785.734:2): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.29" name="bus" dev="loop1" ino=18 res=0 errno=0
[   71.030628][ T5879] airspy 1-1:0.0: Registered as swradio24
[   71.040804][ T5879] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[   71.104937][ T6004] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[   71.154882][ T6004] Remounting filesystem read-only
[   71.251636][ T5879] usb 1-1: USB disconnect, device number 2
[   71.680913][ T5831] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[   71.725682][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[   71.732737][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[   72.060800][ T6014] loop1: detected capacity change from 0 to 128
[   72.106431][ T6012] loop4: detected capacity change from 0 to 32768
[   72.120727][ T6012] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.33 (6012)
[   72.140156][ T5879] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   72.144595][ T6020] input: syz0 as /devices/virtual/input/input5
[   72.166199][ T6012] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.204324][ T6012] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[   72.215335][ T6012] BTRFS info (device loop4): using free-space-tree
[   72.327662][ T5879] usb 4-1: Using ep0 maxpacket: 8
[   72.338355][ T5879] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[   72.352095][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.401146][ T5879] usb 4-1: Product: syz
[   72.439403][ T5879] usb 4-1: Manufacturer: syz
[   72.444068][ T5879] usb 4-1: SerialNumber: syz
[   72.489722][ T5879] usb 4-1: config 0 descriptor??
[   72.706879][ T5879] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   72.790929][ T5827] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   73.267902][ T5879] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   73.285127][ T5879] usb 4-1: USB disconnect, device number 3
[   73.547844][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.717679][ T5834] usb 2-1: Using ep0 maxpacket: 32
[   73.729840][ T5834] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   73.751898][ T5834] usb 2-1: config 1 has no interface number 1
[   73.763405][ T5834] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   73.790017][ T5834] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   73.799718][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.809365][ T5834] usb 2-1: Product: syz
[   73.816848][ T5834] usb 2-1: Manufacturer: syz
[   73.822846][ T5834] usb 2-1: SerialNumber: syz
[   74.016527][ T6052] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.034175][   T29] audit: type=1326 audit(1733417788.824:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="syz.3.40" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f225f57ff19 code=0x0
[   74.241747][ T5834] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   74.331157][   T29] audit: type=1326 audit(1733417789.124:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6054 comm="syz.4.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f5557ff19 code=0x0
[   74.670918][ T5834] usb 2-1: USB disconnect, device number 2
[   75.211714][ T5834] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   75.374948][ T5879] IPVS: starting estimator thread 0...
[   75.409783][ T5834] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   75.419272][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.450737][ T5834] usb 4-1: config 0 descriptor??
[   75.487825][ T6063] IPVS: using max 23 ests per chain, 55200 per kthread
[   75.779650][ T6062] loop1: detected capacity change from 0 to 32768
[   75.786649][ T6062] =======================================================
[   75.786649][ T6062] WARNING: The mand mount option has been deprecated and
[   75.786649][ T6062]          and is ignored by this kernel. Remove the mand
[   75.786649][ T6062]          option from the mount to silence this warning.
[   75.786649][ T6062] =======================================================
[   76.154109][ T6069] process 'syz.4.48' launched '/dev/fd/4' with NULL argv: empty string added
[   77.022997][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.52'.
[   77.078950][ T5834] usb 4-1: Cannot set autoneg
[   77.083940][ T5834] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   77.139320][ T5834] usb 4-1: USB disconnect, device number 4
[   77.575621][ T6091] netlink: 48 bytes leftover after parsing attributes in process `syz.4.55'.
[   77.709818][ T6093] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   78.031200][ T6102] xt_CONNSECMARK: invalid mode: 0
[   78.347834][ T5834] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   78.499804][ T5834] usb 4-1: Using ep0 maxpacket: 16
[   78.514500][ T5834] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[   78.532348][ T5834] usb 4-1: config 0 has no interface number 0
[   78.549031][ T5834] usb 4-1: New USB device found, idVendor=0499, idProduct=5003, bcdDevice=ff.cb
[   78.563525][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.577929][ T5834] usb 4-1: Product: syz
[   78.588302][ T5834] usb 4-1: Manufacturer: syz
[   78.599148][ T5834] usb 4-1: SerialNumber: syz
[   78.618925][ T5834] usb 4-1: config 0 descriptor??
[   78.641991][ T5834] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[   78.721420][ T5834] snd-usb-audio 4-1:0.239: probe with driver snd-usb-audio failed with error -2
[   78.785320][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.239/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.134816][ T5834] usb 4-1: USB disconnect, device number 5
[   80.311805][    T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   80.477701][    T8] usb 4-1: Using ep0 maxpacket: 8
[   80.498560][    T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   80.551522][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   80.582064][    T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   80.617813][    T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   80.638923][    T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   80.648809][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.900831][    T8] usb 4-1: GET_CAPABILITIES returned 0
[   80.926737][    T8] usbtmc 4-1:16.0: can't read capabilities
[   80.947943][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   81.082929][ T6123] loop4: detected capacity change from 0 to 1024
[   81.118876][    T9] usb 2-1: Using ep0 maxpacket: 8
[   81.148807][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[   81.160413][    T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[   81.185053][    T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[   81.205710][ T6121] ==================================================================
[   81.213820][ T6121] BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100
[   81.221495][ T6121] Read of size 8 at addr ffff888025ff0438 by task syz.0.68/6121
[   81.223434][    T9] usb 2-1: string descriptor 0 read error: -71
[   81.229212][ T6121] 
[   81.229246][ T6121] CPU: 1 UID: 0 PID: 6121 Comm: syz.0.68 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0
[   81.229270][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   81.229287][ T6121] Call Trace:
[   81.229299][ T6121]  <TASK>
[   81.229307][ T6121]  dump_stack_lvl+0x241/0x360
[   81.229344][ T6121]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.229368][ T6121]  ? __pfx__printk+0x10/0x10
[   81.229390][ T6121]  ? _printk+0xd5/0x120
[   81.229409][ T6121]  ? __virt_addr_valid+0x183/0x530
[   81.229428][ T6121]  ? __virt_addr_valid+0x183/0x530
[   81.229450][ T6121]  print_report+0x169/0x550
[   81.229471][ T6121]  ? __virt_addr_valid+0x183/0x530
[   81.229492][ T6121]  ? __virt_addr_valid+0x183/0x530
[   81.229511][ T6121]  ? __virt_addr_valid+0x45f/0x530
[   81.229531][ T6121]  ? __phys_addr+0xba/0x170
[   81.229551][ T6121]  ? __lock_acquire+0x78/0x2100
[   81.229569][ T6121]  kasan_report+0x143/0x180
[   81.229588][ T6121]  ? __lock_acquire+0x78/0x2100
[   81.229607][ T6121]  __lock_acquire+0x78/0x2100
[   81.257989][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   81.258128][ T6121]  ? __pfx___schedule+0x10/0x10
[   81.273936][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.274192][ T6121]  lock_acquire+0x1ed/0x550
[   81.362755][ T6121]  ? move_pages_pte+0x8aa/0x3400
[   81.367709][ T6121]  ? __pfx_lock_acquire+0x10/0x10
[   81.372854][ T6121]  ? preempt_schedule_common+0x84/0xd0
[   81.378328][ T6121]  ? preempt_schedule+0xe1/0xf0
[   81.383185][ T6121]  ? __pfx_preempt_schedule+0x10/0x10
[   81.388556][ T6121]  ? do_raw_spin_lock+0x14f/0x370
[   81.393583][ T6121]  ? preempt_schedule_thunk+0x1a/0x30
[   81.399053][ T6121]  _raw_spin_lock+0x2e/0x40
[   81.403664][ T6121]  ? move_pages_pte+0x8aa/0x3400
[   81.408618][ T6121]  move_pages_pte+0x8aa/0x3400
[   81.413401][ T6121]  ? __lock_acquire+0x1397/0x2100
[   81.418430][ T6121]  ? move_pages_pte+0x2ee/0x3400
[   81.423368][ T6121]  ? __pfx_move_pages_pte+0x10/0x10
[   81.428651][ T6121]  ? __lock_acquire+0x1397/0x2100
[   81.433767][ T6121]  ? __pfx_lock_acquire+0x10/0x10
[   81.438826][ T6121]  ? __pte_alloc+0x1c0/0x3c0
[   81.443511][ T6121]  ? __pfx_lock_release+0x10/0x10
[   81.448556][ T6121]  ? __pfx___pte_alloc+0x10/0x10
[   81.453772][ T6121]  ? do_raw_spin_unlock+0x13c/0x8b0
[   81.458993][ T6121]  move_pages+0xe75/0x16a0
[   81.463419][ T6121]  ? __pfx_move_pages+0x10/0x10
[   81.468269][ T6121]  ? __might_fault+0xc6/0x120
[   81.472953][ T6121]  userfaultfd_ioctl+0x5221/0x6840
[   81.478074][ T6121]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[   81.483534][ T6121]  ? stack_trace_save+0x118/0x1d0
[   81.488645][ T6121]  ? __pfx_stack_trace_save+0x10/0x10
[   81.494014][ T6121]  ? stack_depot_save_flags+0x37/0x940
[   81.499474][ T6121]  ? kasan_save_track+0x51/0x80
[   81.504414][ T6121]  ? kasan_save_track+0x3f/0x80
[   81.509262][ T6121]  ? kasan_save_free_info+0x40/0x50
[   81.514463][ T6121]  ? __kasan_slab_free+0x59/0x70
[   81.519396][ T6121]  ? kfree+0x196/0x430
[   81.523464][ T6121]  ? tomoyo_path_number_perm+0x679/0x860
[   81.529185][ T6121]  ? security_file_ioctl+0xc6/0x2a0
[   81.534378][ T6121]  ? __se_sys_ioctl+0x46/0x170
[   81.539132][ T6121]  ? do_syscall_64+0xf3/0x230
[   81.543894][ T6121]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.549961][ T6121]  ? do_vfs_ioctl+0xf07/0x2e40
[   81.554721][ T6121]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   81.559754][ T6121]  ? mark_lock+0x9a/0x360
[   81.564169][ T6121]  ? tomoyo_path_number_perm+0x206/0x860
[   81.569838][ T6121]  ? __pfx_lock_release+0x10/0x10
[   81.575035][ T6121]  ? tomoyo_path_number_perm+0x679/0x860
[   81.580926][ T6121]  ? tomoyo_path_number_perm+0x679/0x860
[   81.586554][ T6121]  ? tomoyo_path_number_perm+0x6f9/0x860
[   81.592183][ T6121]  ? __lock_acquire+0x1397/0x2100
[   81.597207][ T6121]  ? tomoyo_path_number_perm+0x206/0x860
[   81.602836][ T6121]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   81.608829][ T6121]  ? __fget_files+0x2a/0x410
[   81.613416][ T6121]  ? __fget_files+0x2a/0x410
[   81.618005][ T6121]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[   81.623467][ T6121]  __se_sys_ioctl+0xf5/0x170
[   81.628058][ T6121]  do_syscall_64+0xf3/0x230
[   81.632557][ T6121]  ? clear_bhb_loop+0x35/0x90
[   81.637232][ T6121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.643129][ T6121] RIP: 0033:0x7fd19a37ff19
[   81.647553][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   81.667163][ T6121] RSP: 002b:00007fd19b1bc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   81.675592][ T6121] RAX: ffffffffffffffda RBX: 00007fd19a545fa0 RCX: 00007fd19a37ff19
[   81.683740][ T6121] RDX: 0000000020000080 RSI: 00000000c028aa05 RDI: 0000000000000003
[   81.691704][ T6121] RBP: 00007fd19a3f3986 R08: 0000000000000000 R09: 0000000000000000
[   81.699765][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.707740][ T6121] R13: 0000000000000000 R14: 00007fd19a545fa0 R15: 00007ffd0b6e3f48
[   81.715726][ T6121]  </TASK>
[   81.718749][ T6121] 
[   81.721151][ T6121] Allocated by task 6120:
[   81.725466][ T6121]  kasan_save_track+0x3f/0x80
[   81.730229][ T6121]  __kasan_slab_alloc+0x66/0x80
[   81.735072][ T6121]  kmem_cache_alloc_noprof+0x1d9/0x380
[   81.740528][ T6121]  ptlock_alloc+0x20/0x70
[   81.744855][ T6121]  pte_alloc_one+0xd3/0x510
[   81.749359][ T6121]  do_huge_pmd_anonymous_page+0x2fb/0xb30
[   81.755073][ T6121]  handle_mm_fault+0x15a7/0x1bb0
[   81.760007][ T6121]  exc_page_fault+0x459/0x8b0
[   81.764686][ T6121]  asm_exc_page_fault+0x26/0x30
[   81.769532][ T6121] 
[   81.771847][ T6121] Freed by task 6124:
[   81.775816][ T6121]  kasan_save_track+0x3f/0x80
[   81.780490][ T6121]  kasan_save_free_info+0x40/0x50
[   81.785510][ T6121]  __kasan_slab_free+0x59/0x70
[   81.790303][ T6121]  kmem_cache_free+0x195/0x410
[   81.795930][ T6121]  ___pte_free_tlb+0x2b/0x140
[   81.800597][ T6121]  free_pte+0x142/0x190
[   81.804742][ T6121]  unmap_page_range+0x4062/0x48d0
[   81.809785][ T6121]  zap_page_range_single+0x45c/0x630
[   81.815072][ T6121]  do_madvise+0x2774/0x4d90
[   81.819570][ T6121]  __x64_sys_madvise+0xa6/0xc0
[   81.824330][ T6121]  do_syscall_64+0xf3/0x230
[   81.828840][ T6121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.834726][ T6121] 
[   81.837046][ T6121] The buggy address belongs to the object at ffff888025ff0420
[   81.837046][ T6121]  which belongs to the cache page->ptl of size 64
[   81.850835][ T6121] The buggy address is located 24 bytes inside of
[   81.850835][ T6121]  freed 64-byte region [ffff888025ff0420, ffff888025ff0460)
[   81.864448][ T6121] 
[   81.866769][ T6121] The buggy address belongs to the physical page:
[   81.873183][ T6121] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25ff0
[   81.881936][ T6121] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   81.889040][ T6121] page_type: f5(slab)
[   81.893013][ T6121] raw: 00fff00000000000 ffff88801ac4f780 dead000000000100 dead000000000122
[   81.901678][ T6121] raw: 0000000000000000 00000000802a002a 00000000f5000000 0000000000000000
[   81.910254][ T6121] page dumped because: kasan: bad access detected
[   81.916663][ T6121] page_owner tracks the page as allocated
[   81.922372][ T6121] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5498, tgid 5498 (dhcpcd), ts 43545857317, free_ts 40641190692
[   81.941125][ T6121]  post_alloc_hook+0x1f4/0x240
[   81.945895][ T6121]  get_page_from_freelist+0x365c/0x37a0
[   81.951448][ T6121]  __alloc_frozen_pages_noprof+0x292/0x710
[   81.957253][ T6121]  alloc_pages_mpol+0x30e/0x550
[   81.962107][ T6121]  allocate_slab+0x8f/0x3a0
[   81.966691][ T6121]  ___slab_alloc+0xc27/0x14a0
[   81.971368][ T6121]  __slab_alloc+0x58/0xa0
[   81.975701][ T6121]  kmem_cache_alloc_noprof+0x268/0x380
[   81.981155][ T6121]  __pmd_alloc+0x10b/0x670
[   81.985571][ T6121]  copy_pmd_range+0x7352/0x77a0
[   81.990411][ T6121]  copy_page_range+0x99f/0xe90
[   81.995169][ T6121]  copy_mm+0x12d2/0x2060
[   81.999414][ T6121]  copy_process+0x1845/0x3d80
[   82.004087][ T6121]  kernel_clone+0x226/0x8e0
[   82.008589][ T6121]  __x64_sys_clone+0x258/0x2a0
[   82.013350][ T6121]  do_syscall_64+0xf3/0x230
[   82.017862][ T6121] page last free pid 9 tgid 9 stack trace:
[   82.023668][ T6121]  free_frozen_pages+0xe0d/0x10e0
[   82.028700][ T6121]  vfree+0x186/0x2e0
[   82.032593][ T6121]  delayed_vfree_work+0x56/0x80
[   82.037437][ T6121]  process_scheduled_works+0xa66/0x1840
[   82.042981][ T6121]  worker_thread+0x870/0xd30
[   82.047568][ T6121]  kthread+0x2f0/0x390
[   82.051639][ T6121]  ret_from_fork+0x4b/0x80
[   82.056053][ T6121]  ret_from_fork_asm+0x1a/0x30
[   82.060820][ T6121] 
[   82.063136][ T6121] Memory state around the buggy address:
[   82.068755][ T6121]  ffff888025ff0300: 00 00 00 00 00 00 00 00 fc fc fc fc 00 00 00 00
[   82.076817][ T6121]  ffff888025ff0380: 00 00 00 00 fc fc fc fc fa fb fb fb fb fb fb fb
[   82.084887][ T6121] >ffff888025ff0400: fc fc fc fc fa fb fb fb fb fb fb fb fc fc fc fc
[   82.092938][ T6121]                                         ^
[   82.098819][ T6121]  ffff888025ff0480: 00 00 00 00 00 00 00 00 fc fc fc fc 00 00 00 00
[   82.106895][ T6121]  ffff888025ff0500: 00 00 00 00 fc fc fc fc 00 00 00 00 00 00 00 00
[   82.114970][ T6121] ==================================================================
[   82.123049][ T6121] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   82.130255][ T6121] CPU: 1 UID: 0 PID: 6121 Comm: syz.0.68 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0
[   82.140234][ T6121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   82.150283][ T6121] Call Trace:
[   82.153555][ T6121]  <TASK>
[   82.156479][ T6121]  dump_stack_lvl+0x241/0x360
[   82.161164][ T6121]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.166360][ T6121]  ? __pfx__printk+0x10/0x10
[   82.170945][ T6121]  ? rcu_is_watching+0x15/0xb0
[   82.175807][ T6121]  ? lock_release+0xbf/0xa30
[   82.180395][ T6121]  ? vscnprintf+0x5d/0x90
[   82.184748][ T6121]  panic+0x349/0x880
[   82.188639][ T6121]  ? check_panic_on_warn+0x21/0xb0
[   82.193746][ T6121]  ? __pfx_panic+0x10/0x10
[   82.198158][ T6121]  ? do_raw_spin_unlock+0x13c/0x8b0
[   82.203358][ T6121]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   82.209245][ T6121]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   82.215575][ T6121]  ? print_report+0x502/0x550
[   82.220270][ T6121]  check_panic_on_warn+0x86/0xb0
[   82.225207][ T6121]  ? __lock_acquire+0x78/0x2100
[   82.230053][ T6121]  end_report+0x77/0x160
[   82.234378][ T6121]  kasan_report+0x154/0x180
[   82.238876][ T6121]  ? __lock_acquire+0x78/0x2100
[   82.243731][ T6121]  __lock_acquire+0x78/0x2100
[   82.248404][ T6121]  ? __pfx___schedule+0x10/0x10
[   82.253252][ T6121]  lock_acquire+0x1ed/0x550
[   82.257749][ T6121]  ? move_pages_pte+0x8aa/0x3400
[   82.262695][ T6121]  ? __pfx_lock_acquire+0x10/0x10
[   82.267739][ T6121]  ? preempt_schedule_common+0x84/0xd0
[   82.273312][ T6121]  ? preempt_schedule+0xe1/0xf0
[   82.278168][ T6121]  ? __pfx_preempt_schedule+0x10/0x10
[   82.283544][ T6121]  ? do_raw_spin_lock+0x14f/0x370
[   82.288576][ T6121]  ? preempt_schedule_thunk+0x1a/0x30
[   82.294212][ T6121]  _raw_spin_lock+0x2e/0x40
[   82.298710][ T6121]  ? move_pages_pte+0x8aa/0x3400
[   82.303649][ T6121]  move_pages_pte+0x8aa/0x3400
[   82.308412][ T6121]  ? __lock_acquire+0x1397/0x2100
[   82.313433][ T6121]  ? move_pages_pte+0x2ee/0x3400
[   82.318371][ T6121]  ? __pfx_move_pages_pte+0x10/0x10
[   82.323569][ T6121]  ? __lock_acquire+0x1397/0x2100
[   82.328605][ T6121]  ? __pfx_lock_acquire+0x10/0x10
[   82.333626][ T6121]  ? __pte_alloc+0x1c0/0x3c0
[   82.338222][ T6121]  ? __pfx_lock_release+0x10/0x10
[   82.343334][ T6121]  ? __pfx___pte_alloc+0x10/0x10
[   82.348267][ T6121]  ? do_raw_spin_unlock+0x13c/0x8b0
[   82.353463][ T6121]  move_pages+0xe75/0x16a0
[   82.357886][ T6121]  ? __pfx_move_pages+0x10/0x10
[   82.362736][ T6121]  ? __might_fault+0xc6/0x120
[   82.367412][ T6121]  userfaultfd_ioctl+0x5221/0x6840
[   82.372529][ T6121]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[   82.377988][ T6121]  ? stack_trace_save+0x118/0x1d0
[   82.383015][ T6121]  ? __pfx_stack_trace_save+0x10/0x10
[   82.388386][ T6121]  ? stack_depot_save_flags+0x37/0x940
[   82.393862][ T6121]  ? kasan_save_track+0x51/0x80
[   82.398738][ T6121]  ? kasan_save_track+0x3f/0x80
[   82.403619][ T6121]  ? kasan_save_free_info+0x40/0x50
[   82.408920][ T6121]  ? __kasan_slab_free+0x59/0x70
[   82.413860][ T6121]  ? kfree+0x196/0x430
[   82.418103][ T6121]  ? tomoyo_path_number_perm+0x679/0x860
[   82.423737][ T6121]  ? security_file_ioctl+0xc6/0x2a0
[   82.428941][ T6121]  ? __se_sys_ioctl+0x46/0x170
[   82.433704][ T6121]  ? do_syscall_64+0xf3/0x230
[   82.438394][ T6121]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.444483][ T6121]  ? do_vfs_ioctl+0xf07/0x2e40
[   82.449254][ T6121]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   82.454277][ T6121]  ? mark_lock+0x9a/0x360
[   82.458610][ T6121]  ? tomoyo_path_number_perm+0x206/0x860
[   82.464244][ T6121]  ? __pfx_lock_release+0x10/0x10
[   82.469269][ T6121]  ? tomoyo_path_number_perm+0x679/0x860
[   82.474898][ T6121]  ? tomoyo_path_number_perm+0x679/0x860
[   82.480527][ T6121]  ? tomoyo_path_number_perm+0x6f9/0x860
[   82.486155][ T6121]  ? __lock_acquire+0x1397/0x2100
[   82.491177][ T6121]  ? tomoyo_path_number_perm+0x206/0x860
[   82.496806][ T6121]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[   82.502797][ T6121]  ? __fget_files+0x2a/0x410
[   82.507469][ T6121]  ? __fget_files+0x2a/0x410
[   82.512058][ T6121]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[   82.517515][ T6121]  __se_sys_ioctl+0xf5/0x170
[   82.522138][ T6121]  do_syscall_64+0xf3/0x230
[   82.526645][ T6121]  ? clear_bhb_loop+0x35/0x90
[   82.531337][ T6121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.537230][ T6121] RIP: 0033:0x7fd19a37ff19
[   82.541694][ T6121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.561398][ T6121] RSP: 002b:00007fd19b1bc058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   82.569915][ T6121] RAX: ffffffffffffffda RBX: 00007fd19a545fa0 RCX: 00007fd19a37ff19
[   82.577895][ T6121] RDX: 0000000020000080 RSI: 00000000c028aa05 RDI: 0000000000000003
[   82.585866][ T6121] RBP: 00007fd19a3f3986 R08: 0000000000000000 R09: 0000000000000000
[   82.593869][ T6121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   82.602199][ T6121] R13: 0000000000000000 R14: 00007fd19a545fa0 R15: 00007ffd0b6e3f48
[   82.610178][ T6121]  </TASK>
[   82.613451][ T6121] Kernel Offset: disabled
[   82.617779][ T6121] Rebooting in 86400 seconds..