last executing test programs: 9m36.077918319s ago: executing program 4 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = gettid() r5 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r5, &(0x7f00000006c0)={r5, 0xffffffffffffffff, 0x8}) 9m34.328978708s ago: executing program 4 (id=161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r3, 0x1) 9m28.191959369s ago: executing program 4 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 9m26.863216052s ago: executing program 4 (id=180): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/error_log\x00', 0x20000, 0x6d) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000012700)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) clock_gettime(0x0, &(0x7f00000002c0)) r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000000200)=""/165, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c6b}], 0x1, 0x0) 9m25.489368213s ago: executing program 4 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(0x0, 0x7) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) 9m22.558760698s ago: executing program 4 (id=190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ddff0001"], 0x50) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 9m22.132017076s ago: executing program 32 (id=190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ddff0001"], 0x50) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 9m20.314391058s ago: executing program 1 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000003c0)={'filter\x00', 0x0, 0x0, 0x0, [0x99c9, 0xd, 0x382, 0x10001, 0xfffffffffffffffd, 0x9]}, &(0x7f0000000440)=0x78) 9m19.222614327s ago: executing program 1 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @local}, 0x10) 9m17.95238207s ago: executing program 1 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, 0x0, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xdb, 0x1, 0xf9, 0x1, "d8af7633", "1c08424b"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1b, 0x9, 0x0, 0x2, 0x6, 0x200, 0x3}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000540)={0x0, 0x16, 0xdb, "7c494f4a5043340d4f9ade551b091e84c17d3944fdb26f1d675689a36fc0e541e15b4606e96b336773355fc0f54177e8370a84d26d2c7259cfd40978ef511f00354dec3534d6b10934c86c564ee44d41414c046a91789aa14f2a536fc8da21ee719f9ab288a3022d47c4aa5e7d24facc908835e334d66cf958c0699d8f383509c55abe1fa002912aeb014415edf13a42ffa0aad5902a066bd92b46bb80872ac2e86c5a19893535fe3185088a6d17d5b5bbb898915031a8dadb9c23d29a07854563f833ea00b8c09ecea41c8bf52c8716cd511e188d0a4a1534a8c0"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x20, 0x2, [0xff]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "1841"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xfc01}, &(0x7f0000000840)={0x40, 0x13, 0x6}, &(0x7f0000000880)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f00000008c0)={0x40, 0x19, 0x2, '\rA'}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0xb1}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0x6}}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_usb_disconnect(r0) 9m15.575248953s ago: executing program 1 (id=206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r4, 0x0) ftruncate(r4, 0xc17a) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xcc, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x9c, 0x2, {{0xb0b, 0x49, 0x66c1, 0x9, 0x31ba, 0x7207}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x7, 0x9c, 0x8}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x80000001, 0x8, 0x4, 0x5, 0x9, 0x6}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1db, 0x0, 0x2, 0x200}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x3, 0x7, 0x8, 0x8, 0x7fffffffffffffff}}]}}}]}, 0xcc}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x7c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x50, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x60cea86fd90700e1}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea309acfa}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 9m11.437978869s ago: executing program 1 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x144) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 9m10.9924722s ago: executing program 1 (id=217): pipe2$9p(&(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m55.653138792s ago: executing program 33 (id=217): pipe2$9p(&(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m0.235998033s ago: executing program 5 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x18}, {0x24}]}, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}, [{0xdd, 0x18, "0050f2020101000003a4000027a4000042435e0062322f00"}]}, 0x5c) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000600)="0802110000000802110000010800450000280001000040117ce70a0000020a00000112341234001400006162636465666768", 0x36, 0x0, &(0x7f0000000700)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random}, 0x14) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 6m54.903968618s ago: executing program 5 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='rd_pages=1024\n', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fea000/0x7000)=nil, 0x0}, 0x68) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='usbip-vudc.0', 0xc) 6m53.698165977s ago: executing program 5 (id=454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x2, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 6m49.230808523s ago: executing program 5 (id=461): syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040001000000001400010020010db80000000000000000", 0x2c) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) getpriority(0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4115, 0x1013}], 0x1, 0x10142, 0xfffffffc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141c41, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x6, 0x11) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000180)=[@in_dx={0x69, 0x20, {0xdb2, 0x6}}, @wr_crn={0x67, 0x20, {0x3, 0xffffffffffff9807}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_load_code={0x12e, 0x60, {0x0, "410f0766baf80cb8ec362688ef66bafc0cb803000000ef66baf80cb8f254d387ef66bafc0cec66ba200066ed66b867000f00d064f23e430f350f213d400fcdc4c1365e230f0050c3"}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control32=0x4004, 0x7, 0xd, 0x8}}, @nested_load_code={0x12e, 0x7a, {0x2, "66baf80cb82eb4e485ef66bafc0cb000ee66b83f018ed0c4c26138700048b8fcffffffffff00000f23c00f21f835020007000f23f8c74424000b000000c744240261000000ff2c24460f090f87040000000ffb15956b2f50c4429d9a0f674d0fc72e"}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_code={0x12e, 0x7f, {0x3, "66bad104ec672e0f21ba0fc79c590300000048b8d3000000000000000f23c80f21f835000020000f23f866b80c018ed866baf80cb8ac1ed387ef66bafc0cb800000000efc744240048000000c74424020c000000ff2c24660f38355d02440f0f21bbc42191dc06"}}, @wrmsr={0x65, 0x20, {0x9b7, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x60, 0x2, 0x1, 0xffff}}, @code={0xa, 0x6b, {"66b84b000f00d80f20e035000200000f22e064420fc7b10927000066b8cd000f00d067476cb9ea0200000f324763d80f009f00000080c744240000800000c7442402b1000000c7442406000000000f011424b8010000000f01c1"}}], 0x2f4}) r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece) pidfd_getfd(r2, r5, 0x0) 6m45.624157882s ago: executing program 5 (id=467): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14004017}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x21, 0x61b6, &(0x7f00000075c0)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='caif0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0) 6m41.958883772s ago: executing program 5 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r5, 0x321, 0x70bd27, 0x25dfdbfc, {0x4, 0x0, 0xa1}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) 6m25.732110986s ago: executing program 34 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r5, 0x321, 0x70bd27, 0x25dfdbfc, {0x4, 0x0, 0xa1}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x4000000) 5m44.431894309s ago: executing program 6 (id=572): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) 5m40.943213886s ago: executing program 6 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x18}, {0x24}]}, @val={0x2d, 0x1a, {0x112d, 0x0, 0x0, 0x0, {0x1}}}, [{0xdd, 0x18, "0050f2020101000003a4000027a4000042435e0062322f00"}]}, 0x5c) nanosleep(&(0x7f0000000500)={0x0, 0x2faf080}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000600)="0802110000000802110000010800450000280001000040117ce70a0000020a00000112341234001400006162636465666768", 0x36, 0x0, &(0x7f0000000700)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random}, 0x14) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 5m38.372002226s ago: executing program 6 (id=580): get_mempolicy(0x0, 0xfffffffffffffffe, 0x5b, &(0x7f0000ffd000/0x2000)=nil, 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) 5m38.108589194s ago: executing program 6 (id=582): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1411, 0x1, 0xfffffffc}, 0x10}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmctl$SHM_UNLOCK(0x0, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 5m35.079378047s ago: executing program 6 (id=583): writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r2, &(0x7f0000000000), 0x0) msgsnd(0x0, 0x0, 0x2000, 0x800) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x80600, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 5m30.266769136s ago: executing program 6 (id=592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004080) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000004c0)=0xfffffffb, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) 5m13.88087257s ago: executing program 35 (id=592): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004080) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1f, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000004c0)=0xfffffffb, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) 28.915793619s ago: executing program 2 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c0c6, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800040, 0x0, 0x1, 0x0, &(0x7f0000000140)) 22.458007138s ago: executing program 2 (id=999): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(0xffffffffffffffff, 0x7aa, &(0x7f0000000000)={{@any, 0x80000000}, 0xfffffffd, 0x80000000}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r6, 0x1}}, 0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000005c0)={r4, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x2}, 0x90) r7 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ptrace(0x10, r1) ptrace$peek(0x2, r1, 0x0) tgkill(r1, r1, 0x30) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x942) ioctl$IOC_PR_RESERVE(r9, 0x401070c9, &(0x7f00000000c0)={0x8001, 0x5, 0x1}) write$P9_RSTATu(r0, &(0x7f0000000200)={0x23d, 0x7d, 0x0, {{0x500, 0xfc, 0x0, 0x0, {}, 0x0, 0x4, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x05\xb4\x94\xe1', 0x1d, '\xcf\xc2\x00\x10\x00\x00\xf0\xff\xff\xff\x00\x00b\xbc\xe0\xe6\"\xbe&f\xfa\xc8G\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23d) 21.574710049s ago: executing program 3 (id=1001): pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x14, r5, 0x721, 0x70bd2c, 0x25dfdbf6}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044090) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x10000000, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2]}, 0x45c) 20.044729049s ago: executing program 3 (id=1002): inotify_init() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) openat$kvm(0xffffffffffffff9c, 0x0, 0x2840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x559, r1) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) 19.05078333s ago: executing program 2 (id=1004): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f45d2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e7f2378334000000000000000000", @ANYRESHEX=0x0], 0x4, 0xc24, &(0x7f0000001940)="$eJzs3V9oXOl5B+D3myOtJW/TzG42zh/nYmAD2Xqzi2R51yregBwrIgvGa1ZWLhYKGluyO6w0kiW5eEMJLiSUkLa45CKXNWwCvauvWggNuFfbEgKiV6UXxW03Zns3CaQtvViVM/ONNNLalrK2JXn9PMb+nTnznpnvzOrVnDN7zpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Gih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7WvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//cnez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fWOgfXs1Ir4YER+ulX8i/ndtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+sOVu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9vfBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN///n2+fApDt713Piy7s8ixej/Hct11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfx4pjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/u+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zV59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/IVI8+weba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/dNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/b5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT4i+tfynWd3jua73+m/e9G/38/UvzepzbXvpJrn92oHd7pasFeKvv/nyLF6u1/Wf+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfIb/lawJNm+Z1vv12fm5tdMmHChIn1ib3+zQQ8auX2/39Hiq9dLlJ3PzZv//9O59bG/v//fGdj+//Elly3R9v/z/bMO5H3Wvr7IgZW5hf7PxcxsPzOt19qzNcvzV6abY6MjB7//WPDR48P9z/V3bnfmNrxawePu7L/344UP/mbf17/HHvz/v/dP/87uCXX7VH/f6Z3nTbt1+z4pYAnTtn/fx0p/vXGB+v/v+l+n/91P+d74fnNOdgt2qP+f65nXi3/M9oz74Ui4uROnwsAAAAAAAAAAB4TB1MRP4sUf9v6x/Vr3m8+/ie+3K3tPf7vXvbD9f8BgPsr3/8nI8XPD341db9DZifH/89syXV7dPzvoZ55M7t0XvOOX2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiYUhRxIFK8+4NWul2UtzsGTjeaV65OjU/cfbHBFCkqUbTry78Dw0dHjr3y6vHRbt5/+YftC/HG5LmTtVML84tLs8vLszO1qWbjwsLM7I4f4UGX3+pI+wWozb99ZebixeXa0ZdHNt19tXrnwNOHqidGD4+81a2dGp+YmOyp6ev/2M/+EenhPRSfIE9FET+PFO+99EH69yKiEg/eC9v87njUBqOv7L/2SkyNT7RXZK5Rb66Ud6ZKruqLqPYsNNbtkV3oxQcyFnEtIirlgI+Uqze5WF+qn5+brZ2tL600VhoLzVTpjLZcn2pUYjRFLEZEq9jrwbPf9EcRfxcp7vy6lf6jiCi6ffDimck3h0a2f4C+XRjkPZ62WkSsxmPQs7BPHYginosUP5weiv8sOn3Vbpv3I75S5msRl8u8leJ6vp3KXxCjEb/yfgKPtb4o4mykWEit9H6Re7+9XXn6W7XXmxcXemq725WP/f7BbrJtwj42EEX8sr3F30q/9H4OAAAAAAAAAAAAAPtcEV+LFDfnX0jt80PXzyltNC/VztXPz3UO6+8e+1/LS62tra1VUydrOYdyjuU8m3M652LOazmv57yR82bOWzlXc97O2coZlfz8OWs5h3KO5TybczrnYs5rOa/nvJHzZs5bOVdz3s7ZyhmOkwYAAAAAAAAAAAAAAAAA4BGpRBHfixQ/+k0rrRWd68tORydvO88VPtH+PwAA//9mFkcG") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x220, 0x0, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'sit0\x00', {0xff}, {}, 0x2, 0x3, 0x4, 0x5}, 0x2f2, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg0\x00', {0x80, 0xd80, 0x1d, 0xffffff00, 0xfffffff4, 0xd, 0x60, 0xa0, 0xc0}, {0xfffffffffffffffb}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffa, 0x6}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'vlan0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0x79, 0x5, 0x44}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb) 16.303580742s ago: executing program 8 (id=1006): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x103902, 0x0) ioctl$TCSETS(r1, 0x5402, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) clock_gettime(0x4, &(0x7f00000001c0)) close_range(r3, r3, 0x2) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) 15.918839773s ago: executing program 7 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaa0045040078000000000011907800000000000000004e244e240064907802000000030000000000000082fa642a95bb0bd2a1020027d0d3b96ce8820ce65bcbfdf3b6"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 14.936953732s ago: executing program 8 (id=1008): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{0x0, 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 13.835866763s ago: executing program 7 (id=1009): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x3ff, 0x3, 0x4, 0x10201, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x7, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, &(0x7f0000000080), 0x5005) setgroups(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x70bd28, 0x25dfdbfb, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080) 13.447319164s ago: executing program 0 (id=1010): r0 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) dup2(r0, 0xffffffffffffffff) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4040, 0xa, 0x3, 0x40000000, 0x10}) 12.696654361s ago: executing program 7 (id=1011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000240)=ANY=[], 0xfd, 0x2b6, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 11.967888594s ago: executing program 0 (id=1012): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 10.330833963s ago: executing program 8 (id=1013): socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000004380)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f00000000c0)=0x8000000, 0x1000004) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x488c5}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x884) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 8.568287895s ago: executing program 3 (id=1014): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2004400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0xa40}}], 0x6b}}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r5, &(0x7f0000000100)=""/9, 0xfffffd87) 8.568099715s ago: executing program 7 (id=1015): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000001a80)={[{@data_ordered}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@journal_async_commit}, {@nolazytime}, {@data_writeback, 0x2e}, {@journal_async_commit}, {@resuid}, {@commit={'commit', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x800}}], [], 0x2c}, 0x84, 0x4f6, &(0x7f00000022c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x2a, 0xd, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140), 0x1, 0x481, &(0x7f0000000600)="$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") timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 8.560588177s ago: executing program 0 (id=1024): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x68902, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') epoll_create1(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESOCT, @ANYBLOB="bdea57a79c44908fe8819b13cc1c20469a317abf297d29c1e440c93cd7fd4a99f8e341b0f69f4d19719ae9a8138729198e20a1b658276ca6d7c689feb8a77ea57525b4961634d03b1692c05f08592a6fd4c1cfd85ff6fb229ccf831bcf0846cfaa083608bafd4e0d0caee390cc60db665ca308483c5b31f695de824d1ab7bb47daffa9b152e026c82ddbdaf8bda2711a367f5570d4753d0d12183be5442525bc3533b1ace55aee1ae1f9eaf08991a6d1362472e4495a6de122e973c76ce40f85146eae42dd5b78d986973950cbf03e0653edddc5157fccaf35c727a986ba181011bebfd4", @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 8.490731419s ago: executing program 2 (id=1016): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) close(r1) nanosleep(0x0, 0x0) close(r2) nanosleep(0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) 8.465745284s ago: executing program 8 (id=1017): get_mempolicy(0x0, 0xfffffffffffffffe, 0x5b, &(0x7f0000ffd000/0x2000)=nil, 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_open_dev$media(&(0x7f0000000580), 0x3, 0x20000) socket$l2tp6(0xa, 0x2, 0x73) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x103282, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.085479749s ago: executing program 7 (id=1018): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)="0807060504030201", 0x8}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, 0x0, 0x30) r3 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl(r5, 0x40204706, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x8) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) 5.032563481s ago: executing program 3 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaa0045040078000000000011907800000000000000004e244e240064907802000000030000000000000082fa642a95bb0bd2a1020027d0d3b96ce8820ce65bcbfdf3b6"], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 4.988968199s ago: executing program 0 (id=1020): socket$inet6(0xa, 0x80002, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 4.98596789s ago: executing program 2 (id=1021): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 4.922627101s ago: executing program 7 (id=1022): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000240)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@nogrpid}, {@dax_inode}]}, 0x1, 0x97a3, &(0x7f0000012f40)="$eJzs/QWcrWWhuH/Phk03giAqICUmKSGKdCiipCghSEsKiIDSoYQKioBKd3d3l3R3d3fH+9mwQdlecDz/33kPHq/r+rhnzYpZc6/7+9yPs+YZ1lpqvsXmGhgYe+Dd3jv9exfuds9yi4+x0Hon7TL45r12XPjxoReP+O7JOHMMPZ1z6OlcAwMDg4bez6B3Lxs8+4knDTcweGDI//7e6KOMOtzoAwOjDj079H4GZn73ZLSD37vd28PEA510yLfb4d1/7zTGkDsZ8skyy7+59sDAwMj/8PVDxjXtPz1QaUvNOf98f7d63224oVcP+vt175wOfvffaPsPDIy278CHbx9DbjvCP3zt/2ZDvufYkw8scc/H8L3/z7XUnPMvOIz/kLU4/NDLZh6yxoddg8aG3c53XGyNR4dO4aChEzf4H9bLx7Hd/39qqTnnW2jgw9fxwMLzbvrI2+/sNwfPMzAweN6BgcHzDQwMnv/j9qj/mT7Wja+qqqo+luaca4Yhz9mHG+bngZHf+7mWfi689I3pHhgYGLzwu88TBy//3nPBqqqqqqqqqvr3bM65Zpgbnv+P/VHP/yc9Y5txev5fVVVVVVVV9X+nBeeca4Yhz/WHef4/4Uc9/3/msaMOevdv/+eY+d2veuvjfRBVVVVVVVVV9ZHNtyA+/5/0o57/X37ipFf1/L+qqqqqqqrq/06Lvv3225v/w+vsDb146veup+f/Zz1817If24Crqqqqqqqq6r/dW0+efvbfX/N94oFhXu/9nYb+XmDQsedec83HNtB/jwb98+9Dtvi4x/T/2hDnkQ+fdGBg7SU+7qHUx9D/mdeqr/+/lL+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i/uQ4//vv/7/Wcev+N57wX9+yhluOf3vX/nOe/8PXnjBJ7f8mIb+cfSfevx/YPVBAwNDfcdefWBgYOE5F1186oGBgdNvmWHKKQbev26WIdfNNu7w77xB/Hv/mci84/AdbzHZu6dDNpSB8d6/j2Pfuf8F395v+EHDDOIfGufkgw5abamXZxz2dKoPfxzDvf/ZGCc99t5/yzLcMDca+UO++L37f++xDOs8dOxTDxn7NBuste4062+8yVdWX2uFVVdedeW1Z51+pulmnHXWmWaaZpXV11x52nc/fticTfrOx7n/lTkbfdg5e3LOf5yzYR/bh83ZpB89Z+/c466Xjfyt9+Zs8H9zzub+6DmbdPWh32icOUYYWP6duRk0MDDOPCMMbDTkzHQjDQyMM+/Q20445LbfGHe4gYGd//5Ah3w20vvb4KAthtxmqfkWm+vd3dTAwN9P/96HvJ/9iENHPsfQ0zmHns717rcZe+Dvm+Lg2U88abghc/GB6Rh9lFGHG31gYNShZ4fez8Cs756MesZ7t/uQ91kfZqDvvMzKDu/+e6cxBgYGRhvyycQrnLXtkKn/X3if9v9P////T16zDHp/exw09N/Q27zrNef8C/79e70zDUPmbvihl808xOR/+K3tP9A/jXfSkQcm/YjxfsTr4rwTbV9rnj7+Vv9Tr4tD453wI8b7Ea/j+6HjXfKBPR59967+x8Y7zL5uoXc+zvGv7OsGPnpfNzzdwcpXfnbYfd13PnyIH9hdvjdHIw1zow/b10245yRbDLn/OT56X7fQkLGP8IF93XADA+PM/d6+bsiOb74RBnYecmb6IWfmH2Hg0CFnZnjnzCgD5w4589UV11lzpSEXLPDP28HUgz7wB5qwzuYbZp0N+ofHPmiYv+8c/O7paPu/9x5OH7LfHDT0Yf2X+wrabsf+iPF+xPtP4TwPuWyl40Ye/3/q/adovCN/9Hg/7P2yP3S8O7101j3/w+N9f52N8A/TtcC/ss4m/eA6G/IQh/+HlfGv/hy2Etz+3c8nfP/eNtzssfd/phhhmPv9r36mWOCj19nYqw/zddvvOzDoo+Zm/n9lbj7zT/ugLf9xbv7Vn7emnvzd64f/iLkZadblpnpvbkb8b87N/P/duZljYPgPzs3ggXkHBgamGLp/mO9fmZsJP3pu/tXtZlS4/bufr/z+RfPsePjF783NsHPxX83NfP/duZn0/e1mineum2y4gRFHHNhohQ02WG+6dz++d3b6dz9+9Bqc51+Zy7H/Z+ZyosEfNpd/31RHf+Cq/f+LNfhP+/T37n+e/+5cDrw/lwOrD7tY6t+1fv/nLn93+bvL313+7vJ3l7+4Dzn+//7r/+8+9my7DP3lxghXTTLBdh/3eD/m/qOP/w/1/cDx/+0mmOSq4Qbev+4jj8++e5t/y+OzM797MtrB791u2OODPNAPPz6776wzb/O/dHz2/1PvrdV/4fdw7f/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4j7k+P+07/0dwMPTLfLc0AOhIzy+9dKLfNzj/Zj7jz7+P9T3A8f/F1l668eHG3j/uo88/v/ubRzH/+97fb6d/p2P/7+3Vjv+X/9F+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uA85/j/He38HcNRRe2zy3t8D3DDODqd/3OP9mPtPPf7f+/97a//vLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yFzf0+P/AMG9v+f22CwyO///f7kP8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/x/kj1n8l8ofs/j/MH/M4v+j/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4/zh/zOK/fP6YxX+F/DGL/0/yxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/+r5Yxb/n+aPWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/n+WPWfzXyx+z+K+fP2bx3yB/zOL/8/wxi/+G+WMW/1/kj1n8N8ofs/hvnD9m8d8kf8zi/8v8MYv/r/LHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/j/On/M4v+b/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P4/zZ/zOL/u/wxi//v88cs/jvnj1n8d8kfs/j/IX/M4v/H/DGL/675Yxb/P+WPWfx3yx+z+O+eP2bx3yN/zOL/5/wxi/9f8scs/n/NH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/P+WP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvy/+DjfbuicX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+T+A8ayB+z+A/KH7P4D5c/ZvEfPn/M4j84f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4fyJ/zOI/Xv6YxX/8/DGL/yfzxyz+E+SPWfwnzB+z+H8qf8ziP1H+mMX/0/ljFv/P5I9Z/D+bP2bxnzh/zOI/Sf6YxX/S/DGL/+fyxyz+k73nP/LHNK5/0yz+k7f+MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvH/a/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/od80P+h//Vx/Ztm8T+09Y9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj8m8X+n/P85if+gK/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av4j0oUW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxP+dT/P/5yz+g/LHLP7D5Y9Z/IfPH7P4D84fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP6fyB+z+I+XP2bxHz9/zOL/yfwxi/8E+WMW/wnzxyz+n8ofs/hPlD9m8f90/pjF/zP5Yxb/z+aPWfwnzh+z+E+SP2bxnzR/zOL/ufwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/3z+mMV/6vwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4T5M/ZvGfNn9s0IW7jTAwMPAf7z9d/phl/U+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfz+w/43M7ffFDrrL4z2/2/4gs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjF/6/5Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/9/yxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/TOI//ED+mMV/UP6YxX+4/DGL//D5Yxb/wfljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6Yxf8T+WMW//Hyxyz+4+ePWfw/mT9m8Z8gf8ziP2H+mMX/U/ljFv+J8scs/p/OH7P4fyZ/zOL/2fwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/2v5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvH/ev6YxX+2/DGL/zfyxyz+38wfs/jPnj9m8f9W/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/2/nj1n8v5M/ZvFfKH/M4v/d/DGL/8L5Yxb/7+WPWfy/nz9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfx/kD9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvFfLn/M4v/j/DGL//L5Yxb/FfLHLP4/yR+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/H+aP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/H+WP2bxXy9/zOK/fv6YxX+D/DGL/8/zxyz+G+aPWfx/kT9m8d8of8ziv3H+mMV/k/wxi/8v88cs/r/KH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8zi/+v8MYv/b/LHLP7b549Z/HfIH7P475g/ZvHfKX/M4v/b/DGL/+/yxyz+v88fs/jvnD9m8d8lf8zi/4f8MYv/H/PHLP675o9Z/P+UP2bx3y1/zOK/e/6YxX+P/DGL/5/zxyz+f8kfs/j/NX/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvH/W/6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549J/AcP5I9Z/Aflj1n8h8sfs/gPnz9m8R+cP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8P5E/ZvEfL3/M4j9+/pjF/5P5Yxb/CfLHLP4T5o9Z/D+VP2bxnyh/zOL/6fwxi/9n8scs/p/NH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/1/zxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/7/lj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMR/hIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/8n8scs/uPlj1n8x88fs/h/Mn/M4j9B/pjFf8L8MYv/p/LHLP4T5Y9Z/D+dP2bx/0z+mMX/s/ljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvH/a/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOL/t/wxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+T+I84kD9m8R+UP2bxHy5/zOI/fP6YxX9w/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bx/0T+mMV/vPwxi//4+WMW/0/mj1n8J8gfs/hPmD9m8f9U/pjFf6L8MYv/p/PHLP6fyR+z+H82f8ziP3H+mMV/kvwxi/+k+WMW/8/lj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi//n88cs/lPnj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/Wv6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+eP2bxny1/zOL/jfwxi/8388cs/rPnj1n8v5U/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMX/2/ljFv/v5I9Z/BfKH7P4fzd/zOK/cP6Yxf97+WMW/+/nj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/x/kj1n8l8ofs/j/MH/M4v+j/DGL/9L5Y/+h/oOGsR5xmfyx/1D/d/rH9b9s/pjFf7n8MYv/j/PHLP7L549Z/FfIH7P4/yR/zOK/Yv7YoAsHDZ2Z/2z/lfLHLOt/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvH/a/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOL/t/wxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/kPjAKXWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O39M4j/SQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ/+hjfyBcxb/cfPHLP6fyB+z+I+XP2bxHz9/zOL/yfwxi/8E+WMW/wnzxyz+n8ofs/hPlD9m8f90/pjF/zP5Yxb/z+aPWfwnzh+z+E+SP2bxnzR/zOL/ufwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/3z+mMV/6vwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/LH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/1/PHLP6z5Y9Z/L+RP2bx/2b+mMV/9vwxi/+38scs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+H87f8zi/538MYv/QvljFv/v5o9Z/BfOH7P4fy9/zOL//fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOL/g/wxi/9S+WMW/x/mj1n8f5Q/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv8f549Z/JfPH7P4r5A/ZvH/Sf6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4v/T/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v+z/DGL/3r5Yxb/9fPHLP4beP1H+agrLf4/9/p/ZBb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3Rf+2CIv/dmljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/Hd/3ffPvjGte/aRb/nVr/mMX/t/ljFv/f5Y9Z/H+fP2bx3zl/zOK/S/6Yxf8P+WMW/z/mj1n8d80fs/j/KX/M4r9b/pjFf/f8MYv/HvljFv8/549Z/P+SP2bx/2v+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zi/7f8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fk/iPPJA/ZvEflD9m8R8uf8ziP3z+mMV/cP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8f9E/pjFf7z8MYv/+PljFv9P5o9Z/CfIH7P4T5g/ZvH/VP6YxX+i/DGL/6fzxyz+n8kfs/h/Nn/M4j9x/pjFf5L8MYv/pPljFv/P5Y9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/5/PHLP5T549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/1r+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/nj9m8Z8tf8zi/438MYv/N/PHLP6z549Z/L+VP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/9v5Yxb/7+SPWfwXyh+z+H83f8ziv3D+mMX/e/ljFv/v549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv8f5I9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+P84f8ziv3z+mMV/hfwxi/9P8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/5/mj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW/5/lj1n818sfs/ivnz9m8d8gf8zi//P8MYv/hvljFv9f5I9Z/DfKH7P4b5w/ZvHfJH/M4v/L/DGL/6/yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4/zp/zOL/m/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP5/zR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvyHbaShpwr/S/PHLOv/svwxi//l+WMW/7/lj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bwHzR4YOSn8scM/kPW/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS/1EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT826MJRFP5j5o9Z1v9Y+WMW/7Hzxyz+4+SPWfzHzR+z+H8if8ziP17+mMV//Pwxi/8n88cs/hPkj1n8J8wfs/h/Kn/M4j9R/pjF/9P5Yxb/z+SPWfw/mz9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/agYHNP64h/Ttn8Z+u9Y9Z/KfPH7P4z5A/ZvGfMX/M4v+1/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fz1/zOI/W/6Yxf8b+WMW/2/mj1n8Z88fs/h/K3/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+388cs/t/JH7P4L5Q/ZvH/bv6YxX/h/DGL//fyxyz+388fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+P8gfs/gvlT9m8f9h/pjF/0f5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvH/cf6YxX/5/DGL/wr5Yxb/n+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP4/zR+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP4/yx+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/w3zxyz+v8gfs/hvlD9m8d84f8ziv0n+mMX/l/ljFv9f5Y9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8f91/pjF/zf5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvH/bf6Yxf93+WMW/9/nj1n8d84fs/jvkj9m8f9D/pjF/4/5Yxb/XfPHLP5/yh+z+O+WP2bx3z1/zOK/R/6Yxf/P+WMW/7/kj1n8/5o/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/y1/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s98hP/bw/9vDOzfM4v/s61/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fk/iPOpA/ZvEflD9m8R8uf8ziP3z+mMV/cP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8f9E/pjFf7z8MYv/+PljFv9P5o9Z/CfIH7P4T5g/ZvH/VP6YxX+i/DGL/6fzxyz+n8kfs/h/Nn/M4j9x/pjFf5L8MYv/pPljFv/P5Y9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/5/PHLP5T549Z/L+QP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/1r+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/nj9m8Z8tf8zi/438MYv/N/PHLP6z549Z/L+VP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/9v5Yxb/7+SPWfwXyh+z+H83f8ziv3D+mMX/e/ljFv/v549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv8f5I9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+P84f8ziv3z+mMV/hfwxi/9P8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/5/mj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW/5/lj1n818sfs/ivnz9m8d8gf8zi//P8MYv/hvljFv9f5I9Z/DfKH7P4b5w/ZvHfJH/M4v/L/DGL/6/yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4/zp/zOL/m/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP5/zR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfz/lj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMS/9EG8scs/oPyxyz+w73rv/fHNax/1yz+w7f+MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4v+J/DGL/3j5Yxb/8fPHLP6fzB+z+E+QP2bxnzB/zOL/qfwxi/9E+WMW/0/nj1n8P5M/ZvH/bP6YxX/i/DGL/yT5Yxb/SfPHLP6fyx+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/l/oC2Gnlr8l84fs/gvkz9m8V82f8ziv1z+mMX/x/ljFv/l88cs/ivkj1n8f5I/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/j/NH/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/j/LH/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4/yJ/zOK/Uf6YxX/j/DGL/yb5Yxb/X+aPWfx/lT9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/X+WMW/9/kj1n8t88fs/jvkD9m8d8xf8ziv1P+mMX/t/ljFv/f5Y9Z/H+fP2bx3zl/zOK/S/6Yxf8P+WMW/z/mj1n8d80fs/j/KX/M4r9b/pjFf/f8MYv/HvljFv8/549Z/P+SP2bx/2v+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv7Ye/4DIw8M/Cf7n5k/Zln/Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/3/LHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYd/8h+Ww39gtMfbCjCL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+T+I8+kD9m8R+UP2bxHy5/zOI/fP6YxX9w/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bx/0T+mMV/vPwxi//4+WMW/0/mj1n8J8gfs/hPmD9m8f9U/pjFf6L8MYv/p/PHLP6fyR+z+H82f8ziP3H+mMV/kvwxi/+k+WMW/8/lj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi//n88cs/lPnj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/Wv6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+eP2bxny1/zOL/jfwxi/8388cs/rPnj1n8v5U/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMX/2/ljFv/v5I9Z/BfKH7P4fzd/zOK/cP6Yxf97+WMW/+/nj1n8F8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/+S+WMW/x/kj1n8l8ofs/j/MH/M4v+j/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4/zh/zOK/fP6YxX+F/DGL/0/yxyz+K+aPWfxXMvr/Cw/Y4r+y0f9fyOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP4/zR+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP4/yx+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/w3zxyz+v8gfs/hvlD9m8d84f8ziv0n+mMX/l/ljFv9f5Y9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8f91/pjF/zf5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvH/bf6Yxf93+WMW/9/nj1n8d84fs/jvkj9m8f9D/pjF/4/5Yxb/XfPHLP5/yh+z+O+WP2bx3z1/zOK/R/6Yxf/P+WMW/7/kj1n8/5o/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4/y1/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHJP5jDOSPWfwH5Y9Z/IfLH7P4D58/ZvEfnD9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9hS/6P/i+st/uNI/f+rLP7j5o9Z/D+RP2bxHy9/zOI/fv6Yxf+T+WMW/wnyxyz+E+aPWfw/lT9m8Z8of8zi/+n8MYv/Z/LHLP6fzR+z+E+cP2bxnyR/zOI/af6Yxf9z+WMW/8nyxyz+k+ePWfynyB+z+E+ZP2bxnyp/zOL/+fwxi//U+WMW/y/kj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8v5Y/ZvGfKX/M4j9z/pjFf5b8sQ/4D71s7I95TP9PfYj/rPljlvX/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/th/qv/Iw/j/IX/sP9V/YBj/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvH/a/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOL/t/wxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfHtZ/i//lcf2bZvF/pPWPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+Yw7kj1n8B+WPWfyHyx+z+A+fP2bxH5w/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfw/kT9m8R8vf8ziP37+mMX/k/ljFv8J8scs/hPmj1n8P5U/ZvGfKH/M4v/p/DGL/2fyxyz+n80fs/hPnD9m8Z8kf8ziP2n+mMX/c/ljFv/J8scs/pPnj1n8p8gfs/hPmT9m8Z8qf8zi//n8MYv/1PljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/L+WP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/r+ePWfxnyx+z+H8jf8zi/838MYv/7PljFv9v5Y9Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8f92/pjF/zv5Yxb/hfLHLP7fzR+z+C+cP2bx/17+mMX/+/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/B/ljFv+l8scs/j/MH7P4/yh/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP4/zh+z+C+fP2bxXyF/zOL/k/wxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6Yxf+n+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6Yxf9n+WMW//Xyxyz+6+ePWfw3yB+z+P88f8ziv2H+mMX/F/ljFv+N8scs/hvnj33Q/+2hfdyj+n/oQ/w3yR+zrP9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvH/a/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOL/t/wxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+T+I81kD9m8R+UP2bxHy5/zOI/fP6YxX9w/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bx/0T+mMV/vPwxi//4+WMW/0/mj1n8J8gfs/hPmD9m8f9U/pjFf6L8MYv/p/9/7Nx9uNd1fcfxH/dkOfu061KvacOhMddmJDIatRAVxePNKRPNvEc93CQ3ciMBpsBGK3VsutTNgk0sHHO2aonDzXW3omFZszVia5VTXAtjzMEic8auA+cQnL09186Xfb9uvR+PPzjn9zu+fynP6+Xv58V1pX8oS/+j9Q9l6f9q/UNZ+v+s/qEs/YfpH8rS/xj9Q1n6/5z+oSz9h+sfytL/WP1DWfofp38oS//X6B/K0n+E/qEs/X9e/1CW/sfrH8rS/xf0D2Xp/1r9Q1n6/6L+oSz9f0n/UJb+J+gfytL/dfqHsvQfqX8oS//X6x/K0v9E/UNZ+o/SP5Sl/0n6h7L0H61/KEv/X9Y/lKX/GP1DWfq/Qf9Qlv6/on8oS/+x+oey9H+j/qEs/d+kfyhL/1/VP5Sl/5v1D2XpP07/UJb+J+sfytJ/vP6hLP1P0T+Upf+p+oey9D9N/1CW/hP0D2Xpf7r+oSz9z9A/lKX/RP1DWfqfqX8oS/82/UNZ+p+lfyhL/7P1D2Xpf47+oSz9z9U/lKV/u/6hLP3fon8oS/+36h/K0v88/UNZ+r9N/1CW/ufrH8rSf5L+oSz9L9A/lKX/hfqHsvR/u/6hLP0v0j+Upf879A9l6X+x/qEs/S/RP5Sl/6X6h7L0v0z/UJb+l+sfytL/Cv1DWfpfqX8oS//J+oey9L9K/1CW/lfrH8rS/xr9Q1n6d+gfytJ/iv6hLP2n6h/K0n+a/qEs/afrH8rS/536h7L0v1b/UJb+M/QPZek/U/9Qlv6z9A9l6T9b/1CW/tfpH8rSf47+oSz95+ofytJ/nv6hLP3n6x/K0v96/UNZ+i/QP5Sl/7v0D2Xpv1D/UJb+i/QPZem/WP9Qlv436B/K0v/d+oey9L9R/1CW/jfpH8rSf4n+oSz9l+ofytJ/mf6hLP1/Tf9Qlv6/rn8oS//l+oey9H+P/qEs/X9D/1CW/u/VP5Sl//v0D2Xpf7P+oSz9b9E/lKX/rfqHsvT/Tf1DWfqv0D+Upf9v6R/K0v+39Q9l6X+b/qEs/W/XP5Sl/+/oH8rS//36h7L0v0P/UJb+d+ofytL/Lv1DWfr/rv6hLP1/T/9Qlv536x/K0v8D+oey9P+g/qEs/VfqH8rSf5X+oSz9f1//UJb+f6B/KEv/e/QPZem/Wv9Qlv736h/K0v9D+oey9P+w/qEs/dfoH8rS/z79Q1n6/6H+oSz91+ofytL/j/QPZel/v/6hLP3/WP9Qlv4P6B/K0v8j+oey9P8T/UNZ+n9U/1CW/h/TP5Sl/8f1D2Xp/6f6h7L0/4T+oSz9H9Q/lKX/Ov1DWfo/pH8oS/8/0z+Upf96/UNZ+j+sfyhL/z/XP5Sl/1/oH8rS/xH9Q1n6/6X+oSz9P6l/KEv/T+kfytL/0/qHsvT/jP6hLP0/q38oS/+/0j+Upf/n9A9l6f95/UNZ+m/QP5Sl/xf0D2Xp/9f6h7L036h/KEv/R/UPZen/Rf1DWfp/Sf9Qlv6P6R/K0v/L+oey9P+K/qEs/f9G/1CW/o/rH8rS/6v6h7L0/1v9Q1n6f03/UJb+f6d/KEv/TfqHsvT/uv6hLP036x/K0v/v9Q9l6f8P+oey9P+G/qEs/f9R/1CW/t/UP5Sl/7f0D2Xp/239Q1n6P6F/KEv/f9I/lKX/k/qHsvR/Sv9Qlv5b9A9l6f+0/qEs/f9Z/1CW/t/RP5Sl/7/oH8rS/7v6h7L036p/KEv/Z/QPZen/Pf1DWfpv0z+Upf+/6h/K0n+7/qEs/f9N/1CW/s/qH8rS/9/1D2Xpv0P/UJb+O/UPZen/H/qHsvT/vv6hLP136R/K0v8H+oey9H9O/1CW/j/UP5Sl//P6h7L0/0/9Q1n6v6B/KEv/H+kfytJ/t/6hJP1f2dI/lKV/P/1DWfr31z+Upf8A/UNZ+g/UP5Sl/yD9Q1n6D9Y/lKX/EP1DWfoP1T+Upf/L9A9l6X+I/qEs/V+ufyhL/1foH8rS/1D9Q1n6/5T+oSz9D9M/9BPXHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P+aeYsWXzt5xoyOub7xjW98s++bl/rfTAAAwP+2H3/of6n/TgAAAAAAAAAAAAAAAAAAACCvJv7vxF7qf0YAAAAAAAAAAAAAAPj/rq39lG0D+h3w1ID9H7z6sY49X0fvumjamjUPle6vXT8+O3jJ/vs/2L179+5Vz46b0PVwSKvV6vxfe2XX46E9jztff+mwlUfufVTGf+6uJy6fdOg5c9fdPvDrq25tf2bQnmcHta6cMn1Gx+v7t1rltEGthZ0PTuzXapUzBrVu63wwqvPBxEGttZ0PTtrz4GWtT3c+eN3Vs2dc0/nEmZV/z+AnRVv70taAAxbbOuDfBvvvf+mwJ6d1f+3lJbtfbWCra//D133xiB4/6/Yi++9+/XJKz/33+R8QeFF92/9zm7u/9vKS/+39/0Mbdy2Ofvbi++9+/XKq/UN9gs//B2y05+f+Hp//jwlect/9yUM33tG5/7YL7j+666mB/5PP/z9+/XJaz/33P+Dzf+fn+Andn/+HtFrl9IP87YBU2tqXbevt/b/3/Q/8mR43/fbf/71f3vKKzv3f93xreddTg/q4/wm9vf/f3OPvFeibtvbVu3u8//dh/60RwUvu2//WdYfu+fy/5YGrD9/vZ33Z/+k99z9y/szrRs5btPiE6TMnT+2Y2jFr7KgxJ44eO3bMmJF7PhHs/fUgf1MgiYN7/28d0uOmX6vVse9+w/23Tujc//aHl3+466mhfdz/Gb2+/x/j/R9Cw/u3Bg9uLZw8f/7cE/f+2v1w1N5f9/5lwf778N//xx7f9Zd1/5lhv1bryH33Iy4fO6Rz/zfMKeu7nhrcx/1P7HX/4w/8s0qgbw7y/f+aHjcH7P/krTct6Nz/cd9/1Zaup/r63/9n9rr/e7z/w8Foa2/V+ibauf+Thiw7q9p1afPnf1CfJvY/bMdtO6tdl7PsH+rTxP4nrXjTVdWuy9n2D/VpYv8PzbxiRbXrco79Q32a2P8LP73zqGrX5Vz7h/o0sf/Hv/P0mmrXpd3+oT5N7P8Dd7efVO26vMX+oT5N7P+E638wrtp1eav9Q32a2P+Ul5+/ttp1Oc/+oT5N7P+s3aceXu26vM3+oT5N7L/fsu8urXZdzrd/qE8T+39q8orZ1a7LJPuH+jSx/7XDRjxX7bpcYP9Qnyb2v/yZN0ysdl0utH+oTxP7/8qdKx+vdl3ebv9Qnyb2//FLX7Wy2nW5yP6hPk3s/4fDHz6k2nV5h/1DfZrY/6ZNax+sdl0utn+oTxP7X7V2wPBq1+US+4f6NLH/JWdOfazadbnU/qE+Tex/9JgvXVLtulxm/1CfJvZ/5Ge/+XS163K5/UN9mtj/+Y8smFftulxh/1CfJva/4KiP/ajadbnS/qE+Tez/zR1HTat2XSbbP9Snif2X2w/ZVO26XGX/UJ8m9n/x9tXjq12Xq+0f6tPE/tcf9vmPVrsu19g/1KeJ/e+YM2tstevSYf9Qnyb2/+33LHlvtesyxf6hPk3s/47nv1aqXZep9g/1aWL/W0ddfGm16zLN/qE+Tex/9TnPPlrtuky3f6hPE/tfsf6J+dWuyzvtH+rTxP43bDj7yWrX5Vr7h/o0sf/jRow8tNp1mWH/UJ8m9j/7ouUfrHZdZto/1KeJ/Z/2wJ2vqXZdZtk/1KeJ/Q/96rhPVLsus+0f6tPE/j817n2frHZdrrN/qE8T+985/tjjq12XOfYP9Wli/5sfHHVXtesy1/6hPk3s//2P3l3xusyzf6hPE/uf89oXtle7LvPtH+rTxP7fOOnCRdWuy/X2D/VpYv+H3zPxC9WuywL7h/o0sf/LvvW986pdl3fZP9Snif0fe8RVR1e7LgvtH+rTxP6nTd94S7Xrssj+oT5N7H/Cqs2jq12XxfYP9Wli/4c9Ne/eatflBvuH+jSx/20Djji32nV5t/1DfZrY/303PvKNatflRvuH+jSx/1tu/khHtetyk/1DfZrY/2d2Dd5R7bossX8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6LHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwFAAD//4FT8dw=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000b40)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) 3.154876754s ago: executing program 2 (id=1023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(0xffffffffffffffff, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000900), 0x100) 3.150166494s ago: executing program 8 (id=1025): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f0000000580)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x58) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r2, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x509840, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 2.896285751s ago: executing program 0 (id=1026): syz_emit_vhci(0x0, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x16}, "e32dd8b6f5e48636d5b529f1d1fc2134898109329646"}, 0x1a) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000000)={[0x6]}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.198901759s ago: executing program 3 (id=1027): get_mempolicy(0x0, 0xfffffffffffffffe, 0x5b, &(0x7f0000ffd000/0x2000)=nil, 0x2) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r0 = syz_open_dev$media(&(0x7f0000000580), 0x3, 0x20000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x13, r0, 0x2460a000) socket$l2tp6(0xa, 0x2, 0x73) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x103282, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) statx(0xffffffffffffffff, 0x0, 0x800, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.022909083s ago: executing program 0 (id=1028): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x10}) r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fdinfo\x00') openat(r1, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141c00, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x72e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x2d, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) 72.609617ms ago: executing program 8 (id=1029): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000ac0)='./file1\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x4, 0x6ea, &(0x7f0000000280)="$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") r0 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x189) socket$inet(0x2, 0x1, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x2, 0x4, 0x1010, 0x89}, 0x50) r4 = socket(0xa, 0x5, 0x0) sendto$l2tp6(r4, &(0x7f0000000640)="91", 0x1, 0x0, &(0x7f0000000740)={0xa, 0x0, 0x9, @private0, 0x24d, 0x2}, 0x20) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) 0s ago: executing program 3 (id=1030): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r4, r5, 0x0, 0x7ffff004) kernel console output (not intermixed with test programs): ] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.087077][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.192717][ T4293] Bluetooth: hci0: command 0x0409 tx timeout [ 204.271006][ T4293] Bluetooth: hci0: command 0x041b tx timeout [ 204.525857][ T57] tipc: Left network mode [ 204.580115][ T4286] ffs_data_put(): freeing [ 204.742663][ T5434] chnl_net:caif_netlink_parms(): no params data found [ 205.280435][ T5434] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.289066][ T5434] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.311538][ T5434] device bridge_slave_0 entered promiscuous mode [ 205.629723][ T5434] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.640840][ T5434] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.652823][ T5434] device bridge_slave_1 entered promiscuous mode [ 205.702941][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.751328][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.872817][ T5434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.913466][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.922209][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.942130][ T5173] device veth0_vlan entered promiscuous mode [ 205.948897][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.975147][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.989994][ T5434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.028852][ T5173] device veth1_vlan entered promiscuous mode [ 206.350700][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 206.387516][ T5434] team0: Port device team_slave_0 added [ 206.647557][ T4293] Bluetooth: hci3: command 0x0406 tx timeout [ 206.655353][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 207.032330][ T5173] device veth0_macvtap entered promiscuous mode [ 207.291130][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.304819][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.326266][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.341599][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.364895][ T5434] team0: Port device team_slave_1 added [ 207.404281][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.431796][ T5173] device veth1_macvtap entered promiscuous mode [ 208.522008][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 208.710854][ T5434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.736361][ T5434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.955220][ T5434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.999225][ T5434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.024855][ T5434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.226040][ T5434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.763349][ T57] device hsr_slave_0 left promiscuous mode [ 209.952087][ T57] device hsr_slave_1 left promiscuous mode [ 210.016998][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.030680][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.121195][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.128699][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.248709][ T57] device bridge_slave_1 left promiscuous mode [ 210.255254][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.130241][ T57] device veth1_macvtap left promiscuous mode [ 212.136587][ T57] device veth0_macvtap left promiscuous mode [ 212.165284][ T57] device veth1_vlan left promiscuous mode [ 212.206954][ T57] device veth0_vlan left promiscuous mode [ 212.974687][ T57] team0 (unregistering): Port device team_slave_1 removed [ 213.021721][ T57] team0 (unregistering): Port device team_slave_0 removed [ 213.066733][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.116225][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.470420][ T57] bond0 (unregistering): Released all slaves [ 213.572105][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.582684][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.592634][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.608787][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.618753][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.631907][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.645034][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.681070][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.689900][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.702851][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.717966][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.727904][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.739075][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.749909][ T5173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.760444][ T5173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.782923][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.804623][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.826921][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.841385][ T5434] device hsr_slave_0 entered promiscuous mode [ 213.848267][ T5434] device hsr_slave_1 entered promiscuous mode [ 213.855501][ T5434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.863582][ T5434] Cannot create hsr debugfs directory [ 213.871734][ T5173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.883218][ T5173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.892253][ T5173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.901038][ T5173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.161787][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.169655][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.210038][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.272973][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.308786][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.337240][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 214.358798][ T5434] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.377780][ T5434] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.440728][ T5434] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.511770][ T5434] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.174992][ T5559] loop3: detected capacity change from 0 to 2048 [ 216.381551][ T5559] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 216.909434][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.953077][ T5434] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.162680][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 217.232330][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.267389][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.559816][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.611639][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.627790][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.635081][ T4871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.738495][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.794423][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.869788][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.904909][ T4871] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.912165][ T4871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.951099][ T5601] loop3: detected capacity change from 0 to 256 [ 218.957889][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.141521][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.168373][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.199674][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.976580][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.027364][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.074760][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.154444][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.203185][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.234816][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.246479][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.299489][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.635927][ T5615] loop3: detected capacity change from 0 to 32768 [ 221.664997][ T5615] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.279 (5615) [ 221.694158][ T5615] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 221.704964][ T5615] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 221.714118][ T5615] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 221.724020][ T5615] BTRFS info (device loop3): use zstd compression, level 3 [ 221.731345][ T5615] BTRFS info (device loop3): force clearing of disk cache [ 221.738521][ T5615] BTRFS info (device loop3): enabling disk space caching [ 221.745691][ T5615] BTRFS info (device loop3): disk space caching is enabled [ 222.127252][ T5615] BTRFS info (device loop3): enabling ssd optimizations [ 222.144331][ T5615] BTRFS info (device loop3): rebuilding free space tree [ 222.222803][ T5615] BTRFS info (device loop3): disabling free space tree [ 222.229849][ T5615] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 222.240996][ T5615] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 222.619754][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.632489][ T5646] loop2: detected capacity change from 0 to 2048 [ 223.006655][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.071361][ T5646] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 223.105292][ T5434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.369070][ T5612] loop0: detected capacity change from 0 to 40427 [ 223.423875][ T5612] F2FS-fs (loop0): invalid crc value [ 223.591986][ T5612] F2FS-fs (loop0): Found nat_bits in checkpoint [ 223.656952][ T5612] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 224.157198][ T4278] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 224.199537][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 224.781169][ T4265] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop3 scanned by udevd (4265) [ 229.805998][ T5709] loop0: detected capacity change from 0 to 1024 [ 229.884985][ T5713] device syzkaller0 entered promiscuous mode [ 229.935163][ T5713] tipc: Enabled bearer , priority 0 [ 230.128875][ T5712] tipc: Resetting bearer [ 230.343709][ T5712] tipc: Disabling bearer [ 230.394631][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.431696][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.556464][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.569982][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.609216][ T5434] device veth0_vlan entered promiscuous mode [ 230.627436][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.657358][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.696389][ T5434] device veth1_vlan entered promiscuous mode [ 230.720184][ T5722] device syzkaller0 entered promiscuous mode [ 230.906826][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.938791][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.966871][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.006605][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.039449][ T5434] device veth0_macvtap entered promiscuous mode [ 231.068660][ T5434] device veth1_macvtap entered promiscuous mode [ 231.187650][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.189284][ T5730] loop5: detected capacity change from 0 to 256 [ 231.216477][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.230199][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.247763][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.258079][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.297072][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.473086][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.492911][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.109129][ T5434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.160086][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 232.187533][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 232.196246][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 232.205245][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 232.218812][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.290659][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.337565][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.361347][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.386172][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.397203][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.430639][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.476229][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.718468][ T5434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.865582][ T5745] tipc: Started in network mode [ 232.950328][ T5745] tipc: Node identity 365ca11fe2c5, cluster identity 4711 [ 232.961713][ T5745] tipc: Enabled bearer , priority 0 [ 232.970816][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.038106][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 233.227477][ T5760] __vm_enough_memory: pid: 5760, comm: syz.3.293, no enough memory for the allocation [ 233.490292][ T5434] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.587657][ T5434] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.706568][ T5434] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.033054][ T5434] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.269947][ T5742] tipc: Resetting bearer [ 234.331860][ T5738] tipc: Disabling bearer [ 234.348666][ T126] tipc: Node number set to 3566838047 [ 234.509442][ T5763] device geneve2 entered promiscuous mode [ 234.532374][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.540594][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.581382][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 234.707641][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.734305][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.137901][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.845345][ T5789] loop6: detected capacity change from 0 to 8192 [ 237.949664][ T5789] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 237.969438][ T5789] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 238.055402][ T5789] REISERFS (device loop6): using ordered data mode [ 238.062464][ T5789] reiserfs: using flush barriers [ 238.070286][ T5789] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 238.251893][ T5789] REISERFS (device loop6): checking transaction log (loop6) [ 238.431462][ T5789] REISERFS (device loop6): Using rupasov hash to sort names [ 238.592160][ T5789] REISERFS (device loop6): using 3.5.x disk format [ 238.762878][ T5789] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 238.825317][ T5789] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 238.887578][ T5789] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 238.928499][ T5789] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 238.998360][ T5789] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 239.443371][ T5807] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.454870][ T5807] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.467778][ T5807] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.487997][ T5807] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.499584][ T5807] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 239.510871][ T5807] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 241.849342][ T5826] loop6: detected capacity change from 0 to 256 [ 242.260619][ T4293] Bluetooth: hci4: command 0x0406 tx timeout [ 242.692687][ T5832] loop5: detected capacity change from 0 to 128 [ 244.799105][ T5843] ALSA: mixer_oss: invalid OSS volume '' [ 246.952402][ T5866] loop3: detected capacity change from 0 to 8192 [ 247.022362][ T5866] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 247.064986][ T5866] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 247.078850][ T5866] REISERFS (device loop3): using ordered data mode [ 247.098183][ T5866] reiserfs: using flush barriers [ 247.110633][ T5866] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.128067][ T5866] REISERFS (device loop3): checking transaction log (loop3) [ 247.627818][ T5873] loop0: detected capacity change from 0 to 2048 [ 247.812535][ T5866] REISERFS (device loop3): Using rupasov hash to sort names [ 247.863598][ T5866] REISERFS (device loop3): using 3.5.x disk format [ 247.870413][ T5866] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 248.030318][ T5866] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 248.158692][ T5866] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 248.328433][ T5866] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 248.582720][ T4265] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.606483][ T5866] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 248.626769][ T5873] device syzkaller0 entered promiscuous mode [ 249.199306][ T5890] __vm_enough_memory: pid: 5890, comm: syz.5.324, no enough memory for the allocation [ 249.634478][ T5894] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 249.645913][ T5894] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 249.657502][ T5894] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 249.676031][ T5894] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 249.687594][ T5894] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 249.699068][ T5894] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 252.038260][ T5904] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 253.869704][ T5930] random: crng reseeded on system resumption [ 253.934702][ T5931] loop3: detected capacity change from 0 to 128 [ 254.942892][ T5933] fuse: Bad value for 'fd' [ 256.719574][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.725990][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.051143][ T5960] failed to create ptp aux_worker -4 [ 259.678175][ T5982] tipc: Enabled bearer , priority 0 [ 259.729158][ T5982] device syzkaller0 entered promiscuous mode [ 259.819845][ T5982] tipc: Resetting bearer [ 259.881992][ T5981] tipc: Resetting bearer [ 261.348226][ T5981] tipc: Disabling bearer [ 261.449575][ T5993] netlink: 'syz.6.337': attribute type 4 has an invalid length. [ 264.999798][ T6030] jffs2: notice: (6030) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 265.009495][ T6033] tipc: Started in network mode [ 265.076177][ T6033] tipc: Node identity da08b4d58aeb, cluster identity 4711 [ 265.091704][ T6033] tipc: Enabled bearer , priority 0 [ 265.129921][ T6033] device syzkaller0 entered promiscuous mode [ 265.358733][ T6042] tipc: Resetting bearer [ 267.474791][ T6051] input: syz1 as /devices/virtual/input/input5 [ 267.803583][ T6032] tipc: Resetting bearer [ 267.941696][ T6032] tipc: Disabling bearer [ 268.005470][ T5670] tipc: Node number set to 1357100245 [ 271.522960][ T4293] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 271.535126][ T4293] CPU: 0 PID: 4293 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 271.542754][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 271.552873][ T4293] Workqueue: hci3 hci_rx_work [ 271.557646][ T4293] Call Trace: [ 271.560968][ T4293] [ 271.563937][ T4293] dump_stack_lvl+0x188/0x24e [ 271.568669][ T4293] ? show_regs_print_info+0x12/0x12 [ 271.574285][ T4293] ? load_image+0x410/0x410 [ 271.578862][ T4293] sysfs_create_dir_ns+0x26a/0x290 [ 271.584029][ T4293] ? __lock_acquire+0x7c40/0x7c40 [ 271.589106][ T4293] ? sysfs_warn_dup+0xa0/0xa0 [ 271.593842][ T4293] ? preempt_schedule_thunk+0x16/0x18 [ 271.599281][ T4293] kobject_add_internal+0x617/0xca0 [ 271.604571][ T4293] kobject_add+0x160/0x230 [ 271.609048][ T4293] ? kobject_init+0x1c0/0x1c0 [ 271.613780][ T4293] ? __raw_spin_lock_init+0x41/0x100 [ 271.619129][ T4293] ? klist_children_get+0x50/0x50 [ 271.624196][ T4293] ? get_device_parent+0x121/0x3e0 [ 271.629365][ T4293] device_add+0x470/0x1050 [ 271.633846][ T4293] hci_conn_add_sysfs+0xd1/0x1e0 [ 271.638846][ T4293] le_conn_complete_evt+0xf93/0x15c0 [ 271.644204][ T4293] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 271.650505][ T4293] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 271.656192][ T4293] ? mutex_unlock+0x10/0x10 [ 271.660736][ T4293] ? skb_pull_data+0xec/0x1f0 [ 271.665492][ T4293] hci_le_conn_complete_evt+0x183/0x440 [ 271.671107][ T4293] ? hci_remote_host_features_evt+0x230/0x230 [ 271.677238][ T4293] hci_event_packet+0x7b3/0x1290 [ 271.682229][ T4293] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 271.687909][ T4293] ? bis_list+0x280/0x280 [ 271.692290][ T4293] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 271.698008][ T4293] ? hci_send_to_monitor+0x9c/0x4a0 [ 271.703288][ T4293] hci_rx_work+0x3eb/0xd40 [ 271.707782][ T4293] ? _raw_spin_unlock+0x40/0x40 [ 271.712701][ T4293] ? process_one_work+0x7b4/0x1160 [ 271.717860][ T4293] process_one_work+0x8ab/0x1160 [ 271.722866][ T4293] ? worker_detach_from_pool+0x240/0x240 [ 271.728598][ T4293] ? _raw_spin_lock_irq+0xb7/0xf0 [ 271.733681][ T4293] ? _raw_spin_lock_irqsave+0x100/0x100 [ 271.739285][ T4293] ? wq_worker_running+0x97/0x190 [ 271.744359][ T4293] worker_thread+0xaf5/0x12a0 [ 271.749104][ T4293] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 271.755069][ T4293] kthread+0x29d/0x330 [ 271.759177][ T4293] ? worker_clr_flags+0x1a0/0x1a0 [ 271.764245][ T4293] ? kthread_blkcg+0xd0/0xd0 [ 271.768880][ T4293] ret_from_fork+0x1f/0x30 [ 271.773404][ T4293] [ 271.818483][ T4293] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 271.833139][ T4293] Bluetooth: hci3: failed to register connection device [ 272.568965][ T6075] tipc: Started in network mode [ 272.580647][ T6075] tipc: Node identity 4675fc2c333f, cluster identity 4711 [ 272.732286][ T6075] tipc: Enabled bearer , priority 0 [ 272.807842][ T6078] device syzkaller0 entered promiscuous mode [ 273.181070][ T6078] tipc: Resetting bearer [ 273.241507][ T6074] tipc: Resetting bearer [ 273.391663][ T6074] tipc: Disabling bearer [ 277.563322][ T6129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.367'. [ 277.797916][ T6133] tipc: Enabled bearer , priority 0 [ 277.829254][ T6133] device syzkaller0 entered promiscuous mode [ 277.912200][ T26] audit: type=1326 audit(1790664364.262:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.3.376" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadd379e159 code=0x0 [ 277.953498][ T6133] tipc: Resetting bearer [ 278.017728][ T6132] tipc: Resetting bearer [ 278.113577][ T6132] tipc: Disabling bearer [ 278.186276][ T6141] syz.0.377 uses obsolete (PF_INET,SOCK_PACKET) [ 281.426913][ T4293] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 281.434428][ T4291] Bluetooth: hci5: command 0x1003 tx timeout [ 281.446244][ T5675] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 281.712238][ T5675] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 281.750310][ T5675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.975427][ T5675] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 282.039435][ T5675] usb 1-1: USB disconnect, device number 5 [ 283.094692][ T6164] tipc: Enabled bearer , priority 0 [ 283.103480][ T6164] device syzkaller0 entered promiscuous mode [ 283.250005][ T6164] tipc: Resetting bearer [ 283.334930][ T6163] tipc: Resetting bearer [ 284.369801][ T6163] tipc: Disabling bearer [ 284.410402][ T5669] tipc: Node number set to 2399609436 [ 286.536349][ T6196] tipc: Started in network mode [ 286.560724][ T6196] tipc: Node identity 6a2df204f22c, cluster identity 4711 [ 286.568042][ T6196] tipc: Enabled bearer , priority 0 [ 288.078788][ T5669] tipc: Node number set to 2550264324 [ 288.093355][ T6207] device syzkaller0 entered promiscuous mode [ 288.631069][ T6196] tipc: Resetting bearer [ 288.772256][ T6210] loop0: detected capacity change from 0 to 512 [ 288.860287][ T6194] tipc: Resetting bearer [ 288.935279][ T6194] tipc: Disabling bearer [ 289.020153][ T5669] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 289.056575][ T6210] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 289.097110][ T6210] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.192020][ T6231] sg_write: data in/out 132/14 bytes for SCSI command 0x0-- guessing data in; [ 289.192020][ T6231] program syz.2.393 not setting count and/or reply_len properly [ 289.222990][ T5669] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 289.259102][ T5669] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.531210][ T5669] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 289.579262][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 289.794314][ T5669] usb 7-1: USB disconnect, device number 2 [ 294.244785][ T4293] Bluetooth: hci0: hcon ffff888074458000 sent 3 < count 1025 [ 294.254272][ T4293] Bluetooth: hci0: link tx timeout [ 294.951558][ T6281] device syzkaller0 entered promiscuous mode [ 295.262595][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.409'. [ 299.747734][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 300.174361][ T5669] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 300.393347][ T5669] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 300.429091][ T5669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.478368][ T5669] usb 3-1: Product: syz [ 300.498241][ T5669] usb 3-1: Manufacturer: syz [ 300.509529][ T5669] usb 3-1: SerialNumber: syz [ 300.653357][ T6317] loop5: detected capacity change from 0 to 32768 [ 300.714620][ T6317] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.414 (6317) [ 300.939393][ T4321] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 300.965507][ T5669] usb 3-1: USB disconnect, device number 3 [ 301.369262][ T4321] usb 4-1: Using ep0 maxpacket: 8 [ 301.378282][ T4321] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 301.418857][ T4321] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 301.440817][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.458974][ T4321] usb 4-1: Product: syz [ 301.469218][ T4321] usb 4-1: Manufacturer: syz [ 301.478293][ T4321] usb 4-1: SerialNumber: syz [ 301.505535][ T4321] usb 4-1: config 0 descriptor?? [ 301.762254][ T6342] udevd[6342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.067137][ T4322] usb 4-1: USB disconnect, device number 4 [ 302.946293][ T6359] loop0: detected capacity change from 0 to 4096 [ 302.956087][ T6359] ntfs3: Unknown parameter '0x0000000000000000' [ 305.761443][ T6382] loop5: detected capacity change from 0 to 512 [ 305.768687][ T6382] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.904503][ T6382] ext4: Unknown parameter 'fsname' [ 308.157589][ T6402] loop0: detected capacity change from 0 to 4096 [ 308.370325][ T6402] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 311.286052][ T4277] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 311.501893][ T6428] gadgetfs: bound to dummy_udc driver [ 311.645929][ T6430] device syzkaller0 entered promiscuous mode [ 311.778917][ T4336] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 311.838947][ C1] gadgetfs: connected [ 311.844931][ T4336] gadgetfs: disconnected [ 312.029107][ C1] gadgetfs: connected [ 312.035501][ T4336] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 312.048650][ T4336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.100062][ C1] gadgetfs: configuration #1 [ 312.122063][ T4336] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input7 [ 312.141163][ T6430] tc action pedit 'at' offset 5 out of bounds [ 312.530937][ T6427] gadgetfs: suspended from state 3 [ 312.551924][ T126] usb 1-1: USB disconnect, device number 6 [ 312.556131][ T6442] device syzkaller0 entered promiscuous mode [ 312.559715][ T6427] gadgetfs: disconnected [ 314.649243][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 316.989178][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.995879][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.083900][ T6477] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 317.099420][ T6478] FAULT_INJECTION: forcing a failure. [ 317.099420][ T6478] name failslab, interval 1, probability 0, space 0, times 0 [ 317.112209][ T6478] CPU: 1 PID: 6478 Comm: syz.2.445 Not tainted syzkaller #0 [ 317.119546][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 317.129654][ T6478] Call Trace: [ 317.132969][ T6478] [ 317.135940][ T6478] dump_stack_lvl+0x188/0x24e [ 317.140677][ T6478] ? show_regs_print_info+0x12/0x12 [ 317.145951][ T6478] ? load_image+0x410/0x410 [ 317.150503][ T6478] ? __might_sleep+0xd0/0xd0 [ 317.155156][ T6478] ? __lock_acquire+0x7c40/0x7c40 [ 317.160236][ T6478] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 317.166271][ T6478] should_fail_ex+0x390/0x4c0 [ 317.171006][ T6478] should_failslab+0x5/0x20 [ 317.175558][ T6478] slab_pre_alloc_hook+0x59/0x300 [ 317.180634][ T6478] ? sk_prot_alloc+0xe7/0x210 [ 317.185366][ T6478] __kmem_cache_alloc_node+0x4f/0x270 [ 317.190785][ T6478] ? sk_prot_alloc+0xe7/0x210 [ 317.195513][ T6478] __kmalloc+0xa3/0x240 [ 317.199761][ T6478] sk_prot_alloc+0xe7/0x210 [ 317.204320][ T6478] ? sk_alloc+0x20/0x330 [ 317.208642][ T6478] sk_alloc+0x36/0x330 [ 317.212786][ T6478] __netlink_create+0x6b/0x2d0 [ 317.217597][ T6478] ? __lock_acquire+0x7c40/0x7c40 [ 317.222681][ T6478] netlink_create+0x3a7/0x510 [ 317.227403][ T6478] ? genl_rcv+0x40/0x40 [ 317.231605][ T6478] __sock_create+0x49a/0x940 [ 317.236255][ T6478] __sys_socket+0xc4/0x190 [ 317.240725][ T6478] __x64_sys_socket+0x76/0x80 [ 317.245455][ T6478] do_syscall_64+0x4c/0xa0 [ 317.249915][ T6478] ? clear_bhb_loop+0x60/0xb0 [ 317.254636][ T6478] ? clear_bhb_loop+0x60/0xb0 [ 317.259354][ T6478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.265310][ T6478] RIP: 0033:0x7fcb4619f9c7 [ 317.269790][ T6478] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.289448][ T6478] RSP: 002b:00007fcb443d3f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 317.297944][ T6478] RAX: ffffffffffffffda RBX: 00007fcb46426180 RCX: 00007fcb4619f9c7 [ 317.305954][ T6478] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 317.313961][ T6478] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 317.321976][ T6478] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 317.329986][ T6478] R13: 00007fcb46426218 R14: 00007fcb46426180 R15: 00007ffc2b2c8398 [ 317.338058][ T6478] [ 317.536745][ T6468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.696532][ T6468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.892939][ T6477] bond1: (slave bridge1): making interface the new active one [ 317.942708][ T6477] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 319.327797][ T26] audit: type=1804 audit(1790664405.675:119): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.450" name="bus" dev="ramfs" ino=42153 res=1 errno=0 [ 319.501330][ T26] audit: type=1804 audit(1790664405.735:120): pid=6500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.450" name="bus" dev="ramfs" ino=42153 res=1 errno=0 [ 320.086628][ T6503] loop2: detected capacity change from 0 to 512 [ 320.259083][ T6503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.379830][ T6509] FAULT_INJECTION: forcing a failure. [ 320.379830][ T6509] name failslab, interval 1, probability 0, space 0, times 0 [ 320.424835][ T6509] CPU: 0 PID: 6509 Comm: syz.0.453 Not tainted syzkaller #0 [ 320.432252][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 320.442384][ T6509] Call Trace: [ 320.445704][ T6509] [ 320.448687][ T6509] dump_stack_lvl+0x188/0x24e [ 320.453425][ T6509] ? show_regs_print_info+0x12/0x12 [ 320.458687][ T6509] ? load_image+0x410/0x410 [ 320.463251][ T6509] ? __lock_acquire+0x7c40/0x7c40 [ 320.468339][ T6509] should_fail_ex+0x390/0x4c0 [ 320.473083][ T6509] should_failslab+0x5/0x20 [ 320.477638][ T6509] slab_pre_alloc_hook+0x59/0x300 [ 320.482735][ T6509] ? security_sk_alloc+0x47/0x130 [ 320.487858][ T6509] __kmem_cache_alloc_node+0x4f/0x270 [ 320.493318][ T6509] ? security_sk_alloc+0x47/0x130 [ 320.498401][ T6509] __kmalloc+0xa3/0x240 [ 320.502623][ T6509] ? sk_prot_alloc+0xe7/0x210 [ 320.507365][ T6509] security_sk_alloc+0x47/0x130 [ 320.512279][ T6509] sk_prot_alloc+0x101/0x210 [ 320.516923][ T6509] ? sk_alloc+0x20/0x330 [ 320.521233][ T6509] sk_alloc+0x36/0x330 [ 320.525357][ T6509] ? bpf_ctx_init+0x154/0x190 [ 320.530101][ T6509] bpf_prog_test_run_skb+0x36d/0x18e0 [ 320.535565][ T6509] ? __fget_files+0x28/0x460 [ 320.540228][ T6509] ? __fget_files+0x3fc/0x460 [ 320.544981][ T6509] ? cpu_online+0xa0/0xa0 [ 320.549378][ T6509] bpf_prog_test_run+0x31c/0x390 [ 320.554381][ T6509] __sys_bpf+0x62b/0x780 [ 320.558685][ T6509] ? bpf_link_show_fdinfo+0x380/0x380 [ 320.564138][ T6509] ? lock_chain_count+0x20/0x20 [ 320.569063][ T6509] __x64_sys_bpf+0x78/0x90 [ 320.573543][ T6509] do_syscall_64+0x4c/0xa0 [ 320.578028][ T6509] ? clear_bhb_loop+0x60/0xb0 [ 320.582753][ T6509] ? clear_bhb_loop+0x60/0xb0 [ 320.587483][ T6509] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.593435][ T6509] RIP: 0033:0x7f7ff6f9e159 [ 320.597911][ T6509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.617605][ T6509] RSP: 002b:00007f7ff7ef9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.626087][ T6509] RAX: ffffffffffffffda RBX: 00007f7ff7225fa0 RCX: 00007f7ff6f9e159 [ 320.634109][ T6509] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 320.642127][ T6509] RBP: 00007f7ff703506b R08: 0000000000000000 R09: 0000000000000000 [ 320.650140][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.658171][ T6509] R13: 00007f7ff7226038 R14: 00007f7ff7225fa0 R15: 00007ffe50abee68 [ 320.666213][ T6509] [ 320.694635][ T6503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 320.865565][ T6503] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.896514][ T6515] loop6: detected capacity change from 0 to 1024 [ 320.918624][ T6515] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.012749][ T6519] device syzkaller0 entered promiscuous mode [ 322.905559][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 323.546529][ T6536] process 'syz.0.458' launched './file1' with NULL argv: empty string added [ 324.757744][ T6538] loop2: detected capacity change from 0 to 32768 [ 325.799780][ T6547] capability: warning: `syz.2.457' uses deprecated v2 capabilities in a way that may be insecure [ 326.376005][ T6549] binder_alloc: 6543: pid 6543 spamming oneway? 2 buffers allocated for a total size of 5120 [ 326.474906][ T6557] binder_alloc: 6543: pid 6543 spamming oneway? 3 buffers allocated for a total size of 5128 [ 326.600643][ T6559] loop0: detected capacity change from 0 to 128 [ 328.368806][ T6581] loop6: detected capacity change from 0 to 128 [ 328.869904][ T4285] Bluetooth: Wrong link type (-22) [ 328.876280][ T4285] Bluetooth: hci0: link tx timeout [ 329.522451][ T6589] loop5: detected capacity change from 0 to 32768 [ 329.581186][ T6589] read_mapping_page failed! [ 329.586034][ T6589] ERROR: (device loop5): txCommit: [ 329.586034][ T6589] [ 330.121368][ T6585] affs: No valid root block on device nullb0 [ 330.800711][ T6594] loop0: detected capacity change from 0 to 128 [ 331.124844][ T6594] FAT-fs (loop0): Directory bread(block 32) failed [ 331.197913][ T6594] FAT-fs (loop0): Directory bread(block 33) failed [ 331.204598][ T6594] FAT-fs (loop0): Directory bread(block 34) failed [ 331.777765][ T6594] FAT-fs (loop0): Directory bread(block 35) failed [ 331.784479][ T6594] FAT-fs (loop0): Directory bread(block 36) failed [ 331.937715][ T6594] FAT-fs (loop0): Directory bread(block 37) failed [ 331.944823][ T6594] FAT-fs (loop0): Directory bread(block 38) failed [ 332.005242][ T6594] FAT-fs (loop0): Directory bread(block 39) failed [ 332.061991][ T6594] FAT-fs (loop0): Directory bread(block 40) failed [ 332.101864][ T6594] FAT-fs (loop0): Directory bread(block 41) failed [ 332.563651][ T6609] vivid-000: disconnect [ 332.571934][ T6609] vivid-000: reconnect [ 333.360519][ T6594] netlink: 20 bytes leftover after parsing attributes in process `syz.0.478'. [ 334.763383][ T6594] device veth0_to_bond entered promiscuous mode [ 334.966426][ T6594] syz.0.478 (6594) used greatest stack depth: 19152 bytes left [ 336.175356][ T6633] loop0: detected capacity change from 0 to 128 [ 337.331933][ T6646] device syzkaller0 entered promiscuous mode [ 337.721043][ T4277] ffs_data_put(): freeing [ 339.374555][ T6666] loop6: detected capacity change from 0 to 1024 [ 340.191938][ T6666] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 340.539906][ T6688] loop2: detected capacity change from 0 to 128 [ 340.565292][ T5434] EXT4-fs (loop6): unmounting filesystem. [ 341.086788][ T6695] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 343.794739][ T6706] ip_tables: iptables: counters copy to user failed while replacing table [ 344.671792][ T6712] loop3: detected capacity change from 0 to 128 [ 345.266083][ T6712] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.431462][ T6738] loop6: detected capacity change from 0 to 128 [ 349.635512][ T6738] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 349.679595][ T6738] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 350.637536][ T5434] EXT4-fs (loop6): unmounting filesystem. [ 350.836987][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 350.876745][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 350.887019][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 350.895222][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 350.907085][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 350.914439][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.950112][ T6755] chnl_net:caif_netlink_parms(): no params data found [ 352.231736][ T6783] usb usb7: check_ctrlrecip: process 6783 (syz.3.497) requesting ep 01 but needs 81 [ 352.241326][ T6783] usb usb7: usbfs: process 6783 (syz.3.497) did not claim interface 0 before use [ 352.978352][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 353.707020][ T6788] loop3: detected capacity change from 0 to 32768 [ 354.744759][ T6755] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.756304][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.771937][ T6755] device bridge_slave_0 entered promiscuous mode [ 354.782260][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.790406][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.798771][ T6755] device bridge_slave_1 entered promiscuous mode [ 354.825417][ T6755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.857881][ T6755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.889785][ T6800] device syzkaller0 entered promiscuous mode [ 354.938872][ T6755] team0: Port device team_slave_0 added [ 354.964276][ T6755] team0: Port device team_slave_1 added [ 354.992361][ T6800] tc action pedit 'at' offset 5 out of bounds [ 355.056246][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 355.068894][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.102299][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.128864][ T6755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.261570][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.273165][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.382173][ T6755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.553371][ T6755] device hsr_slave_0 entered promiscuous mode [ 355.580590][ T6755] device hsr_slave_1 entered promiscuous mode [ 355.608000][ T6755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.615659][ T6755] Cannot create hsr debugfs directory [ 356.239770][ T6821] netlink: 'syz.3.506': attribute type 4 has an invalid length. [ 356.435479][ T6755] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 356.509572][ T6755] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 356.547534][ T6755] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 356.607493][ T6827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 356.635781][ T6827] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 356.665195][ T6755] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 356.854430][ T6825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.137125][ T4293] Bluetooth: hci5: command 0x040f tx timeout [ 357.705631][ T6755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.809371][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.882431][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.913166][ T6755] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.083338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.165543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.276496][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.283746][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.592706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 358.768640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 358.945134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.083198][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.090449][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.130561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.181435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.217796][ T4293] Bluetooth: hci5: command 0x0419 tx timeout [ 359.250154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.267300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.277719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.288264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.314514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.323705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.340185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.352785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.364207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.380096][ T6755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 360.096106][ T4293] Bluetooth: hci0: command 0x0406 tx timeout [ 361.437111][ T6872] device syzkaller0 entered promiscuous mode [ 361.597014][ T6872] tc action pedit 'at' offset 5 out of bounds [ 361.663289][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 362.931201][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 362.982573][ T4719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.286109][ T6755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.140409][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 364.158025][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 364.199226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 364.214799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 364.227503][ T6755] device veth0_vlan entered promiscuous mode [ 364.242886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 364.263304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 364.287292][ T6755] device veth1_vlan entered promiscuous mode [ 364.323351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 364.333459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 364.343616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 364.353012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 364.371262][ T6755] device veth0_macvtap entered promiscuous mode [ 364.390554][ T6755] device veth1_macvtap entered promiscuous mode [ 364.416224][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.428164][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.439376][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.450188][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.475790][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.492061][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.504899][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.515994][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.526111][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.536921][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.548893][ T6755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.557654][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.567254][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 364.586825][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 364.603811][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 364.616553][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.628833][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.639547][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.650484][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.660944][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.671908][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.682109][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.693645][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.710633][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.722580][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.740990][ T6755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.753423][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.770381][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.786882][ T6755] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.798158][ T6755] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.808178][ T6755] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.818842][ T6755] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.924307][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.951025][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.981902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 365.005602][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.013531][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.029749][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 372.666138][ T6977] Illegal XDP return value 4294967294 on prog (id 25) dev N/A, expect packet loss! [ 374.317897][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.533'. [ 375.656113][ T6997] zero sized request [ 377.896548][ T7019] syz.2.546 (7019): attempted to duplicate a private mapping with mremap. This is not supported. [ 378.420033][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.426530][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.599148][ T7023] loop2: detected capacity change from 0 to 128 [ 378.708171][ T7023] FAT-fs (loop2): Directory bread(block 32) failed [ 378.774942][ T7023] FAT-fs (loop2): Directory bread(block 33) failed [ 378.781672][ T7023] FAT-fs (loop2): Directory bread(block 34) failed [ 378.899405][ T7023] FAT-fs (loop2): Directory bread(block 35) failed [ 378.951809][ T7023] FAT-fs (loop2): Directory bread(block 36) failed [ 378.995064][ T7023] FAT-fs (loop2): Directory bread(block 37) failed [ 379.001758][ T7023] FAT-fs (loop2): Directory bread(block 38) failed [ 379.081890][ T7023] FAT-fs (loop2): Directory bread(block 39) failed [ 379.125482][ T7023] FAT-fs (loop2): Directory bread(block 40) failed [ 379.132089][ T7023] FAT-fs (loop2): Directory bread(block 41) failed [ 379.571841][ T26] audit: type=1326 audit(1790664465.928:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.0.547" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ff6f9e159 code=0x0 [ 379.736821][ T7023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'. [ 381.407868][ T7056] device syzkaller0 entered promiscuous mode [ 382.873751][ T4293] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 382.903441][ T7059] loop6: detected capacity change from 0 to 1024 [ 383.020357][ T7059] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 383.048044][ T7059] EXT4-fs (loop6): barriers disabled [ 383.053428][ T7059] JBD2: no valid journal superblock found [ 383.087132][ T7059] EXT4-fs (loop6): error loading journal [ 384.083780][ T7072] loop3: detected capacity change from 0 to 512 [ 384.384164][ T7072] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 384.730438][ T7072] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 384.879634][ T7072] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.558: bad orphan inode 131083 [ 384.955953][ T7085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.994796][ T7072] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 385.205783][ T7092] device syzkaller0 entered promiscuous mode [ 385.704502][ T7078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.030271][ T7078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.229613][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 391.299025][ T7137] netlink: 104 bytes leftover after parsing attributes in process `syz.2.570'. [ 393.443995][ T4336] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 393.642524][ T7155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.214326][ T7155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.388911][ T4336] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 394.403932][ T4336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.412146][ T4336] usb 3-1: Product: syz [ 394.431125][ T4336] usb 3-1: Manufacturer: syz [ 394.436297][ T4336] usb 3-1: SerialNumber: syz [ 394.508979][ T4336] usb 3-1: config 0 descriptor?? [ 394.760225][ T4336] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 396.810336][ T4336] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 397.118698][ T4336] usb 3-1: USB disconnect, device number 4 [ 399.013815][ T7187] loop3: detected capacity change from 0 to 512 [ 399.041827][ T7187] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 399.063824][ T7187] System zones: 1-12 [ 399.106014][ T7187] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.573: missing EA_INODE flag [ 399.184922][ T7187] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.573: error while reading EA inode 12 err=-117 [ 400.084546][ T7187] EXT4-fs (loop3): 1 orphan inode deleted [ 400.103910][ T7187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 400.450871][ T7199] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 400.924924][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 401.518004][ T7203] binder_alloc: 7202: pid 7202 spamming oneway? 2 buffers allocated for a total size of 5120 [ 402.263072][ T7203] binder_alloc: 7202: pid 7202 spamming oneway? 3 buffers allocated for a total size of 5128 [ 402.291388][ T7209] loop2: detected capacity change from 0 to 128 [ 402.885357][ T7227] x86/PAT: syz.6.583:7227 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 403.247516][ T7227] x86/PAT: syz.6.583:7227 freeing invalid memtype [mem 0xfe005000-0xfe005fff] [ 403.973537][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.983608][ T5173] jfs_flush_journal: synclist not empty [ 403.989800][ T5173] metapage: ffff88802ea312e8: 00001000 00000000 00003b90 00000000 [ 404.008393][ T5173] metapage: ffff88802ea312f8: 7b0f1228 ffff8880 7b0f1228 ffff8880 [ 404.023439][ T5173] metapage: ffff88802ea31308: 00000004 00000000 00000000 00000000 [ 404.042797][ T5173] metapage: ffff88802ea31318: 76184000 ffff8880 0000002c 00000000 [ 404.062061][ T7238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.087081][ T5173] metapage: ffff88802ea31328: 00000000 dead4ead ffffffff 00000000 [ 404.105673][ T5173] metapage: ffff88802ea31338: ffffffff ffffffff 96dba3e0 ffffffff [ 404.122992][ T5173] metapage: ffff88802ea31348: 905376c0 ffffffff 00000000 00000000 [ 404.235563][ T7234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.253569][ T5173] metapage: ffff88802ea31358: 8ac61fe0 ffffffff 00000200 00000000 [ 405.093409][ T5173] metapage: ffff88802ea31368: 2ea31368 ffff8880 2ea31368 ffff8880 [ 405.132861][ T5173] metapage: ffff88802ea31378: 01d86100 ffffea00 542a4000 ffff8880 [ 405.153110][ T5173] metapage: ffff88802ea31388: 00001000 00003e14 00000001 00000000 [ 405.183562][ T5173] metapage: ffff88802ea31398: 7b0f1000 ffff8880 [ 405.189876][ T5173] page: ffffea0001d86100: 00fff50000002056 ffffea0001f21dc8 [ 405.229756][ T5173] page: ffffea0001d86110: ffffea0000a52688 ffff88804d9d0f98 [ 405.239918][ T5173] page: ffffea0001d86120: 000000000000002c ffff88802ea312e8 [ 405.294342][ T5173] page: ffffea0001d86130: 00000002ffffffff ffff8880745f8000 [ 409.515190][ T7271] binder_alloc: 7270: pid 7270 spamming oneway? 2 buffers allocated for a total size of 5120 [ 411.102348][ T7275] tc action pedit offset must be on 32 bit boundaries [ 411.109923][ T7275] tc action pedit offset must be on 32 bit boundaries [ 411.116819][ T7275] tc action pedit offset must be on 32 bit boundaries [ 411.123685][ T7275] tc action pedit offset must be on 32 bit boundaries [ 411.130494][ T7275] tc action pedit offset must be on 32 bit boundaries [ 411.137390][ T7275] tc action pedit offset must be on 32 bit boundaries [ 411.144249][ T7275] tc action pedit offset must be on 32 bit boundaries [ 411.151045][ T7275] tc action pedit offset must be on 32 bit boundaries [ 411.157917][ T7275] tc action pedit offset must be on 32 bit boundaries [ 411.164739][ T7275] tc action pedit offset must be on 32 bit boundaries [ 411.171522][ T7275] 0: reclassify loop, rule prio 0, protocol 800 [ 411.196903][ T7271] binder_alloc: 7270: pid 7270 spamming oneway? 3 buffers allocated for a total size of 5128 [ 412.580430][ T26] audit: type=1400 audit(1790664498.930:122): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name=223A6F pid=7283 comm="syz.2.607" name=223A6F offset=66 [ 414.025269][ T7293] loop7: detected capacity change from 0 to 4096 [ 417.524465][ T7297] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 417.547395][ T7297] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 423.927568][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.939894][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.949134][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.959561][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.972639][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 423.981434][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.198126][ T6533] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.228311][ T7333] loop7: detected capacity change from 0 to 32768 [ 425.311386][ T26] audit: type=1800 audit(1790664511.661:123): pid=7365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.624" name="syzkaller0" dev="sda1" ino=2055 res=0 errno=0 [ 426.823440][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 426.986673][ T7333] XFS (loop7): Mounting V5 Filesystem [ 427.079407][ T7333] XFS (loop7): log mount failed [ 428.638972][ T6533] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.892173][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 429.596776][ T6533] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.403181][ T7401] sctp: [Deprecated]: syz.3.630 (pid 7401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.403181][ T7401] Use struct sctp_sack_info instead [ 430.990418][ T6533] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.058408][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 431.183738][ T7405] device syzkaller0 entered promiscuous mode [ 433.182057][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 433.546087][ T7353] chnl_net:caif_netlink_parms(): no params data found [ 434.111775][ T6533] tipc: Left network mode [ 436.790715][ T7353] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.508849][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.517523][ T7353] device bridge_slave_0 entered promiscuous mode [ 437.543542][ T7353] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.583987][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.628908][ T7353] device bridge_slave_1 entered promiscuous mode [ 439.801190][ T7353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.855356][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.861774][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.085737][ T7353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.289223][ T7353] team0: Port device team_slave_0 added [ 442.419892][ T7353] team0: Port device team_slave_1 added [ 443.262353][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.300363][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.369135][ T7353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.025262][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.039679][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.080445][ T7353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.518920][ T7486] loop0: detected capacity change from 0 to 4096 [ 446.387735][ T7353] device hsr_slave_0 entered promiscuous mode [ 446.421406][ T7353] device hsr_slave_1 entered promiscuous mode [ 446.449329][ T7353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.492862][ T7353] Cannot create hsr debugfs directory [ 447.759078][ T6533] device hsr_slave_0 left promiscuous mode [ 447.779606][ T6533] device hsr_slave_1 left promiscuous mode [ 447.788378][ T7502] loop0: detected capacity change from 0 to 256 [ 448.622969][ T7502] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 448.641344][ T6533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.648966][ T6533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.976821][ T6533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.991352][ T6533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.453459][ T6533] device bridge_slave_1 left promiscuous mode [ 449.459776][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.625338][ T6533] device bridge_slave_0 left promiscuous mode [ 449.641493][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.280201][ T6533] device veth1_macvtap left promiscuous mode [ 450.381374][ T6533] device veth0_macvtap left promiscuous mode [ 450.477886][ T6533] device veth1_vlan left promiscuous mode [ 450.569290][ T6533] device veth0_vlan left promiscuous mode [ 452.200267][ T7564] UBIFS error (pid: 7564): cannot open "ubi:0", error -19 [ 453.634405][ T6533] team0 (unregistering): Port device team_slave_1 removed [ 453.709861][ T6533] team0 (unregistering): Port device team_slave_0 removed [ 453.826648][ T6533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.892976][ T6533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.295593][ T6533] bond0 (unregistering): Released all slaves [ 454.463641][ T7528] tipc: Enabled bearer , priority 0 [ 454.480520][ T7539] syzkaller0: mtu less than device minimum [ 456.947981][ T7580] tipc: Enabled bearer , priority 0 [ 456.995476][ T7570] tipc: Resetting bearer [ 457.044528][ T7572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 457.101143][ T7569] tipc: Disabling bearer [ 457.163496][ T7353] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 457.267081][ T7353] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 457.431422][ T7353] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 457.466170][ T7353] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 457.867685][ T7353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.771992][ T7353] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.992757][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.057268][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.111735][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.167586][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.538068][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.545338][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.037945][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.195615][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.325791][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.334523][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.853498][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.939079][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.104620][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 464.153329][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 464.242724][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.289299][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.394590][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.545299][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.733830][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.327820][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 465.374531][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 465.383351][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.394852][ T7353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 465.417801][ T7614] device syzkaller0 entered promiscuous mode [ 467.084964][ T7647] loop2: detected capacity change from 0 to 4096 [ 471.308874][ T7668] netlink: 84 bytes leftover after parsing attributes in process `syz.2.673'. [ 472.311254][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 472.318864][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.891406][ T7353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.013046][ T7676] loop3: detected capacity change from 0 to 8 [ 477.810253][ T4291] Bluetooth: hci5: command 0x0406 tx timeout [ 479.736911][ T7712] loop3: detected capacity change from 0 to 128 [ 480.018537][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.052143][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.919526][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.982266][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.045557][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.097616][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.538673][ T7732] Bluetooth: MGMT ver 1.22 [ 481.611030][ T5173] jfs_flush_journal: synclist not empty [ 481.618399][ T5173] metapage: ffff88802ea312e8: 00001000 00000000 00003b90 00000000 [ 481.636051][ T5173] metapage: ffff88802ea312f8: 7b0f1228 ffff8880 7b0f1228 ffff8880 [ 481.659302][ T5173] metapage: ffff88802ea31308: 00000004 00000000 00000000 00000000 [ 481.684624][ T5173] metapage: ffff88802ea31318: 76184000 ffff8880 0000002c 00000000 [ 481.756959][ T5173] metapage: ffff88802ea31328: 00000000 dead4ead ffffffff 00000000 [ 481.986074][ T5173] metapage: ffff88802ea31338: ffffffff ffffffff 96dba3e0 ffffffff [ 482.157120][ T5173] metapage: ffff88802ea31348: 905376c0 ffffffff 00000000 00000000 [ 482.269303][ T5173] metapage: ffff88802ea31358: 8ac61fe0 ffffffff 00000200 00000000 [ 482.277680][ T5173] metapage: ffff88802ea31368: 2ea31368 ffff8880 2ea31368 ffff8880 [ 482.285964][ T5173] metapage: ffff88802ea31378: 01d86100 ffffea00 542a4000 ffff8880 [ 482.295146][ T5173] metapage: ffff88802ea31388: 00001000 00003e14 00000001 00000000 [ 482.305371][ T5173] metapage: ffff88802ea31398: 7b0f1000 ffff8880 [ 482.313793][ T5173] page: ffffea0001d86100: 00fff50000002056 ffffea0001f5b708 [ 482.321645][ T5173] page: ffffea0001d86110: ffffea0000a52688 ffff88804d9d0f98 [ 482.329465][ T5173] page: ffffea0001d86120: 000000000000002c ffff88802ea312e8 [ 482.336975][ T5173] page: ffffea0001d86130: 00000002ffffffff ffff8880745f8000 [ 483.781113][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 483.792430][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 483.801153][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 483.810602][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 483.819571][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 483.827178][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 483.923641][ T7760] Bluetooth: MGMT ver 1.22 [ 484.150878][ T7759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.692'. [ 485.140300][ T7783] device syzkaller0 entered promiscuous mode [ 485.157657][ T7788] tipc: Enabled bearer , priority 0 [ 485.209743][ T7795] tipc: Resetting bearer [ 485.936040][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 487.709624][ T7777] tipc: Resetting bearer [ 487.867313][ T7777] tipc: Disabling bearer [ 488.010563][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 488.286215][ T7802] loop2: detected capacity change from 0 to 4096 [ 488.359712][ T7806] device syzkaller0 entered promiscuous mode [ 488.359970][ T7802] ntfs3: Bad value for 'fmask' [ 490.402143][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 490.763848][ T7752] chnl_net:caif_netlink_parms(): no params data found [ 491.607900][ T7823] loop3: detected capacity change from 0 to 1024 [ 491.666780][ T7823] hfsplus: unable to parse mount options [ 492.488656][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 493.889863][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.704'. [ 493.899229][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 494.350028][ T7851] fuse: Bad value for 'fd' [ 496.275586][ T7851] 9pnet_virtio: no channels available for device syz [ 496.473538][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.521758][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.576488][ T7752] device bridge_slave_0 entered promiscuous mode [ 496.872167][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.892004][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.992401][ T7752] device bridge_slave_1 entered promiscuous mode [ 499.493272][ T7752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.600396][ T7752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.843673][ T7752] team0: Port device team_slave_0 added [ 499.863155][ T7752] team0: Port device team_slave_1 added [ 500.107993][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.117383][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.210071][ T7752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.224362][ T7752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.231412][ T7752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.294176][ T7752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.016380][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.023039][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.339597][ T47] device hsr_slave_0 left promiscuous mode [ 502.499707][ T47] device hsr_slave_1 left promiscuous mode [ 502.606032][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.794934][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.868858][ T47] device bridge_slave_1 left promiscuous mode [ 502.875169][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.963906][ T47] device bridge_slave_0 left promiscuous mode [ 503.021216][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.112823][ T7932] cifs: Unknown parameter 'usrquota' [ 508.922208][ T7957] loop0: detected capacity change from 0 to 16 [ 509.204253][ T7957] erofs: (device loop0): mounted with root inode @ nid 36. [ 509.253379][ T7956] syz.0.722: attempt to access beyond end of device [ 509.253379][ T7956] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 509.734645][ T7962] loop2: detected capacity change from 0 to 256 [ 509.864026][ T7962] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 509.983868][ T7961] syz.2.726: attempt to access beyond end of device [ 509.983868][ T7961] loop2: rw=0, sector=184, nr_sectors = 3175 limit=256 [ 510.099283][ T7961] syz.2.726: attempt to access beyond end of device [ 510.099283][ T7961] loop2: rw=0, sector=3359, nr_sectors = 4448 limit=256 [ 510.272676][ T7961] syz.2.726: attempt to access beyond end of device [ 510.272676][ T7961] loop2: rw=0, sector=7807, nr_sectors = 6240 limit=256 [ 510.507715][ T7961] syz.2.726: attempt to access beyond end of device [ 510.507715][ T7961] loop2: rw=0, sector=14047, nr_sectors = 9464 limit=256 [ 510.543354][ T7961] syz.2.726: attempt to access beyond end of device [ 510.543354][ T7961] loop2: rw=0, sector=23511, nr_sectors = 5144 limit=256 [ 510.564880][ T7961] syz.2.726: attempt to access beyond end of device [ 510.564880][ T7961] loop2: rw=0, sector=28655, nr_sectors = 2048 limit=256 [ 510.585268][ T7961] syz.2.726: attempt to access beyond end of device [ 510.585268][ T7961] loop2: rw=0, sector=30703, nr_sectors = 2048 limit=256 [ 510.587796][ T26] audit: type=1800 audit(1790664596.285:124): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.726" name="file1" dev="loop2" ino=1048634 res=0 errno=0 [ 510.599192][ T7961] syz.2.726: attempt to access beyond end of device [ 510.599192][ T7961] loop2: rw=0, sector=32751, nr_sectors = 192 limit=256 [ 512.525180][ T47] team0 (unregistering): Port device team_slave_1 removed [ 512.613845][ T7966] loop0: detected capacity change from 0 to 2048 [ 514.435499][ T47] team0 (unregistering): Port device team_slave_0 removed [ 514.701831][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.945824][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.008074][ T8011] loop2: detected capacity change from 0 to 4096 [ 519.124471][ T47] bond0 (unregistering): Released all slaves [ 522.574446][ T7752] device hsr_slave_0 entered promiscuous mode [ 522.584847][ T7752] device hsr_slave_1 entered promiscuous mode [ 522.614094][ T7752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.628898][ T7752] Cannot create hsr debugfs directory [ 522.642069][ T7979] device syzkaller0 entered promiscuous mode [ 522.842209][ T8018] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input10 [ 523.076518][ T8027] loop7: detected capacity change from 0 to 8 [ 523.100237][ T8027] SQUASHFS error: Failed to read block 0x4de: -5 [ 523.109421][ T8027] SQUASHFS error: Failed to read block 0x4de: -5 [ 523.116303][ T26] audit: type=1800 audit(1790664609.476:125): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.739" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 525.068446][ T8037] netlink: 84 bytes leftover after parsing attributes in process `syz.0.740'. [ 526.031914][ T8040] loop0: detected capacity change from 0 to 512 [ 526.148212][ T8045] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.626737][ T8040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 527.702186][ T8052] random: crng reseeded on system resumption [ 527.776974][ T8053] loop7: detected capacity change from 0 to 128 [ 529.064358][ T7752] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 529.503490][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 529.680482][ T7752] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 531.424993][ T47] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.457723][ T7752] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 534.356345][ T47] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.778689][ T7752] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 535.078300][ T47] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.303804][ T47] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.512733][ T7752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.417207][ T7752] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.881738][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.178427][ T8111] Option 'dnserror' to dns_resolver key: bad/missing value [ 540.376121][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.384336][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.393337][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.402656][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.409865][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.436950][ T47] tipc: Left network mode [ 540.470020][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 540.521156][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 540.576147][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.639119][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.646340][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.722026][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 540.762655][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 540.807897][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 540.841838][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 540.889147][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 541.153489][ T8126] loop0: detected capacity change from 0 to 512 [ 541.208918][ T8126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 541.232530][ T8118] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 541.289722][ T8126] System zones: 1-12 [ 541.336089][ T8126] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.757: missing EA_INODE flag [ 541.381956][ T8126] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.757: error while reading EA inode 12 err=-117 [ 541.440083][ T8126] EXT4-fs (loop0): 1 orphan inode deleted [ 541.480844][ T8126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 541.827163][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.838175][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.895857][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.396089][ T4293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.403883][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 542.411863][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.190039][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 545.704104][ T4293] Bluetooth: hci2: command 0x0409 tx timeout [ 545.832588][ T8155] loop3: detected capacity change from 0 to 512 [ 546.105242][ T8160] loop0: detected capacity change from 0 to 1024 [ 546.170458][ T8160] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 546.251974][ T8155] EXT4-fs error (device loop3): ext4_quota_enable:7049: inode #4: comm syz.3.761: casefold flag without casefold feature [ 546.309551][ T8160] EXT4-fs (loop0): barriers disabled [ 546.314942][ T8160] JBD2: no valid journal superblock found [ 546.345711][ T8155] EXT4-fs (loop3): Remounting filesystem read-only [ 546.352363][ T8155] EXT4-fs error (device loop3): ext4_quota_enable:7052: comm syz.3.761: Bad quota inode: 4, type: 1 [ 546.419689][ T8160] EXT4-fs (loop0): error loading journal [ 546.576398][ T8155] EXT4-fs (loop3): Remounting filesystem read-only [ 546.582993][ T8155] EXT4-fs warning (device loop3): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 547.229438][ T8155] EXT4-fs (loop3): mount failed [ 547.783241][ T4293] Bluetooth: hci2: command 0x041b tx timeout [ 548.429671][ T4293] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 548.442847][ T4293] Bluetooth: hci1: Injecting HCI hardware error event [ 548.511981][ T4293] Bluetooth: hci1: hardware error 0x00 [ 548.887833][ T8132] chnl_net:caif_netlink_parms(): no params data found [ 549.608456][ T8198] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 549.942050][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 550.869062][ T4293] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 551.160572][ T8132] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.188917][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.216335][ T8132] device bridge_slave_0 entered promiscuous mode [ 552.156944][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 555.595971][ T8132] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.603144][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.735958][ T8132] device bridge_slave_1 entered promiscuous mode [ 557.151684][ T8132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.558644][ T8296] loop2: detected capacity change from 0 to 8192 [ 559.111777][ T8296] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 559.200334][ T8296] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 559.228845][ T8132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.236921][ T8296] REISERFS (device loop2): using ordered data mode [ 559.244486][ T8296] reiserfs: using flush barriers [ 559.349871][ T8296] REISERFS warning (device loop2): sh-462 check_advise_trans_params: bad transaction max size (1024). FSCK? [ 559.381254][ T8132] team0: Port device team_slave_0 added [ 559.458188][ T8296] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 559.563491][ T47] device hsr_slave_0 left promiscuous mode [ 560.891161][ T8323] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 561.270018][ T47] device hsr_slave_1 left promiscuous mode [ 561.277234][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.305800][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.331418][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.372478][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.400441][ T47] device bridge_slave_1 left promiscuous mode [ 561.417222][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.958212][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.964630][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.013636][ T47] device bridge_slave_0 left promiscuous mode [ 563.046717][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.177936][ T47] device veth1_macvtap left promiscuous mode [ 563.182978][ T8327] loop3: detected capacity change from 0 to 2048 [ 563.184151][ T47] device veth0_macvtap left promiscuous mode [ 563.221479][ T47] device veth1_vlan left promiscuous mode [ 563.237641][ T8327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.273041][ T47] device veth0_vlan left promiscuous mode [ 565.817070][ T8342] loop0: detected capacity change from 0 to 32768 [ 565.997127][ T8342] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 567.226691][ T4277] ocfs2: Unmounting device (7,0) on (node local) [ 570.381724][ T47] team0 (unregistering): Port device team_slave_1 removed [ 570.443327][ T47] team0 (unregistering): Port device team_slave_0 removed [ 570.497368][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.559762][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.985866][ T47] bond0 (unregistering): Released all slaves [ 571.085322][ T8132] team0: Port device team_slave_1 added [ 571.098214][ T8331] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 571.315820][ T8132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.336309][ T8132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.336355][ T8132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.345922][ T8132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.345939][ T8132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.345966][ T8132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.546423][ T8132] device hsr_slave_0 entered promiscuous mode [ 571.547332][ T8132] device hsr_slave_1 entered promiscuous mode [ 572.004929][ T8365] netlink: 'syz.0.791': attribute type 10 has an invalid length. [ 572.072980][ T8365] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 577.105201][ T8424] device syzkaller0 entered promiscuous mode [ 578.982472][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.7.804'. [ 578.991590][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.804'. [ 585.581894][ T8491] loop7: detected capacity change from 0 to 1024 [ 585.629051][ T8491] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 589.325742][ T8132] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 589.468554][ T8132] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 589.494225][ T6755] EXT4-fs (loop7): unmounting filesystem. [ 589.603479][ T8132] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 589.776367][ T8509] loop0: detected capacity change from 0 to 2048 [ 589.824418][ T8509] UDF-fs: bad mount option "0xffffffffffffffff" or missing value [ 589.901309][ T8132] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 593.312837][ T47] device hsr_slave_0 left promiscuous mode [ 593.350675][ T47] device hsr_slave_1 left promiscuous mode [ 593.376262][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.419811][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.463960][ T47] device bridge_slave_1 left promiscuous mode [ 593.470283][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.549508][ T47] device bridge_slave_0 left promiscuous mode [ 593.560069][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.572239][ T8522] loop2: detected capacity change from 0 to 2048 [ 593.648077][ T8522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 595.089210][ T8528] loop2: detected capacity change from 0 to 512 [ 595.190086][ T8528] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.827: bg 0: block 7: invalid block bitmap [ 595.260554][ T8528] EXT4-fs (loop2): Remounting filesystem read-only [ 595.292897][ T8528] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 595.302152][ T8528] EXT4-fs (loop2): Remounting filesystem read-only [ 595.333280][ T8528] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2921: inode #11: comm syz.2.827: corrupted xattr block 95 [ 595.374039][ T8528] EXT4-fs (loop2): Remounting filesystem read-only [ 595.380655][ T8528] EXT4-fs warning (device loop2): ext4_evict_inode:301: xattr delete (err -117) [ 595.448043][ T8528] EXT4-fs (loop2): 1 orphan inode deleted [ 595.462986][ T8528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 595.983824][ T47] team0 (unregistering): Port device team_slave_1 removed [ 596.104522][ T8539] __vm_enough_memory: pid: 8539, comm: syz.2.827, no enough memory for the allocation [ 596.500973][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 596.991715][ T8546] loop7: detected capacity change from 0 to 8 [ 597.967385][ T47] team0 (unregistering): Port device team_slave_0 removed [ 598.891863][ T8551] misc userio: The device must be registered before sending interrupts [ 600.143367][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.369869][ T8557] ptp ptp0: only physical clock in use now [ 600.443345][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.725500][ T8560] ptp ptp0: new virtual clock ptp1 [ 600.751821][ T8560] ptp ptp0: new virtual clock ptp2 [ 600.827440][ T8560] ptp ptp0: new virtual clock ptp3 [ 600.949824][ T8560] ptp ptp0: new virtual clock ptp4 [ 601.022030][ T8560] ptp ptp0: new virtual clock ptp5 [ 601.034965][ T8560] ptp ptp0: guarantee physical clock free running [ 601.652900][ T47] bond0 (unregistering): Released all slaves [ 601.848049][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 601.860920][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.888817][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.896888][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.908980][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 601.923274][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 601.960015][ T8534] netlink: 128 bytes leftover after parsing attributes in process `syz.0.824'. [ 602.820521][ T8587] loop3: detected capacity change from 0 to 8192 [ 603.812372][ T8587] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 603.844669][ T8587] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 603.881382][ T8587] REISERFS (device loop3): using ordered data mode [ 603.888486][ T8587] reiserfs: using flush barriers [ 604.056682][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 604.730101][ T8587] REISERFS warning (device loop3): sh-462 check_advise_trans_params: bad transaction max size (1024). FSCK? [ 604.771954][ T8587] REISERFS warning (device loop3): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 604.896453][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 605.713521][ T8611] batman_adv: batadv0: Adding interface: netdevsim0 [ 605.720274][ T8611] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.746312][ T8611] batman_adv: batadv0: Interface activated: netdevsim0 [ 606.082011][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 606.344777][ T8622] WARNING! power/level is deprecated; use power/control instead [ 607.769876][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.815801][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.855821][ T8584] device bridge_slave_0 entered promiscuous mode [ 607.887515][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.056321][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.078869][ T8584] device bridge_slave_1 entered promiscuous mode [ 608.321983][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 610.750784][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 610.777382][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.928490][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.492753][ T8657] loop2: detected capacity change from 0 to 256 [ 613.660376][ T8584] team0: Port device team_slave_0 added [ 615.445916][ T8584] team0: Port device team_slave_1 added [ 615.488934][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.524036][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.641618][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.780870][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.801489][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.932514][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.182002][ T8584] device hsr_slave_0 entered promiscuous mode [ 616.231956][ T8584] device hsr_slave_1 entered promiscuous mode [ 616.238962][ T8584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.271396][ T8584] Cannot create hsr debugfs directory [ 616.910614][ T8695] ip_tables: iptables: counters copy to user failed while replacing table [ 618.097199][ T5671] libceph: connect (1)[c::]:6789 error -101 [ 619.321961][ T5671] libceph: mon0 (1)[c::]:6789 connect error [ 619.941657][ T5671] libceph: connect (1)[c::]:6789 error -101 [ 619.948035][ T8706] ceph: No mds server is up or the cluster is laggy [ 619.956459][ T5671] libceph: mon0 (1)[c::]:6789 connect error [ 620.224011][ T5671] libceph: connect (1)[c::]:6789 error -101 [ 620.230086][ T5671] libceph: mon0 (1)[c::]:6789 connect error [ 622.773948][ T8584] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 622.907750][ T8584] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 622.944287][ T8584] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 623.112370][ T8584] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 623.938634][ T47] device hsr_slave_0 left promiscuous mode [ 623.959855][ T47] device hsr_slave_1 left promiscuous mode [ 624.082889][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.118969][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.167286][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.175315][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.493891][ T47] device bridge_slave_1 left promiscuous mode [ 624.500211][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.538722][ T8742] loop2: detected capacity change from 0 to 256 [ 624.547510][ T47] device bridge_slave_0 left promiscuous mode [ 624.573878][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.876165][ T47] team0 (unregistering): Port device team_slave_1 removed [ 628.024811][ T47] team0 (unregistering): Port device team_slave_0 removed [ 629.636005][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.745489][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.174423][ T47] bond0 (unregistering): Released all slaves [ 630.246041][ T8783] loop3: detected capacity change from 0 to 2048 [ 630.289143][ T8783] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 633.914380][ T8806] loop2: detected capacity change from 0 to 1024 [ 634.046853][ T8809] syz.0.872: attempt to access beyond end of device [ 634.046853][ T8809] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 634.060670][ T8809] gfs2: error 10 reading superblock [ 634.109372][ T8806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 635.455575][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 637.099937][ T8584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.151917][ T8584] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.192032][ T8584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 637.220828][ T8584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.280483][ T39] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 637.307129][ T8832] loop0: detected capacity change from 0 to 2048 [ 637.314004][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 637.324769][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.389528][ T8832] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.411677][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 637.461447][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 637.493019][ T39] usb 8-1: unable to get BOS descriptor or descriptor too short [ 637.604945][ T39] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x82 is Bulk; changing to Interrupt [ 637.718938][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.726260][ T8275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.104246][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 638.113216][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 638.122187][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.129312][ T8275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.561460][ T8841] CacheFiles: Failed to register: -95 [ 638.744933][ T39] usb 8-1: config 1 interface 0 altsetting 8 endpoint 0x3 is Bulk; changing to Interrupt [ 638.831475][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 638.875662][ T39] usb 8-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.909775][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 638.946493][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 638.955739][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 638.964610][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 638.987854][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.001337][ T39] usb 8-1: config 1 interface 0 has no altsetting 0 [ 639.023839][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 639.053332][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.065824][ T39] usb 8-1: string descriptor 0 read error: -22 [ 639.090306][ T39] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 639.122535][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.850934][ T8842] [U] ^C [ 640.471910][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 640.481251][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 640.489913][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 640.498361][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 640.520967][ T8275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 640.898919][ T39] usb 8-1: can't set config #1, error -71 [ 641.045941][ T39] usb 8-1: USB disconnect, device number 2 [ 641.385768][ T8860] netlink: 'syz.0.886': attribute type 2 has an invalid length. [ 641.394183][ T8860] netlink: 'syz.0.886': attribute type 2 has an invalid length. [ 641.401946][ T8860] netlink: 'syz.0.886': attribute type 2 has an invalid length. [ 641.409616][ T8860] netlink: 'syz.0.886': attribute type 2 has an invalid length. [ 642.076570][ T8863] ip_tables: iptables: counters copy to user failed while replacing table [ 642.378162][ T8862] ceph: No mds server is up or the cluster is laggy [ 642.528627][ T4321] libceph: connect (1)[c::]:6789 error -22 [ 642.540121][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 643.156012][ T22] libceph: connect (1)[c::]:6789 error -22 [ 643.162174][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 644.838436][ T39] libceph: connect (1)[c::]:6789 error -22 [ 644.844700][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 646.295749][ T8893] input: syz1 as /devices/virtual/input/input11 [ 647.588748][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.645064][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 647.892361][ T8584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.969177][ T8934] loop2: detected capacity change from 0 to 128 [ 651.029891][ T8934] EXT4-fs (loop2): Test dummy encryption mode enabled [ 651.160575][ T8934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 651.178844][ T8934] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 651.284436][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 651.306720][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 651.539874][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 652.121632][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 652.131449][ T8943] loop7: detected capacity change from 0 to 256 [ 652.206215][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 652.350217][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 652.423283][ T8584] device veth0_vlan entered promiscuous mode [ 652.518442][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 653.012532][ T8584] device veth1_vlan entered promiscuous mode [ 653.324013][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 653.354784][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 653.412576][ T8965] loop2: detected capacity change from 0 to 128 [ 653.436088][ T8584] device veth0_macvtap entered promiscuous mode [ 653.603842][ T8965] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 653.682378][ T8584] device veth1_macvtap entered promiscuous mode [ 653.747703][ T8965] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 653.764361][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.781340][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.803095][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.817171][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.827519][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.847062][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.876315][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.907538][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.944119][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.006567][ T8279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 654.034075][ T8279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 654.055132][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.198556][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.324175][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.418972][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.492716][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.574040][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.642644][ T8979] loop0: detected capacity change from 0 to 1024 [ 654.649260][ T8584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.722038][ T8979] EXT4-fs: Ignoring removed bh option [ 654.737831][ T8584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.768231][ T8584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.784127][ T8584] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.793568][ T8584] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.805269][ T8584] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.814112][ T8584] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.871541][ T8979] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 654.887072][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 654.956596][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 655.839011][ T4871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.891656][ T4871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.934746][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 655.958129][ T4871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.976836][ T4871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.007767][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 656.155191][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 656.479887][ T9009] se_device not configured yet, cannot port link [ 656.839473][ T5669] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 657.032607][ T9026] IPVS: length: 103 != 8 [ 657.126434][ T5669] usb 4-1: unable to get BOS descriptor or descriptor too short [ 657.621282][ T5669] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x82 is Bulk; changing to Interrupt [ 657.795775][ T5669] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x3 is Bulk; changing to Interrupt [ 657.867569][ T5669] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 658.247259][ T5669] usb 4-1: config 1 interface 0 has no altsetting 0 [ 658.385913][ T5669] usb 4-1: string descriptor 0 read error: -22 [ 658.423292][ T5669] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 658.473905][ T5669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.121268][ T5669] usb 4-1: can't set config #1, error -71 [ 661.133975][ T5669] usb 4-1: USB disconnect, device number 5 [ 661.347693][ T9053] loop8: detected capacity change from 0 to 1024 [ 661.421950][ T9053] EXT4-fs: Ignoring removed bh option [ 661.586206][ T9065] loop3: detected capacity change from 0 to 256 [ 662.296931][ T9065] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 662.517054][ T9053] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 663.819933][ T9087] device syzkaller0 entered promiscuous mode [ 664.549358][ T8584] EXT4-fs (loop8): unmounting filesystem. [ 666.303451][ T9112] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 666.303451][ T9112] [ 666.317973][ T9112] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 666.331267][ T9112] CIFS: Attempting to mount \\127.0.0.1\share [ 666.350011][ T9112] CIFS: VFS: Error connecting to socket. Aborting operation. [ 666.370123][ T9112] CIFS: VFS: cifs_mount failed w/return code = -111 [ 668.378710][ T9124] loop3: detected capacity change from 0 to 128 [ 668.386616][ T9124] EXT4-fs (loop3): Test dummy encryption mode enabled [ 668.438129][ T39] libceph: connect (1)[c::]:6789 error -101 [ 668.489794][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 668.497575][ T9124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 668.511161][ T9124] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 669.261815][ T9121] ceph: No mds server is up or the cluster is laggy [ 669.498908][ T22] libceph: connect (1)[c::]:6789 error -101 [ 669.505006][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 671.126138][ T22] libceph: connect (1)[c::]:6789 error -101 [ 671.162420][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 671.492514][ T9149] 8021q: VLANs not supported on vxcan1 [ 673.091465][ T4321] libceph: connect (1)[c::]:6789 error -101 [ 673.114632][ T4321] libceph: mon0 (1)[c::]:6789 connect error [ 673.128610][ T9150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.429636][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 678.010406][ T9182] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 685.601158][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.613701][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.033993][ T26] audit: type=1107 audit(1790664773.405:126): pid=9221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 688.790305][ T9235] loop3: detected capacity change from 0 to 1024 [ 689.238842][ T9241] loop8: detected capacity change from 0 to 1024 [ 689.259086][ T9237] loop2: detected capacity change from 0 to 2048 [ 689.270002][ T9241] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 689.284221][ T9237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 690.271181][ T8584] EXT4-fs (loop8): unmounting filesystem. [ 692.864084][ T9268] loop8: detected capacity change from 0 to 40427 [ 692.891086][ T9268] F2FS-fs (loop8): invalid crc value [ 692.903739][ T9268] F2FS-fs (loop8): Found nat_bits in checkpoint [ 692.941800][ T9268] F2FS-fs (loop8): Start checkpoint disabled! [ 692.967434][ T9268] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 693.290595][ T9265] loop2: detected capacity change from 0 to 512 [ 693.816160][ T9265] ext4: Bad value for 'data' [ 693.882512][ T8091] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 693.892690][ T9274] FAULT_INJECTION: forcing a failure. [ 693.892690][ T9274] name failslab, interval 1, probability 0, space 0, times 0 [ 693.925176][ T9268] syz.8.967: attempt to access beyond end of device [ 693.925176][ T9268] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 694.087079][ T9274] CPU: 1 PID: 9274 Comm: syz.0.955 Not tainted syzkaller #0 [ 694.094442][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 694.104530][ T9274] Call Trace: [ 694.107844][ T9274] [ 694.110874][ T9274] dump_stack_lvl+0x188/0x24e [ 694.115731][ T9274] ? show_regs_print_info+0x12/0x12 [ 694.121009][ T9274] ? load_image+0x410/0x410 [ 694.125610][ T9274] ? __might_sleep+0xd0/0xd0 [ 694.130298][ T9274] ? __lock_acquire+0x7c40/0x7c40 [ 694.135395][ T9274] should_fail_ex+0x390/0x4c0 [ 694.140165][ T9274] should_failslab+0x5/0x20 [ 694.144716][ T9274] slab_pre_alloc_hook+0x59/0x300 [ 694.149810][ T9274] ? io_fsetxattr_prep+0x1dd/0x360 [ 694.155000][ T9274] __kmem_cache_alloc_node+0x4f/0x270 [ 694.160415][ T9274] ? io_fsetxattr_prep+0x1dd/0x360 [ 694.165545][ T9274] kmalloc_trace+0x26/0xe0 [ 694.169976][ T9274] io_fsetxattr_prep+0x1dd/0x360 [ 694.174957][ T9274] io_submit_sqes+0x9bb/0x1db0 [ 694.179851][ T9274] __se_sys_io_uring_enter+0x342/0x2150 [ 694.185447][ T9274] ? __schedule+0x1087/0x4030 [ 694.190245][ T9274] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 694.195864][ T9274] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 694.201919][ T9274] ? lock_chain_count+0x20/0x20 [ 694.206816][ T9274] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 694.212843][ T9274] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 694.218439][ T9274] do_syscall_64+0x4c/0xa0 [ 694.222896][ T9274] ? clear_bhb_loop+0x60/0xb0 [ 694.227661][ T9274] ? clear_bhb_loop+0x60/0xb0 [ 694.232371][ T9274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 694.238300][ T9274] RIP: 0033:0x7f7ff6f9e159 [ 694.242797][ T9274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.262481][ T9274] RSP: 002b:00007f7ff7ef8f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 694.270956][ T9274] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7ff6f9e159 [ 694.278960][ T9274] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002c [ 694.286961][ T9274] RBP: 0000000000000309 R08: 0000000000000000 R09: 0000000000000008 [ 694.294968][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000400 [ 694.302972][ T9274] R13: 0000200000000408 R14: 00000000000003f7 R15: 0000000000000000 [ 694.310984][ T9274] [ 694.329401][ T9280] loop2: detected capacity change from 0 to 512 [ 694.952087][ T9280] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 694.969342][ T9280] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.966: corrupted inode contents [ 696.040323][ T9280] EXT4-fs error (device loop2): ext4_dirty_inode:6166: inode #11: comm syz.2.966: mark_inode_dirty error [ 696.055192][ T9280] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.966: invalid indirect mapped block 1 (level 1) [ 696.071584][ T9280] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.966: corrupted inode contents [ 696.094691][ T9280] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 696.103736][ T9280] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #11: comm syz.2.966: corrupted inode contents [ 696.120027][ T9280] EXT4-fs error (device loop2): ext4_truncate:4325: inode #11: comm syz.2.966: mark_inode_dirty error [ 696.134265][ T9280] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 696.150198][ T9280] EXT4-fs (loop2): 1 truncate cleaned up [ 696.155940][ T9280] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 696.376564][ T4286] EXT4-fs (loop2): unmounting filesystem. [ 696.478954][ T9293] loop3: detected capacity change from 0 to 1024 [ 696.558333][ T57] kworker/u4:4: attempt to access beyond end of device [ 696.558333][ T57] loop8: rw=1, sector=77824, nr_sectors = 632 limit=40427 [ 696.578691][ T9293] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 697.769236][ T57] kworker/u4:4: attempt to access beyond end of device [ 697.769236][ T57] loop8: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 697.967522][ T9300] loop2: detected capacity change from 0 to 2048 [ 698.049730][ T9300] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 698.066677][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 698.356274][ T57] kworker/u4:4: attempt to access beyond end of device [ 698.356274][ T57] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 698.463391][ T9317] device syzkaller0 entered promiscuous mode [ 702.224569][ T9337] loop8: detected capacity change from 0 to 1024 [ 703.185637][ T9337] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 705.230688][ T9364] loop7: detected capacity change from 0 to 256 [ 705.293609][ T9368] loop3: detected capacity change from 0 to 512 [ 705.603831][ T9372] loop2: detected capacity change from 0 to 256 [ 705.618619][ T9372] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 705.959879][ T9368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 706.259520][ T8584] EXT4-fs (loop8): unmounting filesystem. [ 706.348699][ T9368] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.068041][ T4278] EXT4-fs (loop3): unmounting filesystem. [ 709.827555][ T9399] device syzkaller0 entered promiscuous mode [ 715.947494][ T9452] loop2: detected capacity change from 0 to 2048 [ 715.955063][ T9452] UDF-fs: bad mount option "0000000000000000000000000000000000000000" or missing value [ 716.163289][ T9462] loop7: detected capacity change from 0 to 128 [ 717.917438][ T9462] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 717.926623][ T9462] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 718.107229][ T9465] xt_hashlimit: size too large, truncated to 1048576 [ 718.114188][ T9465] xt_hashlimit: max too large, truncated to 1048576 [ 719.007688][ T6755] EXT4-fs (loop7): unmounting filesystem. [ 721.684928][ T9497] block device autoloading is deprecated and will be removed. [ 723.285606][ T9500] loop7: detected capacity change from 0 to 256 [ 725.579620][ T9519] loop7: detected capacity change from 0 to 512 [ 725.603821][ T9519] ext4: Bad value for 'data' [ 725.696979][ T8091] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 726.040384][ T9533] loop7: detected capacity change from 0 to 512 [ 726.351142][ T9533] EXT4-fs error (device loop7): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 726.368051][ T9533] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #11: comm syz.7.1015: corrupted inode contents [ 726.388227][ T9533] EXT4-fs error (device loop7): ext4_dirty_inode:6166: inode #11: comm syz.7.1015: mark_inode_dirty error [ 726.410010][ T9533] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1015: invalid indirect mapped block 1 (level 1) [ 726.428949][ T9533] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #11: comm syz.7.1015: corrupted inode contents [ 726.443904][ T9533] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 726.457417][ T9533] EXT4-fs error (device loop7): ext4_do_update_inode:5279: inode #11: comm syz.7.1015: corrupted inode contents [ 726.471879][ T9533] EXT4-fs error (device loop7): ext4_truncate:4325: inode #11: comm syz.7.1015: mark_inode_dirty error [ 726.485689][ T9533] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 726.498352][ T9533] EXT4-fs (loop7): 1 truncate cleaned up [ 726.504231][ T9533] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 726.619787][ T9521] loop0: detected capacity change from 0 to 164 [ 728.716889][ T6755] EXT4-fs (loop7): unmounting filesystem. [ 729.412901][ T9543] loop7: detected capacity change from 0 to 32768 [ 731.076346][ T9543] XFS (loop7): Mounting V5 Filesystem [ 731.833317][ T9543] XFS (loop7): Ending clean mount [ 731.937828][ T9543] XFS (loop7): Quotacheck needed: Please wait. [ 732.206251][ T9572] trusted_key: encrypted_key: key user:syz not found [ 734.121653][ T9580] loop3: detected capacity change from 0 to 2048 [ 734.150304][ T9543] XFS (loop7): Quotacheck: Done. [ 734.206619][ T6755] XFS (loop7): Unmounting Filesystem [ 734.221759][ T9580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 734.437057][ T9584] loop8: detected capacity change from 0 to 1024 [ 734.762928][ T9587] ================================================================== [ 734.762945][ T9587] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x2110/0x25d0 [ 734.763048][ T9587] Write of size 4 at addr ffffc900047f9ff8 by task syz.3.1030/9587 [ 734.763068][ T9587] [ 734.763075][ T9587] CPU: 0 PID: 9587 Comm: syz.3.1030 Not tainted syzkaller #0 [ 734.763096][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 734.763110][ T9587] Call Trace: [ 734.763117][ T9587] [ 734.763127][ T9587] dump_stack_lvl+0x188/0x24e [ 734.763151][ T9587] ? sys_imageblit+0x2110/0x25d0 [ 734.763177][ T9587] ? show_regs_print_info+0x12/0x12 [ 734.763201][ T9587] ? load_image+0x410/0x410 [ 734.763232][ T9587] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 734.763265][ T9587] ? verify_lock_unused+0x140/0x140 [ 734.763297][ T9587] ? __virt_addr_valid+0xbf/0x540 [ 734.763365][ T9587] ? sys_imageblit+0x2110/0x25d0 [ 734.763389][ T9587] print_report+0xa8/0x210 [ 734.763422][ T9587] kasan_report+0x10b/0x140 [ 734.763456][ T9587] ? sys_imageblit+0x2110/0x25d0 [ 734.763483][ T9587] sys_imageblit+0x2110/0x25d0 [ 734.763515][ T9587] ? sys_copyarea+0x2530/0x2530 [ 734.763543][ T9587] ? __lock_acquire+0x7c40/0x7c40 [ 734.763572][ T9587] ? trace_contention_end+0x5f/0x170 [ 734.763602][ T9587] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 734.763702][ T9587] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 734.763726][ T9587] cw_putcs+0x15ef/0x18a0 [ 734.763766][ T9587] ? cw_clear+0x250/0x250 [ 734.763790][ T9587] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 734.763825][ T9587] ? fb_get_color_depth+0x15e/0x280 [ 734.763901][ T9587] fbcon_putcs+0x358/0x510 [ 734.763922][ T9587] ? cw_clear+0x250/0x250 [ 734.763945][ T9587] do_update_region+0x4e5/0x640 [ 734.763977][ T9587] ? memcpy+0x3c/0x60 [ 734.764003][ T9587] ? hide_cursor+0x320/0x320 [ 734.764031][ T9587] redraw_screen+0xa2c/0x1000 [ 734.764054][ T9587] ? _raw_spin_unlock+0x40/0x40 [ 734.764088][ T9587] ? clear_buffer_attributes+0x320/0x320 [ 734.764114][ T9587] ? tty_do_resize+0xeb/0x160 [ 734.764208][ T9587] vc_do_resize+0x122c/0x17b0 [ 734.764246][ T9587] ? vc_resize+0x50/0x50 [ 734.764272][ T9587] ? __kmem_cache_alloc_node+0x19d/0x270 [ 734.764298][ T9587] ? crc32_le_base+0x59e/0xd60 [ 734.764350][ T9587] fbcon_do_set_font+0xb5c/0x1ae0 [ 734.764380][ T9587] ? fbcon_blank+0xb30/0xb30 [ 734.764397][ T9587] con_font_op+0xac1/0xdb0 [ 734.764424][ T9587] ? reset_palette+0xdc0/0xdc0 [ 734.764450][ T9587] ? __might_fault+0xa6/0x120 [ 734.764504][ T9587] ? __lock_acquire+0x7c40/0x7c40 [ 734.764539][ T9587] ? __might_fault+0xc2/0x120 [ 734.764560][ T9587] ? __might_fault+0xa6/0x120 [ 734.764586][ T9587] vt_ioctl+0x161e/0x1ca0 [ 734.764646][ T9587] ? __vt_event_wait+0x260/0x260 [ 734.764680][ T9587] ? __fget_files+0x28/0x460 [ 734.764726][ T9587] ? tty_jobctrl_ioctl+0x164/0xb00 [ 734.764753][ T9587] tty_ioctl+0x7e6/0xba0 [ 734.764778][ T9587] ? security_file_ioctl+0x7c/0xa0 [ 734.764830][ T9587] ? tty_get_icount+0xa0/0xa0 [ 734.764856][ T9587] __se_sys_ioctl+0xfa/0x170 [ 734.764896][ T9587] do_syscall_64+0x4c/0xa0 [ 734.764919][ T9587] ? clear_bhb_loop+0x60/0xb0 [ 734.764940][ T9587] ? clear_bhb_loop+0x60/0xb0 [ 734.764964][ T9587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.764999][ T9587] RIP: 0033:0x7fadd379e159 [ 734.765019][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.765038][ T9587] RSP: 002b:00007fadd4598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.765063][ T9587] RAX: ffffffffffffffda RBX: 00007fadd3a26180 RCX: 00007fadd379e159 [ 734.765080][ T9587] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 0000000000000006 [ 734.765095][ T9587] RBP: 00007fadd383506b R08: 0000000000000000 R09: 0000000000000000 [ 734.765110][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.765123][ T9587] R13: 00007fadd3a26218 R14: 00007fadd3a26180 R15: 00007fff2050b9c8 [ 734.765147][ T9587] [ 734.765155][ T9587] [ 734.765159][ T9587] The buggy address belongs to a vmalloc virtual mapping [ 734.765182][ T9587] Memory state around the buggy address: [ 734.765194][ T9587] ffffc900047f9e80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 734.765209][ T9587] ffffc900047f9f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 734.765223][ T9587] >ffffc900047f9f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 734.765234][ T9587] ^ [ 734.765247][ T9587] ffffc900047fa000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 734.765261][ T9587] ffffc900047fa080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 734.765272][ T9587] ================================================================== [ 734.765437][ T9587] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 734.765448][ T9587] CPU: 0 PID: 9587 Comm: syz.3.1030 Not tainted syzkaller #0 [ 734.765469][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 734.765482][ T9587] Call Trace: [ 734.765488][ T9587] [ 734.765495][ T9587] dump_stack_lvl+0x188/0x24e [ 734.765518][ T9587] ? memcpy+0x3c/0x60 [ 734.765538][ T9587] ? show_regs_print_info+0x12/0x12 [ 734.765560][ T9587] ? load_image+0x410/0x410 [ 734.765594][ T9587] panic+0x2d3/0x710 [ 734.765620][ T9587] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 734.765644][ T9587] ? bpf_jit_dump+0xd0/0xd0 [ 734.765672][ T9587] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 734.765704][ T9587] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 734.765734][ T9587] ? _raw_spin_unlock+0x40/0x40 [ 734.765765][ T9587] check_panic_on_warn+0x80/0xa0 [ 734.765803][ T9587] ? sys_imageblit+0x2110/0x25d0 [ 734.765826][ T9587] end_report+0x66/0x110 [ 734.765856][ T9587] kasan_report+0x118/0x140 [ 734.765895][ T9587] ? sys_imageblit+0x2110/0x25d0 [ 734.765923][ T9587] sys_imageblit+0x2110/0x25d0 [ 734.765953][ T9587] ? sys_copyarea+0x2530/0x2530 [ 734.765980][ T9587] ? __lock_acquire+0x7c40/0x7c40 [ 734.766009][ T9587] ? trace_contention_end+0x5f/0x170 [ 734.766037][ T9587] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 734.766070][ T9587] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 734.766092][ T9587] cw_putcs+0x15ef/0x18a0 [ 734.766130][ T9587] ? cw_clear+0x250/0x250 [ 734.766153][ T9587] ? drm_fb_helper_set_suspend_unlocked+0x190/0x190 [ 734.766187][ T9587] ? fb_get_color_depth+0x15e/0x280 [ 734.766216][ T9587] fbcon_putcs+0x358/0x510 [ 734.766236][ T9587] ? cw_clear+0x250/0x250 [ 734.766257][ T9587] do_update_region+0x4e5/0x640 [ 734.766280][ T9587] ? memcpy+0x3c/0x60 [ 734.766305][ T9587] ? hide_cursor+0x320/0x320 [ 734.766331][ T9587] redraw_screen+0xa2c/0x1000 [ 734.766353][ T9587] ? _raw_spin_unlock+0x40/0x40 [ 734.766386][ T9587] ? clear_buffer_attributes+0x320/0x320 [ 734.766412][ T9587] ? tty_do_resize+0xeb/0x160 [ 734.766437][ T9587] vc_do_resize+0x122c/0x17b0 [ 734.766473][ T9587] ? vc_resize+0x50/0x50 [ 734.766499][ T9587] ? __kmem_cache_alloc_node+0x19d/0x270 [ 734.766523][ T9587] ? crc32_le_base+0x59e/0xd60 [ 734.766547][ T9587] fbcon_do_set_font+0xb5c/0x1ae0 [ 734.766578][ T9587] ? fbcon_blank+0xb30/0xb30 [ 734.766596][ T9587] con_font_op+0xac1/0xdb0 [ 734.766623][ T9587] ? reset_palette+0xdc0/0xdc0 [ 734.766649][ T9587] ? __might_fault+0xa6/0x120 [ 734.766672][ T9587] ? __lock_acquire+0x7c40/0x7c40 [ 734.766706][ T9587] ? __might_fault+0xc2/0x120 [ 734.766726][ T9587] ? __might_fault+0xa6/0x120 [ 734.766750][ T9587] vt_ioctl+0x161e/0x1ca0 [ 734.766780][ T9587] ? __vt_event_wait+0x260/0x260 [ 734.766814][ T9587] ? __fget_files+0x28/0x460 [ 734.766845][ T9587] ? tty_jobctrl_ioctl+0x164/0xb00 [ 734.766877][ T9587] tty_ioctl+0x7e6/0xba0 [ 734.766901][ T9587] ? security_file_ioctl+0x7c/0xa0 [ 734.766925][ T9587] ? tty_get_icount+0xa0/0xa0 [ 734.766950][ T9587] __se_sys_ioctl+0xfa/0x170 [ 734.766980][ T9587] do_syscall_64+0x4c/0xa0 [ 734.767001][ T9587] ? clear_bhb_loop+0x60/0xb0 [ 734.767021][ T9587] ? clear_bhb_loop+0x60/0xb0 [ 734.767043][ T9587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 734.767076][ T9587] RIP: 0033:0x7fadd379e159 [ 734.767092][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.767110][ T9587] RSP: 002b:00007fadd4598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.767132][ T9587] RAX: ffffffffffffffda RBX: 00007fadd3a26180 RCX: 00007fadd379e159 [ 734.767148][ T9587] RDX: 00002000000001c0 RSI: 0000000000004b72 RDI: 0000000000000006 [ 734.767162][ T9587] RBP: 00007fadd383506b R08: 0000000000000000 R09: 0000000000000000 [ 734.767175][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.767188][ T9587] R13: 00007fadd3a26218 R14: 00007fadd3a26180 R15: 00007fff2050b9c8 [ 734.767210][ T9587] [ 734.767810][ T9587] Kernel Offset: disabled [ 735.616793][ T9587] Rebooting in 86400 seconds..