last executing test programs: 2m19.143696998s ago: executing program 32 (id=68): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) pipe2$9p(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4180) write$P9_RLERRORu(r1, &(0x7f0000000000)={0x15, 0x7, 0x2, {{0x8, '^/\\},::{'}, 0x8}}, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f11}]}]}]}, 0x2c}}, 0x8014) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004980)={0x1c, 0x44, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x145}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x5c, 0x0, 0xb8, 0x3}, {0x6, 0x7f, 0x0, 0xc}]}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x28000) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe80, 0x1200, &(0x7f0000001840)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m6.779096024s ago: executing program 33 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close$fd_v4l2_buffer(r2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@nobarrier}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000340)={[{@type={'type', 0x3d, "54a10fb2"}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@part={'part', 0x3d, 0x8}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@dir_umask}, {@dir_umask={'dir_umask', 0x3d, 0xcd}}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x2}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x1, 0x400000000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, 0xffffffffffffffff) syz_open_pts(r3, 0x101843) 1m58.321847005s ago: executing program 3 (id=156): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) socket(0x2, 0x3, 0xff) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x301400, 0x0) syz_usbip_server_init(0x6) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e1d", @ANYRES32=r0], 0x22) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1m55.69332659s ago: executing program 3 (id=162): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x181242, 0x148) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0xfea000, 0x2000402) lseek(r0, 0x1, 0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x19980330}, &(0x7f0000000080)={0x200003, 0x200003, 0x801, 0x4, 0x70000000, 0x4}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@default_permissions}, {@nfs_export_on}, {@uuid_on}, {@xino_off}, {@verity_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1m54.649761147s ago: executing program 3 (id=163): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettfilter={0x5c, 0x2e, 0x0, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x3, 0x2}, {0x7, 0x6}, {0x3, 0x4}}, [{0x8, 0xb, 0x1a75}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xa8}, {0x8, 0xb, 0xffd}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040091}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r6, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e5000200000000f5e400fcff0000000085000000ae0000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) modify_ldt$read(0x0, &(0x7f0000000240)=""/41, 0x29) write$proc_mixer(r8, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8=r4, @ANYRESHEX=r3], 0xb0) 1m51.826136727s ago: executing program 3 (id=168): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000004900), 0x181200, 0x0) sendmmsg$unix(r1, &(0x7f0000006dc0)=[{{&(0x7f0000000180)=@file={0x0, './sys/block/loop0/make-it-fail\x00'}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000200)="f3c9a3bf5f571c3707e3b3e0c80170ca86d3d5b31864ebce14f4e2f0abe287696cb6459d223162510d5ff82032bae0962476f8baf971cddfdedf52012a43300415755be50abef6119b9efb6fe5c46164cec2a050ee33ba10d333844022631effbda33f68f8e9c82b1e015096ae38b06a283a1e5d0718", 0x76}, {&(0x7f0000000280)="02bbcb6393e14564b6", 0x9}, {&(0x7f0000000540)="7cad10b2217236f5f7f2dac3ba61af2a96825798bb49622033e5ff5ce4d31f014e604d8caba7e63a1120c180483fc9e50a9329ec630081db723fda92035036db82220db60b9d69046682a1b67a4a7d1bc983263e2e1ec1e2b161e5db3d41fb1d48876dabc7693ed626f41a1810522e183478295ba78f45a8fc4dca5e34e1e483e658bc65da06f972c1d3c945ceca5e22b3a0212364b354c420daf17ecad1c1f720200112cb1d791191bb942fe144f6e55bf1ab7eb4ed55911667acb9c6029e10c4602b85e791b0a554dff404c87f589904b353664b3b2c128095ec8f392aaf7ecb7c3d713ecfecff001654c8a013ffc5f102b7ef6fb43e034a7940fe1f28206d386ba5aed8bf75b104763f57117172402ed9e685398a833be71c523fe257fd4657dd8d0717b526089d0aa88ea937bd7a390478c62c36fffa1f86e563de7a00c0be3fb2537b571c9d6593f7afd495c5fa12223f8d5bf6069522f786ca52161850bc7401ff6ed97f89408e9fb68b19836af90eda4dab29fdb709a1ae70e2db0cbb97f0286c5fa93961b05aea423631fa779d0324c52b3835c8c4d321ab846507bcf5a9ff47a2f81a6925d3011f6996a56d3960fe7e3c57c2f377a9cb35767b77f466325bb2cf4ae6dccddeddf378b1d3bd45dc0f65fe88fcd03ccbd2bda888dfafb53cbb37192b042d824b1bc065ed43146a9a9132542e7bce8669820a0d3e353128431017e88fe6f9e4e09eb7f6da21913a18498500daeab9e2098cb4b3f77b31373f758480a970479c4ceb14df3345300168b1c18b58d88a279cc84bcd122fa64264227a17c2e538ab89ae1f813c8218464f49b50e47bab07eabf8adaad2e841a822d460ff91ebfe87fcbb402c0141afd3130cbc48d0fab26e3feb8489aa1ad2cb479a85f592640fd8ca21f7afabc1174fc0dc8b6de084aca08aeded926d0d7c9aaaba3062943c9c4a658a9cf60280d0401ce82d6563dacbca0aae3e6165b4eef4a70bc6e87a2ee9e891c2dc87a593ac6c8f8e024114f3e22a973d12d55c34b9150242ea6cf7fbbda40611a08806ab924fd75f1fea6ef0250773c9e59126e464356cac5c4fce400d8a1b99634e03249022d4c1c4053d21fd61909965b995eae6f2659d3117b1803f98d60e55340b9080e48aa5c0c0acbbf1dc89dc243e8fb211ad3fdaef917858d8a07b64695fcdd820a9fa54922e56c62fb2eb87ce47a1a9ba84ebfd227484f8bf26be03091e1c13171b8ea70eeb83cdd31ad93c9d972947988d601b24726fd998bd17ce94bb462453d6430dc7bbf48c8395bd2d0071b06c7f56011358e2897dea3f983ac18257671f9fda371526692a5f94d130dcb20e523d44421b5607e4ed1a5a69c03958e5cfadfccef4b7f0e631388a9702a4b894602a9c94fcedac7b76a33d14da7443cfd4d1bd3ac76d22a1bfbf91c5b195068fc3a13c4f1e011705d715f80992337b37931ec434ebe8b412c2b7b656500fdec6f78ac37e87900feb1aeedc3e8411168c5230c201ca9cba1381bc0a6b94b6dd14bb45bc9fc2bfecc4d93d3cf749411182a41cab3e712f1d0c46de42228572a794fe0064ba113c21154fab0f50a27ea86933e4d3ce71fefc5e3ddbc8b373b6009a4d4a57901328b75ccb6a1f06ee1cd1dd5a49013e22a77c4af9003586629ca7eaed67b8f8bd248aa12d380c44dcaf3cf4c9b2cea0b6229f9d3afc953845e4946b990f42733b37a71267b15b4f115cddf4bd265151fe642602975c5a45ee4ae473b79af49754ea4a54f60902ac8eb25079abb0eb79206ace3028162e2a026ce1514c6f7c776a2a025f3d0a251b62a798866004bd247c8365f2d1a21fa747f3992f2588c5d0fbd463e3fbab497932d7b47272641a5181c8a502cd45861950596e4a46683304eb3693b5d126c31b0b1dbd88a60b1c1bbfad2ddceae1b006dcdb68f6e6d988589bc1fd5e19d1fadb86d475cc2521d4257e177a4213b13ca8b55c13934f254970ff88af7c9dd6b2d608a8c2901a32d5fc51d4d4724da7f3fb2a2cab83ef0788dc2db31fd4239a7b9aefc2697f0b96620d8aec7a51d0df2394122450e5ae4d9eccc22ba6985c60bb99416401a883b49dea8227ba74e5828b97eda986258d4b876c7571d3009a547328daa99009c78dde025e10ded7d88bc630ad0062bcf902b1ffd203f44b1b68af68ec85c44871eb49b48c90942cbed2db55f715b6ebc4a446d87a8368520d2c0ce0e1a0d869dd2257b988ebba941b86424b1deb6c159c0ff8173f2d441ba50b5a608e9429431c03a2fb720ed8537462ec75b112ac8129e35a3b1dd6b205f2e2ea433a5813fc14aa0e744150d3c015d0274aeb659a6d57e89f5cb68e029431efefc0bacce865c31127140cb99c3139a741478de5bc7ed6d7d298bc3e99aeb0899f3d3d3cae4f9f9a46fa0b4bc066b366bd010c975768806f507449ac01cafcdf30c612ba8d84ca821c0fcbbf89e47425132e4f42fe4ff3da45b112398385de05887ab3be87e06e8e89a914f2bccd00d0dad6c482947e717f859b26e8b10c0fe5cfa3dfe9f42c6ec8a2682171a02e48b1a0f44d81f15e57b35f85eb34a3fcde1a21edb1d409741115f6453ca186ffae6772fa2ac5139003d2b9aba3d240b19e1d33d0fd6d6417c5888819810d5e6c32d4355ccd6fe675b2997a0c26746e165d997d4e1d49980c86e707d7be83c983a7118a3236d3883985d97b0948a433ce6b5f495a22a0d70cd1723a20255c90d0dab809401a28172ecef716134ba06e6d57fdc34d644b6e628af3f39145ea1a839060907c19a632952928f3e1bb09a9d937ad4143d582637c8a5595cf8bc4ef147b3988e522254ddca913f21b977b3b26ba26fc1cd612d31982c9d79685e7acd02dd201b3a75f4176e8f76ab65d34c7df687b6aca982e029f14d38c1087a13a81eb3379e2c730cfa37a0d956493c80afd8f034ae1594e297412f59ee1aca6a9887e6ab20f9638fa96bf98826cb70fa12054228f4ca3bbceda1de1d417bb82a9183d654ee0d160295e1a77875a1c755979d5e13c22e192b75760fc4d079dbaa12de838ef7463d3345db1cdbf825b27d6d6afb4f26bd30f3c655bdc9304f403394e54adaa67458eb6741cca897a4d697736db341897d5436c343170f2892123f3e3d04472745f11cd9846e52e1068f7f00d657ba3cad52ca24740379c34318ec9bfaa5ff82da970f0bb6529b14b5d8e5920036bfa42b20b8b11eed128ffd534ac75cefb6d8a029290a9f0546194d41e965c5acd0f3eef56afe1112ff176021d9a7a45257c7761ef97820f6548d6bc896b36611bf98b9c55b49925961c60241dac7e22a3329a24579e1d4f57a6b01b2f2c888e07e466cd1e1869254842965e73dda1f12ff854cf37393f5aa37dfa006c8eb9fd0d092dcac58d9826bce0a9ccbda3a12a75d689a3d2f00f0bc081393b41b67f480a25a1496c484672a813fb23e127853d22ae1c31e69f4038148837d635b4d76c877ea8d4aaa67cfda4e30a87abd6aa0a1190e607bbb81fcdab7d18fe903a507d4d928fbef81e537f4dbced94317b981fefadda9d5d652820bb41e5d8655d341ef4b91bce817dc12da04ad6a7ee5e33d90dab146bc939590805e473a044a204729148d2d570f51b9de3e5a77eefa126bdea4a28e422ebd90a0411ac7fabf7d228876952f9c56c21d7a435d39aac9de770e9011cb1ea325ead18b2b4db5f4367a41fbf08acf77020e626ee2b98c7ff5a5a8fbb8bc60f9401618fff9fca2553451d5bf99082d1d74e13e6b4059c3aee7aec77efd15d996907a6bb217472d6ba33a575572fd8cd470204a9a12de0e4c935e9fa19bcd9440308dff414ca0bc5027ca7cd6e52d8ffc1bd210c2c44b9804df13dba685008fe08c0f484ff0080e125ab8c47337278bf13191c1bb31bd39fbd23896cc2f663f355cf213fcf18146a072b4c115b80ead9c3c104b4bf35e811b3b2e2c95bffaa84f6998cb61a98401f253a67f1a58157d7fd6bcafb8f069793277248e406a8e3a3093b00cbf34d9e6ffc07a160b41f5587692b11a739433b496ba13121b512c3ea80d14b89ef9362f4cca1526a2bb4273dfc212fd61887e888d4126312a9c19b3da1617447bac24a2f245a276aceaae275f0a630520601bc65a0996a9ad25b801953e6b45bbd708e07714f96e6028b2611338e9ec21c45911f54ddd6d70f7b8776ea965aaa5abd5d0c6d583dce61e7daf2ad2851218b723de967f3aba0213e89113f1b619f072cb148394bfe46e7321696972f7dd42ecbbd2483502162d0d74569ce1fd99d54ee5c891e052daf0e0b62ac39c778343af3fa3cef444dfa2e8c678a19fbd58deb966a9ce9203a617130a95000f33e6fc1a24416c9304bf8d8ac3c0ff7ca1748138d96d2e4a5bfdb74c4a001f78889bdb9887e1a071cf74f3b517dbaaf8ae6528c11a8987e8a95eb3c839441abae72955f9682c027a5affe7e967d61970426134ab8cb8a8c47a4abe47f3190583e445aee39b2eb55e1447192b2cccd4ffaaa42ff85adb337c821d4eccc20ec3a2b8be92f581d2cefe1399802b4765870e1a75077f7a5d586f8fc95e0bc72f897d0bc48d6f3845d66c7e7f85a27f76ff40eb850c15598912e844fa431a30f615f530215a5a3679fc226c2ed1745cc7f9d3deb9e49a0a1775728c57992a9a48c6cd3c97bcb34d326bf0800476ce74f66b418bc8cfe46b9fcb89711bc4c068c28473b0802d1a517b88d27dba2b17a2eb211f5783d6f418469c255777f6a516c502913e6ca63e72c54f56e1181d1d8b8f5d118c759d5cef28546532d52d0252b407cb43ea68874235c4b6153f1eae6078ada38648c2e9fb6a7fb8e97547fd56e7bcc6100b61ae14cf3fcd52baa53c8223bcc580938a78da8aff3f741f991e73a36f860a1e4853bcf195569e9d6e7b0b6a1be86b47a7d914ceacd414c644c2af172799fb7bfd7607f7ae8e90ba6567bf913590c18770b2022a9b78e31b5a23c9de8152461be527dba382a991e22ffb1bd624814afbf8633abd9ef590cc5793e56ff0e3c0007e4dbc0f5552d00d4f41a208e22c77d23392841407efcd7612f47dafd8e053a47ff3c3020f0643733fad617cb44a9db0f2f83ed51048b6dc3d4c810c6e18ec9a6092d6507b9e4b84856afbb3b6f03b13ab9c0704b5a231e208d3484f1bd494c024ccf0ae2ca944e5bde37af453c5241293df3100d7c85c2c4219336087d19a7252f72b67fd747867001bce56546e3a91443b0b43198bcb0a06ff4c919c35516c2c026a8afcbea477c4a0ea2e9c0dfb22ef52dd44da3eb5426597bf1624f301b1411ff52738f7d40cbfbc98c8877a0b30178a3ea0cc18c95f025880c51529d6606b1be0b788afb00c4686f09ece2c06761430031f1014b6e0bef209ef88ed3fede17a3609abb28f10f7aef96c7e1b58c77ff89b146ee52c2e0906713b75fdf0f5317bd85a80866f4328926b6ce0c4656fb9d98cd5fa4400968d70a38771f46be80b29622b077c7798508a047ae04cc2d1347aaa5bc307e5d4bf1fa3c270e387f7c6f8de630545b6a8a07dd9a390a79d64a4906ccc37adc519b616b60f781445413ce54ab9e345827743e504548fdf5571767b3db79d54ec6f1c26d0c0e792cad0dfb7005a9a0aa3d817827e99b328baeeb91b2acef03f83d17a2764f1e9dfe863aa219891faef6dc3e0c6105cc9ab4bd49b4c7a64e0227d1bfa06a4458ea7756cee3c496e7e1ec36e9b848c3d8aa5cd60e94596dff70ccf491aca2a5024c84a4ec9c1219875beb2255bba6c15c7e434e7b", 0x1000}, {&(0x7f0000001540)="2edc078d3d396b621067987564d77e039930faf8185c8a7b6dc477571b743a673c373a1c976e260eccf36e04a97957d1f8f8c362081a946d808bce0545b45d6f1209838df2c35fa056ea04d411ee07a0fae93053526612895eee8b5cb8a5b1ce642c2cbd9ad1e1db283f45c1d5867926bd27b10f4b727836a4a05c538396bca6b02aa11bfb3c4f1727d6c79c60", 0x8d}, {&(0x7f0000001600)="955d8e961ca07da87b112a6767cd6bbc60ccbecacbb5fd19a6e57e8efbbb9b95778351541c4f51bb8b70df28c32db32606a471bbfdd2436a82e542daecbc6a477e958998d37c86d08a3c948b9a7f97f62ea4918da5dd8262872ec11f96353d0939e9b8493fa04f8c65e2ffb29a197060bc72af117bd0ad08118c9a57607ac3d71dab1cd28907c5f4d9b11b99ed08c28ac425c6ea1ea068dccd0b2b7e08d97fb3f13837ff84067812f18d5acf48a9aa49d24367ce5129b88cfb53", 0xba}, {&(0x7f00000016c0)="e814f72b3bfb9207e25a26810b767cd39ba04e8f4cab11e4b979c9e83e", 0x1d}, {&(0x7f0000001700)="762a5ad6cb215e46c188b0e76e95405e6d54d8cbfd301ae656aaf056ea5fdc061ab96d1d77a327239c84fd1bf404dbe30bea89eb13bad98816dca4b7b391a6d6f4b39b10bb3748d2a84f372320bbc9d802875e0f53d4edb587af483dd0c5f3f718d9515a5ecbe5fa4e188b68783d5a419f97e3", 0x73}, {&(0x7f0000001780)="7b5a41889549b7eaa1860a844196d8e21205ccc71d9412ddacb049e22c0d3126cfebb6ef6e2a64683a55b4a38f0eb34eee1dddd67aa3c549e40b282111da457cdc73f44b1ede5008e97db29eaa6bb15bafa3666441872ae13a1362", 0x5b}, {&(0x7f0000001800)="be2dc9ab27ac7a5f7632466b5bc232a4be65bc8af7eb140b3ea2051d817642d332c938", 0x23}, {&(0x7f0000001840)="6b8d1981db54529e397e8945c46d6e35e68e60961953addd679111e7b8cc6ccf55a356733eb9b53f4cd18e5f39347ac32b7b24f0a4916389cc76a10496ea823cdae720c9", 0x44}], 0xa, 0x0, 0x0, 0x40000}}, {{&(0x7f00000002c0)=@file={0x0, './sys/../file0\x00'}, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001a00)="68e1904f52284486c163205f2ebe54e999244889b4bf897bfc7ac72249653f622f149d9f0e5a2c41ab63771cd7ea03a7731e516ff2c7e50e54a3adc803e66d0213a1d9684bde59af5e86421f3d727bdf098d2c6708daa9337f6e4cc061485960e59f36a0766f9fa664dd5058f9c4d65a72dca36814a9", 0x76}], 0x1, &(0x7f0000001ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="040000000c4595d1536992224758238c55f49a199ec311090000000000000084c1bd6dcb021488654c5ad00338c329cd3f8fc540ae1d1a97bf0900000000000000ef73fc1308395a2ee0879c61c36601008e00000000120000000000000e005689e1b6181c1163fa54fe9854189ff08681b60b70fca9d066c210f3e73999041518c6bb84882be187058c79789818fbe26cfdb009920f88"], 0x78, 0x40090}}, {{&(0x7f00000049c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006d00)=[{&(0x7f0000004a40)="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", 0x1000}, {&(0x7f0000005a40)="a15aa85d690301143881ffe00f9f3ade1a43fbd12022dda3b915ff5adc4f2a82491e0e97677f9f3ed5efadbe024d5187dde582e8c9f27b177682908ab687115cbf480d64e4d7bc2e816305fd56419e4b3e3abc98a396940cf75ed89cce727c411d74071d2bd9f2809c4c0e384f12608699de31368721b391e0045be14ad9fb5a56413297d6f9374f64ddf79a06eaf09e9523b2f2cd0d101c2892d3596faafb31fa45b0da3854596b9dfa915732e1c5a88da9928be0f3c32b227222ae90a2f775a75e57e9da1f48ad648212c0d91fbb67ea", 0xd1}, {&(0x7f0000005b40)="734b93e53a76b30d21e7ebc21e39589898194302572bf46b84ad7c372a20cdfd7d", 0x21}, {&(0x7f0000005b80)="e36236a4b7bbca984b06674d597eaca6eeb923fb9ad3513a8d24dbcbb84738f29aa0a968c4969956ed62debba82b3044379b963181d3fb9bdae29660f5007bb79c1859331e2335d0a5d4e0b44443065872e69bbd01eb0b2e73fb722a5ad26f", 0x5f}, {&(0x7f0000005c00)="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", 0x1000}, {&(0x7f0000006c00)="82b5047f3182c8a881d76699d4c3ab54589b9ae12b887555e8cfafad578cf244095d9609", 0x24}, {&(0x7f0000006c40)="950d54d27c3aeaff587b86fdf6a010e41e8030f6547fd7df42f54690532ee321c6c8e8f472a4f0db57f65959e4e688607b672d8564f20cefaeb742fc048fbf2aa3fa1409b51c6058647043ee6b07a8ae4961cbaf440c6088ee404fda118753ed1eb0aabc932ffdf02aef98e419b0d6b5317afbf607b38d62426127fe969fea454864642fee7270a85676ba7b7bcc80ed356208a19d446f45b44ea55c7f6f45c328cf59bd", 0xa4}], 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="14f3ad000001703e128b90f9b1cc79dd7034f400"/30, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}}], 0x3, 0x20040040) io_setup(0x3ff, &(0x7f0000000500)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r7 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) fcntl$setlease(r8, 0x400, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0xffff, r1, 0x0}]) recvmmsg$unix(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/loop0/make-it-fail\x00', 0x109442, 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)={0x200000, 0x10, 0x8}, 0x18) r9 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x200}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8eceb2e30985c02b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r10, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x3}], 0x10000000000000a3, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f00000005c0), 0x4) 1m49.495706822s ago: executing program 3 (id=171): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd02, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000480)=0x10) fallocate(r1, 0x8, 0x0, 0x8000) 1m44.464774631s ago: executing program 2 (id=177): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0xc0, @mcast1}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1000\n', 0x5) write(r1, &(0x7f0000000140)='0\n', 0x2) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000480)={0x3, 0x1, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/76, 0x4c}], &(0x7f0000000440)=[0x2]}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x89c, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r5 = socket$inet(0x2, 0x2, 0x0) capset(&(0x7f0000000380)={0x20080522}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec\x00', 0x501240, 0x100) read$FUSE(r7, 0x0, 0x0) write$tun(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001"], 0x4a) 1m36.292393441s ago: executing program 2 (id=183): syz_usb_connect(0x3, 0x4e, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4000000000000004, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491c54e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd0000e7744b74eaa2317fdd9db2fea7e7d63f9a007866063c8c162b99d845fb", [0x61, 0x6]}}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c06, 0x4) 1m36.140386719s ago: executing program 3 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) flock(0xffffffffffffffff, 0x2) close$fd_v4l2_buffer(0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@nobarrier}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000340)={[{@type={'type', 0x3d, "54a10fb2"}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@part={'part', 0x3d, 0x8}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@dir_umask}, {@dir_umask={'dir_umask', 0x3d, 0xcd}}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x2}}]}, 0x7, 0x318, &(0x7f00000004c0)="$eJzs3U1rE08cB/Dv7CZp8m/pf20rBY/VgqfS1oPixSLFi2/AgxRrm0LpWkEraEGMnkW8CYJHb55F34JexDegpx7Ek16CB1dmZmcf0tnNQ9tsQr4faJrszsNvdnayMynpgohG1tXVb28vHMgfUQbgArgMOACqQAnAacxWH+zube/59c28glyVQ/4I6JziUJqN3botq8yncoQ8+aqEieQ2OhlBEATf26b61ZdYqDhCj/1DHGAsHJ1qf7XvkZ2Mhm7XaEn0sGiiiYeYLDIcIiIqXnj9d8KrxEQ4f3ccYD6chw/79T81v2kWF8dAiK7/jn4dCHl8/le74vWeWsLJ3nfMKtFWlvWcCOLDXYE+s1IdINqtKlUsTm1r268vNFQBz3AllEg2ox43YRqiZEVb0b/mLGvTHHltzzeu2lCWbVjOiH+66xo//sAre3VrnzuISXwSX8Sa8PAam9H8rxQIeXDU8fFaekrHv5hdomqlp1OlWhmv30+pSs6YHvjwLm5lLeu4VuHKWGxkKaJ1/u6ZOF9WsnNhCumPFXTrlrJbp3JNW3MtR6//WHPNtOaqbZX9+sLGXT/3o5RjY13RiRfihpjDT7zHamL+78jU88gemalRLlTK8MzIbU9JpczoxxQ1gO90NTJJuWbt6HzPcRuXMHn/0f7Ouu/X7xX/xAyVAYlHn4jh6Si3yN+JNKjKJ2UAx1bp3yAIrLtK6EeTy6qpF9/ETd7fWRcN/fJoVaARFWh2rWQnBrACINxi3hF6qf1JlGssLrCj7L9lb6st9hPSRNWHE9JUldrlYqyjkVLrodLrj3fW/Z7eiWjIxJ2O2ZtFB0NFkPMuodd/ifXKonrXkQ9ezmokaFd4osSljBXQlHr8r7MVXFRs5jxx3Dxps+Y6ex4411KjA1Pj09ZivTBODOJfJbv/U4ZYxVfc4uf/RERERERERERERERERERERERERETDpttvI/TydYJ0jQcj+I83iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOJnH/X8BVd4ypFH7/X7eD+/+a+1IQUc/+BQAA//8KX2Ch") landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x1, 0x400000000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_pts(r2, 0x101843) 1m35.531182149s ago: executing program 34 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) flock(0xffffffffffffffff, 0x2) close$fd_v4l2_buffer(0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@nobarrier}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMzno3ydZZJ8a7Cb+fNPs+s+/MO8/7aHYys1a0Af5vrX6QmUfzyeqV97bL9d2dVmd3p3W3Hyc5k6SRzCUpyrf/kuTL5EF6S77e7xhqn1J8vnpz/eFnl3trc/VSbV8ctt94DnJp9nKt2uMab/mFxxvMcCHJhbqFidvv++fI7hf8XAIA06xITo16v5mcrW/Wy+eA3l1x7x77pfZg0gkAAADACXhtL3vZzrlJ5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvk/r3/4t6afTjhRT93/+frd9LHb/UHk06AQAAAAAAAAA4Bt/ay162c66/vl9Uf/N/q1q5WL1+LR9nK+1s5mq2s5ZuutnMUpLm0ECz22vd7ubSGHsuj9xz+WTmCwAAAAAAAACvqN9ndfD3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmAZFcqrXVMvFftxM43SSuSSz5XYPkof9+GX2aNIJAAAAwAl4bS972c65/vp+UT3zv1E998/l49xLNxvpppN2blXfBfSe+hu7O63O7k7rbrk8Pe5P/nOkNKoR0/vuYfSRF6stLh3ssZqf51e5koW8n81s5NdZSzftLOTdKlpLkWb97UWzn+fofH/82Nr7z8r1zSqT+dzORpXb1dzMR+nkVhrVHKptDj/i78rqFD+qjVmjW3VbzugXdTsdmlVFZg4qsljXvqzG+cMrccTz5MkjLaVx8B3UxeOr+Zl+cLZuy1q/O801n1keOvveOLwSyeLyv++vd+7dWb+9dWV6pvScnjwnWkOVuHzkSuzv7//2xKdwTGbravSuoke7Wr5V7XsuG/llPsqttHMji7mRlVxPKyv5QVaG6nppjM9a42jXt29/tw5mkvysbqdDWdfzQ3UdvtI1q77hdwZVunD8/wqc/kYdlCfrO1N3RTr/xLW5X4nXD6/EH/fL163OvTub62v3xzzed+q2rMBPn68Sp4++yzjK8+XCwfCPnx1l3+sj+5aqvosHfY2n+i4d9D3rkzpb38M9PdJy1Xd5ZF+r6ntzqG/UXQ4AU+/s22dn5/81/4/5L+b/ML8+/97cO2dunPnmbGb+fvqvp/7c+FPjh8Xb+SK/GTz/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz2/rk0/vrHU67U2BYPLBXJJxN+7/7tOkc35FgwlfmID/uWvdu/evbX3y6fc27q592P6wfe/60sry9euLK9+/ce32Rqe92HuddJoAwDEa3PRPOhMAAAAAAAAAAAAAAOCrnMR/J570HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFfb6geZeZQiS4tXF8v13Z1Wp1z68WDLuSRFGfwtyZfJg/SWNIeGK77qOMXnqzfXH352eTDWXH/74rD9xvNYLo0ncnrR8ZZfeLzBDBeSXKhbmLj/BgAA//9gDAG4") syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000340)={[{@type={'type', 0x3d, "54a10fb2"}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@part={'part', 0x3d, 0x8}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@dir_umask}, {@dir_umask={'dir_umask', 0x3d, 0xcd}}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x2}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f00000000c0)={0x1, 0x400000000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_pts(r2, 0x101843) 1m33.991259026s ago: executing program 2 (id=187): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x40f1, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x30, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') landlock_restrict_self(r0, 0x5) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000008940)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x7, 0x1000001}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) 1m33.553425624s ago: executing program 2 (id=189): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[], 0xff, 0x2b1, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x75) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0x5, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}, 0x0, 0x0, 0x0) 1m33.073513104s ago: executing program 2 (id=190): mount(0x0, 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000001500)=[{0x0, 0x45a41c5a10cc22b4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x10, 0x0) landlock_restrict_self(r0, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) landlock_restrict_self(r1, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x9, @loopback, 0xb}, 0x1c) 1m32.242533577s ago: executing program 2 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) sendfile(r5, r4, 0x0, 0x201f00) 1m31.616689226s ago: executing program 35 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) sendfile(r5, r4, 0x0, 0x201f00) 1m21.483860264s ago: executing program 1 (id=207): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x40f1, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x30, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') landlock_restrict_self(r0, 0x5) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000008940)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x7, 0x1000001}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) 1m21.20023456s ago: executing program 1 (id=208): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m20.957139802s ago: executing program 1 (id=209): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@nobarrier}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") 1m20.101289851s ago: executing program 1 (id=210): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0'}, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x324, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2e8, 0x3, 0x0, 0x1, [{0x2e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "31d6a42416a31ac04fa9cd300308cd4447aa2a938f78a67449a1581c4602223a7fe87e9009fb65e2b24f6232fd0e77a09c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x46, 0x6, 0x1, 0x0, "d4fa656e9a18bc957bbf062ba4de11100a8a0551708583d498290f32843b8fe1ca4c4d5bafc7bf98c2e77921c1658b7b27cec0cfc6a7d040b3a550342c9d2578e411"}, @NFTA_SET_ELEM_EXPRESSIONS={0x164, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x64, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x30, 0x1, "2b4d28843df400d23ad46bcc88168dcf6d18b1407059a21793c08475211c5f981af8f7b44eb0c4dfd3b01960"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x34c}, 0x1, 0x0, 0x0, 0x10081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/error_log\x00', 0x90000, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpquota}, {@usrquota}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) 1m19.062509986s ago: executing program 1 (id=212): setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x8005, 0x0, 0x2, 0xd8, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) syz_usb_connect(0x3, 0x65, &(0x7f0000000180)=ANY=[@ANYBLOB="120101021eece81021042f04dea9010203010902530001000310020904bf06000202ff08052406000005240004000d240f0105000000f7ff030003152412"], &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) 1m15.242635942s ago: executing program 1 (id=215): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000680)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x801) sendto$inet(r0, &(0x7f0000000000)="e4", 0x1, 0x800, 0x0, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106, 0x6}}, 0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x3000000, 0xfffffffffffffe96, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 1m14.888898688s ago: executing program 36 (id=215): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000680)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x801) sendto$inet(r0, &(0x7f0000000000)="e4", 0x1, 0x800, 0x0, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, 0x0, 0x106, 0x6}}, 0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x3000000, 0xfffffffffffffe96, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 1m9.300018006s ago: executing program 0 (id=220): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_clone(0x40400800, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb4, &(0x7f00000002c0)=0xda) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r1}, 0xc) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r3, 0xc138fd89, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 1m8.632015542s ago: executing program 0 (id=221): mknod$loop(0x0, 0xfff, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r1, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000040)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000780)={&(0x7f0000001000)={[{&(0x7f00000003c0)="132b3fa0cd398e6e4f05e0eef0c8417fe9e24d47da2c850badf8eba6379bb76fcee27245bf3dfbfd8b80b996adac9a569c0bc923958325cda157accc60f8d846c17c515df6b10c698a504ca80d69eeadcdc293a6a0c952f6f5acc70153878ecb4fb75e4faf07d2adf638502b0a7f5b7c7c72c53fa5293327f89cbb96bb77d33964e03c9f61e172cecff49b741e9d0685f90e8c0ed6a428ff9fdc2d8ebe6e0d7ed98ec4473ac002bada24d1f02f55ede3c40b3ed8f31205519c6c2bcf44130791", 0xc0, 0x1}, {&(0x7f0000000500)="7aef1e56cb0e2e98c3f532028678b1093d94373ae180d79cc8e7a5910e123c87e8fdc8add14ad69e12fe9d88e8e93b7068b17c8be02ec326771591a6e44108a5211339603bd8c05b4a5270a2c1c35a3efc53fff3536f2316ce67ed4ce5691da98b1573a7d770a63f1dabc3a9318729b9a281752b05f13e3968dbddea87f705fe91934386748171ab66b84223d3764fced6141234b76fae6acecf18a5a3d99f0e39eadaf1b4f27ae7566675f8f69b2ddcd53d1c6b59e9b3692395ce", 0xbb}, {&(0x7f00000005c0)="a993", 0x2, 0x1}, {&(0x7f0000000600)="b112476225fdc625020fb5427cdc4b67a817f2e30471ff34eb2be51f38312bc88a45f92dd5e64bc0203c20a4eeabd07143c79748955d62c27b2ab8e26136720c527e49d8e7f0c870affdff34", 0x4c, 0x1}, {&(0x7f0000000680)="fc140a8806ac0e969e179b931377f3ca1aee14eff13e27bd4e8d7b50400cee9589836fac90ce0f7118f08cd36d8edcb23f6b4dfc27dfb8ae417c649e5f0d265845027794dfa3f947c0f190a95a2f8923a1c0d330daf1ac17b1478f18c864f54c44611399f811b9363513163f8634949dea06857cb242c655afc505db76365990b815a9452bae8698f9e02276a823c05c599b26b3f3f326ad956bebc906b085be32472a512cf0af08bdab567cdbf05483feed78f0dde58385cff4be7c3610f3bf5acba2d8083972891368fc9e81af54295e839a33b7cd2f6a7bf494c455aa51591000c56554cce7478c08fe3f6b81fa3e9e61dc0b2ab0", 0xf6, 0x1}]}, 0x5, 0x1, 0x1}, 0x1) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0xffffffffffffffff) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f0000000080)={0x7e, 0x4, 0x7, 0xfffffff2, 0x1, "6800190100000006000000000000000200", 0x36, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x20000000, 0x6, 0x5d, 0x9, 0x1005, 0xffff2d37, 0xffffff01, 0x6, 0x10000003, 0x5, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x23e, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xfffffffc, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x5, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xffffffd3, 0x129432e2, 0xc8, 0xf8, 0xe, 0x2be, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0x8, 0x26, 0x3, 0xa7e, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000045, 0x5f31, 0x1800d, 0x4e0, 0x1, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xbec, 0xbc45, 0x3, 0x42, 0x3], [0x4, 0x406, 0xe, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x2005, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x80005, 0x8, 0x1ef, 0x22, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0xc, 0x2, 0x2, 0x3, 0x2000000b, 0x4, 0x9, 0x6, 0x38, 0x800003, 0x600, 0x83, 0x3, 0x4, 0x2950bfaf, 0x6, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7fe, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xfffffffa, 0x40000007, 0xb, 0x5, 0x938, 0xfffffbff, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x54, 0x5, 0x3, 0x101, 0x10000, 0x5, 0x7fff, 0xfffe, 0xa620, 0x1, 0x78b, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xab, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0xfffffffb, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x256}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffd7c, 0x10000, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x0, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8204, 0x0, 0x0}}, 0x0) 1m8.544104001s ago: executing program 0 (id=222): r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) close(0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket(0xa, 0x3, 0x87) sendto(r2, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x2) mount$9p_fd(0x100000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m8.358102079s ago: executing program 0 (id=223): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0'}, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x324, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2e8, 0x3, 0x0, 0x1, [{0x2e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "31d6a42416a31ac04fa9cd300308cd4447aa2a938f78a67449a1581c4602223a7fe87e9009fb65e2b24f6232fd0e77a09c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x46, 0x6, 0x1, 0x0, "d4fa656e9a18bc957bbf062ba4de11100a8a0551708583d498290f32843b8fe1ca4c4d5bafc7bf98c2e77921c1658b7b27cec0cfc6a7d040b3a550342c9d2578e411"}, @NFTA_SET_ELEM_EXPRESSIONS={0x164, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x64, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x30, 0x1, "2b4d28843df400d23ad46bcc88168dcf6d18b1407059a21793c08475211c5f981af8f7b44eb0c4dfd3b01960"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x34c}, 0x1, 0x0, 0x0, 0x10081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/error_log\x00', 0x90000, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpquota}, {@usrquota}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020) 1m8.145812707s ago: executing program 0 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0xc2a02) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0xc1205531, &(0x7f0000002680)=""/4078) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sched_setattr(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202"], 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/189, 0xbd) r5 = inotify_init() inotify_add_watch(r5, 0x0, 0xa50003d1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x19}, [0xffffffff, 0x0, 0xff000000], [0x0, 0x1fffffffe, 0x0, 0xffffff00], 'gre0\x00', 'veth1_to_bridge\x00', {}, {}, 0x2, 0x8, 0x3}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x3a, "4fe532a7d6e22148dcf83793059c7baa8e48b0e40fb7c65c616199ce0323"}}}, {{@ipv6={@loopback, @remote, [0xffffffff, 0x0, 0x0, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffff00], 'bond_slave_0\x00', '\x00', {}, {0xff}, 0x3c, 0xfb, 0x1, 0x2}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x9, 0x6, 0x78d1, 'netbios-ns\x00', 'syz1\x00', {0x70}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) getsockopt$inet6_udp_int(r6, 0x11, 0x65, 0x0, &(0x7f0000000040)) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdir(0x0, 0x2c) listen(0xffffffffffffffff, 0x5) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 1m7.875521077s ago: executing program 0 (id=225): unshare(0x20400) r0 = timerfd_create(0x9, 0x800) timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") chmod(&(0x7f0000000280)='./file1\x00', 0x169) 1m7.565461957s ago: executing program 37 (id=225): unshare(0x20400) r0 = timerfd_create(0x9, 0x800) timerfd_settime(r0, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") chmod(&(0x7f0000000280)='./file1\x00', 0x169) 55.427041875s ago: executing program 9 (id=229): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd89, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 55.115254239s ago: executing program 9 (id=230): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{}, {@max_read={'max_read', 0x3d, 0x8c}}, {@blksize}], [{@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x6f, 0x30, 0x34, 0x65, 0x63, 0x66, 0x31, 0x39], 0x2d, [0x65, 0x64, 0x39, 0x2c], 0x2d, [0x62, 0x38, 0x32, 0x39], 0x2d, [0x0, 0x31], 0x2d, [0x34, 0x35, 0x66, 0x62, 0x34, 0x62, 0x35, 0x30]}}}]}}, 0x1, 0x0, &(0x7f0000000400)="30c50006f1804a726f4d4dbec0e267137dd40fb1b5289d82d379dc578e77787546") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) (async) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x240089c) (async) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)="002145000b2c000b0000400600000a0000010a000002005000500000000100000002b11003e800000000010101011ccb015c3b60fcc5f8b04b5b1c4cfba2ae7047078ff481e579", 0x47}], 0x1, 0x800, 0x6) (async) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000000040)=0x2, 0x3008000) (async) sendfile(r0, r0, 0x0, 0x5) 53.944749147s ago: executing program 9 (id=231): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40040) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002a0001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x2acc, &(0x7f0000000540)={0x0, 0xcf0b, 0x20, 0x3, 0x400015}, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000000180)) sync() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000800)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) write$P9_RSETATTR(r3, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0xffac) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x8}}, 0x0, 0x0, 0x0, 0x4, 0x94}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xcb, &(0x7f0000000000)={[{@cruft}, {@check_strict}, {@map_off}, {@showassoc}, {@utf8}, {@map_normal}]}, 0x1, 0x56e, &(0x7f0000000b00)="$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") fadvise64(r3, 0x2, 0x7, 0x5) r10 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r10, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@report={0x9c, 0x29, 0x1, 0x70bd2b, 0x25dfdbfe, {0x33, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@empty, 0x7ff, 0x6, 0x4e23, 0x0, 0x0, 0x130, 0xa0, 0x90}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @iptfs_max_qsize={0x8, 0x28, 0xdc}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008815}, 0x4000) 50.418939235s ago: executing program 9 (id=235): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0'}, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x324, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2e8, 0x3, 0x0, 0x1, [{0x2e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "31d6a42416a31ac04fa9cd300308cd4447aa2a938f78a67449a1581c4602223a7fe87e9009fb65e2b24f6232fd0e77a09c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x46, 0x6, 0x1, 0x0, "d4fa656e9a18bc957bbf062ba4de11100a8a0551708583d498290f32843b8fe1ca4c4d5bafc7bf98c2e77921c1658b7b27cec0cfc6a7d040b3a550342c9d2578e411"}, @NFTA_SET_ELEM_EXPRESSIONS={0x164, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x64, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x30, 0x1, "2b4d28843df400d23ad46bcc88168dcf6d18b1407059a21793c08475211c5f981af8f7b44eb0c4dfd3b01960"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x34c}, 0x1, 0x0, 0x0, 0x10081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/error_log\x00', 0x90000, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpquota}, {@usrquota}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) 49.54550109s ago: executing program 8 (id=237): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettfilter={0x5c, 0x2e, 0x0, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x3, 0x2}, {0x7, 0x6}, {0x3, 0x4}}, [{0x8, 0xb, 0x1a75}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xa8}, {0x8, 0xb, 0xffd}, {0x8, 0xb, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040091}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r6, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e5000200000000f5e400fcff0000000085000000ae0000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) modify_ldt$read(0x0, &(0x7f0000000240)=""/41, 0x29) write$proc_mixer(r8, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8=r4, @ANYRESHEX=r3], 0xb0) 48.590542688s ago: executing program 9 (id=239): unshare(0x22020600) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) 47.976267344s ago: executing program 9 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}, 0x91ffffff}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, '\x00', "17197bb86696ce1d27a0442d148a416e", "82028d89", "218c005d8ceddfc5"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x80}, 0x7}}}, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) munlockall() sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) getrusage(0x2, 0x0) read$FUSE(r2, &(0x7f0000003500)={0x2020}, 0x2020) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x200, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6f, @loopback, 0x1000}, 0x1c) 46.478422074s ago: executing program 38 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}, 0x91ffffff}], 0x49, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000004c0)=@gcm_128={{0x304}, '\x00', "17197bb86696ce1d27a0442d148a416e", "82028d89", "218c005d8ceddfc5"}, 0x28) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_CLEAR_ACCEPT_LIST={{0x80}, 0x7}}}, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) munlockall() sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) getrusage(0x2, 0x0) read$FUSE(r2, &(0x7f0000003500)={0x2020}, 0x2020) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x200, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6f, @loopback, 0x1000}, 0x1c) 46.457979784s ago: executing program 8 (id=244): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/92, 0x5c}, 0xf3de}], 0x1, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) 44.115059605s ago: executing program 8 (id=247): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x40f1, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x30, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='.\x00') landlock_restrict_self(r0, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000008940)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @remote, 0x7, 0x1000001}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) 43.452612749s ago: executing program 8 (id=249): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0'}, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x324, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2e8, 0x3, 0x0, 0x1, [{0x2e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "31d6a42416a31ac04fa9cd300308cd4447aa2a938f78a67449a1581c4602223a7fe87e9009fb65e2b24f6232fd0e77a09c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x46, 0x6, 0x1, 0x0, "d4fa656e9a18bc957bbf062ba4de11100a8a0551708583d498290f32843b8fe1ca4c4d5bafc7bf98c2e77921c1658b7b27cec0cfc6a7d040b3a550342c9d2578e411"}, @NFTA_SET_ELEM_EXPRESSIONS={0x164, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x64, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x30, 0x1, "2b4d28843df400d23ad46bcc88168dcf6d18b1407059a21793c08475211c5f981af8f7b44eb0c4dfd3b01960"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x34c}, 0x1, 0x0, 0x0, 0x10081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/error_log\x00', 0x90000, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpquota}, {@usrquota}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) 42.521477597s ago: executing program 8 (id=250): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r0, 0xc138fd89, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") 39.073243498s ago: executing program 8 (id=256): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/92, 0x5c}, 0xf3de}], 0x1, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) 37.127526013s ago: executing program 39 (id=256): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/92, 0x5c}, 0xf3de}], 0x1, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) 23.643400327s ago: executing program 4 (id=284): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000001700)="$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") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000600), 0x2008800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="f75f656fba500480e071a43bab315d"]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x63) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x41841) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0}, 0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}]}]}, 0x2c}}, 0x24008844) close(r6) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x253}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x85, &(0x7f0000000740)={0x0, 0x88, "0200000000000000703fe6153c598ae93aa83725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc58041310b18d364b87808f8a7494c5de7f7ba36ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e725d000000000000007b2858f76d3c773b57"}, &(0x7f0000000040)=0x90) setns(0xc9, 0x0) r8 = socket(0x2a, 0x2, 0x9) connect(r8, &(0x7f0000000240)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80) 20.34824891s ago: executing program 6 (id=288): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x107, 0xb, 0x77, 0xff}, 0x1f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x8, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c73, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x7, 0x6, 0x6, 0x5, 0x80001, 0x40], [0x10000007, 0x9, 0x80000130, 0x8006, 0x5, 0xfffffff3, 0x1, 0xc8, 0xf9, 0xe, 0x7, 0x1, 0x9, 0xfffffffc, 0x40000003, 0x0, 0x0, 0x5, 0x42f, 0xc, 0x312, 0x9, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x800, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0xfff, 0x4, 0xffff80f1, 0x8, 0x2, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x1, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x2, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x4, 0xd, 0x800003, 0x1200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x1000006, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x11fffe, 0x3, 0x0, 0x80aaed, 0x4, 0x2], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0x1000, 0x7f, 0x4, 0x5, 0x1, 0xffffffff, 0x14c, 0x100, 0x6, 0x96, 0xffffffff, 0x80000001, 0x0, 0x4, 0xc8, 0xfffffffd, 0x5, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x9, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0x4, 0xfff]}, 0x45c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000440)={@multicast2, @loopback, @local}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x60000600) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r2, &(0x7f0000001300)=ANY=[@ANYRES8, @ANYBLOB="b4"], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x180940, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x801a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4020744f, &(0x7f0000000040)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 15.673026233s ago: executing program 4 (id=295): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4002, &(0x7f0000000240)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030312c747970653d98acdea62c706172743d3078303030303030303030303030313030392c6e6c733d63703733372c00"], 0x1, 0x5f1, &(0x7f000000ab40)="$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") (async) lstat(&(0x7f0000000100)='127.0.0.1:/test\x00', 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='127.0.0.1:/test/../file0\x00', 0x0, 0x100) 15.408302171s ago: executing program 6 (id=296): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mount(&(0x7f0000000080)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='ocfs2_dlmfs\x00', 0x800, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xffff, 0x8001, 0x0, 0x3, 0xa, 0xa0, 0x80, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xe8}, 0x400, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in6=@mcast2, 0x3500, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r6, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) 15.010824118s ago: executing program 4 (id=298): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/41, 0x29}], 0x1, 0x0, 0x0) write$sysctl(r0, &(0x7f0000000080)='4\x00', 0x2) writev(r0, &(0x7f00000003c0), 0x100000000000022d) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1f45, 0x201eb7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 11.430566728s ago: executing program 4 (id=300): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0'}, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_DELSETELEM={0x324, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2e8, 0x3, 0x0, 0x1, [{0x2e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xbc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x35, 0x1, "31d6a42416a31ac04fa9cd300308cd4447aa2a938f78a67449a1581c4602223a7fe87e9009fb65e2b24f6232fd0e77a09c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_USERDATA={0x46, 0x6, 0x1, 0x0, "d4fa656e9a18bc957bbf062ba4de11100a8a0551708583d498290f32843b8fe1ca4c4d5bafc7bf98c2e77921c1658b7b27cec0cfc6a7d040b3a550342c9d2578e411"}, @NFTA_SET_ELEM_EXPRESSIONS={0x164, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}, {0x64, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}]}}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_DATA={0x78, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x30, 0x1, "2b4d28843df400d23ad46bcc88168dcf6d18b1407059a21793c08475211c5f981af8f7b44eb0c4dfd3b01960"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x34c}, 0x1, 0x0, 0x0, 0x10081}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/error_log\x00', 0x90000, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpquota}, {@usrquota}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) 11.203716308s ago: executing program 4 (id=301): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xc00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x8, 0x0, 0x8000) 11.102451722s ago: executing program 6 (id=302): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000200000010ef0ec472000000000001090224000100005000090400050203000300092100000901221800090581e5ed144a11dce748ed0310000038799f5a0d0bbed37c5e3248f2782075b4ed2836e1272deeb2b91030aafa3867113c1ed208c5542cdff63717d9db8fe6a178fcdd227b4fb0f37ee124c9a1eb82a7b5471bc4f2"], 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r1, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendfile(r0, r2, &(0x7f0000000180)=0x5, 0x8000) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d9cd28575a6a50679baf75e3aa7774f87986f8e5fa9592fc1e4d2c2bfb760eaaae9b07184413095101a54652112710cf34dbce2fbc7f92e5b369c489d398466c576a906fefe1324aa5512cb91e27f59c4566679897ac10faca1e6e67db002aeec1a4c923d491db6", @ANYRES16=0x0], 0x1, 0x195, &(0x7f0000000880)="$eJzsVb1OKkEU/mYZduEW997amFhoFAphWdTYaWV4AGsjwRWJiz8siUIosOIdLG14Ed/BQmODhTGxwN6MmZ2z62JiYYLJauZL4Du/e85h2DMH/qlvAXgd92rYRIAU/uKWMXAAc0zZtizFT6biAumPXHGe7FfEd8R+p3tY9Ty39VFgn7u+KkztQckWdr6/hDzMBEz6ywV6ZZCUfhIjpKb993tXNy4MPAe77Gbcq0lhF4AQQgDheYDFY2Qz11EMMMODD0tBRDEyUypLAIrt5knR73SXG81q3a27R45TXrNXbHvVKe43PNdW3yxWwqC6kvMA5E7NxvxpAPdZFfMHk2Cx1sjP4rlmbDnn5idzDcaj3JAz5JO5tNshf4JtLAa+sz4TBED8o4hgpAoYLkkp8Vh/arZM4CjUjr29ARjkvSIswB6CwwBXaSOkQ0WmRopbXu+HbQ+IF4grxEPiEXF4Z4V3EQ+e8EBarg+YOK+2262SNCkpsjmRzfkfVTao6os5OdysBQ0NDQ0NDQ2NH4a3AAAA//+8o2BX") lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071181e000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$afs(&(0x7f00000000c0), &(0x7f0000000140)='.\x02\x00', &(0x7f0000000340), 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB='autocell,flock=openafs,floc', @ANYRESDEC, @ANYBLOB, @ANYRESDEC, @ANYBLOB='\"\x00']) 10.906965237s ago: executing program 5 (id=303): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="1201000200000010ef0ec472000000000001090224000100005000090400050203000300092100000901221800090581e5ed144a11dce748ed0310000038799f5a0d0bbed37c5e3248f2782075b4ed2836e1272deeb2b91030aafa3867113c1ed208c5542cdff63717d9db8fe6a178fcdd227b4fb0f37ee124c9a1eb82a7b5471bc4f2"], 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r1, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendfile(r0, r2, &(0x7f0000000180)=0x5, 0x8000) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="3d0d8f929d36bc9c19d99c138002cdf0e58683ee6a6abe3f845d9cd28575a6a50679baf75e3aa7774f87986f8e5fa9592fc1e4d2c2bfb760eaaae9b07184413095101a54652112710cf34dbce2fbc7f92e5b369c489d398466c576a906fefe1324aa5512cb91e27f59c4566679897ac10faca1e6e67db002aeec1a4c923d491db6", @ANYRES16=0x0], 0x1, 0x195, &(0x7f0000000880)="$eJzsVb1OKkEU/mYZduEW997amFhoFAphWdTYaWV4AGsjwRWJiz8siUIosOIdLG14Ed/BQmODhTGxwN6MmZ2z62JiYYLJauZL4Du/e85h2DMH/qlvAXgd92rYRIAU/uKWMXAAc0zZtizFT6biAumPXHGe7FfEd8R+p3tY9Ty39VFgn7u+KkztQckWdr6/hDzMBEz6ywV6ZZCUfhIjpKb993tXNy4MPAe77Gbcq0lhF4AQQgDheYDFY2Qz11EMMMODD0tBRDEyUypLAIrt5knR73SXG81q3a27R45TXrNXbHvVKe43PNdW3yxWwqC6kvMA5E7NxvxpAPdZFfMHk2Cx1sjP4rlmbDnn5idzDcaj3JAz5JO5tNshf4JtLAa+sz4TBED8o4hgpAoYLkkp8Vh/arZM4CjUjr29ARjkvSIswB6CwwBXaSOkQ0WmRopbXu+HbQ+IF4grxEPiEXF4Z4V3EQ+e8EBarg+YOK+2262SNCkpsjmRzfkfVTao6os5OdysBQ0NDQ0NDQ2NH4a3AAAA//+8o2BX") lseek(0xffffffffffffffff, 0x3, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) mount$afs(&(0x7f00000000c0), &(0x7f0000000140)='.\x02\x00', &(0x7f0000000340), 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB='autocell,flock=openafs,floc', @ANYRESDEC, @ANYBLOB, @ANYRESDEC, @ANYBLOB='\"\x00']) 10.252543362s ago: executing program 4 (id=307): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x7a) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000011c0)={0x0, 0x5, &(0x7f0000001140)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x1, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x8004}, 0x8) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000007033ffff18000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8000000002000000000000008000"/28], 0x50) openat$audio(0xffffffffffffff9c, &(0x7f0000001100), 0x18001, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001080)=0x0) syz_open_procfs(r7, &(0x7f00000010c0)='net/rt_cache\x00') prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0) brk(0xfffdfffffffffffd) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.32941282s ago: executing program 40 (id=307): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x7a) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000011c0)={0x0, 0x5, &(0x7f0000001140)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x1, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x8004}, 0x8) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000007033ffff18000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8000000002000000000000008000"/28], 0x50) openat$audio(0xffffffffffffff9c, &(0x7f0000001100), 0x18001, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001080)=0x0) syz_open_procfs(r7, &(0x7f00000010c0)='net/rt_cache\x00') prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0) brk(0xfffdfffffffffffd) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.14763601s ago: executing program 7 (id=309): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, &(0x7f0000000080)) r1 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) setresuid(0x0, 0xee01, 0xee00) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) 7.656133334s ago: executing program 7 (id=310): r0 = fsopen(0x0, 0x1) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f000057e000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000140)={0x0, 0x9cf4, 0xc002, 0x5, 0x10026c}) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x3, 0x200000) ioctl$I2C_TIMEOUT(r1, 0x702, 0xfffffffffffffffb) landlock_restrict_self(0xffffffffffffffff, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000900008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x8, &(0x7f00000001c0)=ANY=[], 0x1, 0x10600, &(0x7f0000020cc0)="$eJzs3D1vW1UYB/DHCX2llAr1hQHElRBSItVWnb4IFlSgFSDaqqIwMIFju5Zb2zeK3cR0YYEBiYmFL8EEn4EFdlZY2FhAYqso8r0niEAlIHHjQH4/6eZ/7vG5j8+xvBzf6AawZx3Lfvm5EkfjUETMR8SRiKJdSUfhYhlPRsQzqWsuHZXU/3vH/og4HBFHJ8XLmpX00lO/3vv+i2+uPP3xd59++8FnP92YzYqB3eC5iOivlO31fpl5p8xbqb+x1i2yf24tZflC/3Y6z8tcby8XFdYbG+MaRZ7tlOPzlTvDSd7sNZqT7HRvFv0rg/INh2udjTrFBbcaq8V5q71cZHeYF9m5W85rnPLucFTWaaV67xflYzTayLK/PW6X61m5XWRzMEr9Zd281R5Pci1lerto5r1WMY/lLX/Mu96V7uDOOFtrrw67+SA7X6s/X6tfqNZX81Z71D5XbfRbF85lC53eZFh11G70L3byvNNr15p5fzFb6DSb1Xo9W7jUXu42Blm9XjtbO1M9v5hap7NXr72d9VrZwiRf7g7ujLq9YXYzX83KKxazpdrZFxazZ+vZjavXs+tvXr589fpb715659pLV19/JQ36y7SyhaUzS0vV+pnqUn1xqys/fb+0V9dfGle2dz17nO8PwL+2lf3/nP0/sE32//b/saf3/9Yf9v9sl+8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCe9cO+L18rGsfK80dT/2Op64mIOBURJyPiRETcf4D52L+p5vGIqKT2g8bv+9McvqpEUWFyzYF0HI6Ii+m49/jD/hQAAADg/+vzrz/8KGJ+0iz+vDjrCbGT0o82B6dVr/jJ55FpVTteFBtPqdqJjZJTcTIi9h37cUrVTkXE3JH3plTtH5nfFAf/EJUy5nZyNgAAwM7YvBOY2u4NAACAXeeTWU+A2Sju16b/xU/3gg+UkW4IHto4e2MGswMAAACmoTLrCQAAAAAPXbH///vn/817/h8AAAD8h5XP/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA3du7mNnEgigP4A9YL+6VFKz5a4bTaIweK2BJyTAFJN7lRQyREHeSWEiKIsCdSHHGI5DFO0O8nmRlb8Nczt+exBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE0PxXp5t725bZqzPzST524AAACAU3bFellOxtX5j3T9V7r0JyLmETGLiGlEnOrdB/G1ljmJiF6an/p+8aaG+4gy4fibYTq+R8S/dDz9bvtfAAAAgMu13SxWEYPjtPz423VBnFN6aDPKlVc+8vmSK21Shl1nSpu+RGYxi4hi/JgpbR4R/Z//M6W9y6A2jF4NvWron7MaAADgPOqdQLbuDQAAgA/nqusC6Ea5XpvexU9rwcNqSAuC32pnAAAAwCfU67oAAAAAoHVl/2//PwAAALhs1f5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtGlXrJfbzWLVNGd/aCbP3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLM/LykYwkAQBvt/qncK3v9WSoNudeWuCgIfM4QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCuv4+R9xqexJvl22vh1PJL8u2pMXTXmrhtLL4zb57bnfwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCzPy8nAAIxGAbjW3ta7L8mL8oPevYmCDMgfCQEWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBvuvur/okhsVfVmGliyrhV1ZxVYskqseYgseWgvf3tOD94EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMUOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX2590mYiCMwuj1AAInBFACucWjBhIiBCXwkJAsuQYKoCESIlKLRtgWdiXvON7MG+w5yf2CCeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OCsd744StKkzFlSHj4v/4+TnKR8jeP96ZTN9+pvONvm88/vY82LPF21Sdo0S5wDALC4bt4pzvP+0b9dJ9Pe1L2te1e3exn61/1+GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA27NzPSxRvHAfwZ1d3v1+7dekQBWVBQtT6A3EVL0WBBf0D3hbdRFpL1ENKEHaRLkGX7l261M1Tp/6DTl0iCuq+QUEEQRi7O2OPqbFedlZ6veCZ+TgMM88zB+E9n1EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOoL4ezqd1LoRwvPd33fD2y72Zvfb1+8dG0/Ho5PPF+JqNSxRCCDfna9XBDq6lm50Nw839h88PB+Jn+Od5y6trtyq1WnVJoVAotosMfmkBAHBoFZLRyPUfC5tTjWO5yRC2nu7M/+eiOrSZ/7eeDLyO7xXn/6GOrbC7pfl/+vrGxN/yf2llYbG0vLp2YX6hMledq94eGhsfGxwpjw6PlZrvU0reqgAAALC/YjLi/J+f3N3/PxLVoc38/+rlten4Xj3y/y5p/r/c3/+svf5/BpMEAAD4Rxw99e1rbo/juWIx3K2srCwNtbbbPw+3thlM9cD+S0ac/3sms54VAAAA0An19dyO/v9sVIc2+//vv185EV+zJ4TQl/T/L87cqc12bjldK+3/T1yq3Mj67/8zWD4AAAAd0peMuP9faH7/nz+dnpMPIQycadXJvwFsK///fDD+Jr5X/P3/SOeW2JXy5dbzSPP/xrsX8/vl/+a55RB6yxlNFgAAgEPv/2Q08v+nwubU0o/HV4u+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/s2DFKM0EUB/BJNvm+RjEgiKWFNhaigmAVsBAkHsJCFASPEBAPoOBZLLyDSOqk9AApvIHMZEfCNirIrobfDyb/R9hk3840eQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE9Nj8JGrov40pvV7fK98dvwPOakkumzN2sHccW6VW/bf856mc+T06fx3B62DpvrCQAAgMVT5Pk+hPDafTyJ2e6n+X8rXxNn/uHyrM7zfHXuz5ln/7iWHoqzjxv1ZvfphhAur64vdmt7wt9tM+ynHLxs38/vYfW6lS98VyedT/qHpkjH1h7crk67addbd6PR8b9U/v/5pwAAvmsnZ1nk30cx95psDICF1SlXmJv/i36zPQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU4T0AAP//F6aahA==") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r2, 0xfffffffffffffffd, 0xbb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x8000003, {0x2, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}}}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xb4}}, 0x24040810) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r4, 0x43, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r5 = fsmount(r0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000280), 0x0, 0x0, 0x0, 0x1}, 0x38) fchdir(r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 7.537899547s ago: executing program 5 (id=311): creat(0x0, 0xc7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8410) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0), 0xfc, 0x559e, &(0x7f000000ac40)="$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") prctl$PR_SET_PDEATHSIG(0x1, 0xd) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000f1000200060000000000000000", @ANYRESHEX], 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x0, 0x1}, 0x20) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$unix(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0x1, 0x5, 0x8, 0x1fc, 0xd615, 0x9, 0x535, 0xfffffffd, 0x1000, 0xff, 0x0, 0x0, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@gettaction={0x18, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x20008000) 5.705614644s ago: executing program 5 (id=312): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r6, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e5000200000000f5e400fcff0000000085000000ae0000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) modify_ldt$read(0x0, &(0x7f0000000240)=""/41, 0x29) write$proc_mixer(r8, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8=r4, @ANYRESHEX=r3], 0xb0) 2.886023735s ago: executing program 6 (id=313): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r6, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e5000200000000f5e400fcff0000000085000000ae0000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) modify_ldt$read(0x0, &(0x7f0000000240)=""/41, 0x29) write$proc_mixer(r8, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8=r4, @ANYRESHEX=r3], 0xb0) 1.731973826s ago: executing program 7 (id=314): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000007b2b24d7c628b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1, r0}, 0xc) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x400, 0xe4) move_mount(r2, 0x0, 0xffffffffffffffff, 0x0, 0x23d) munmap(&(0x7f0000f8d000/0x2000)=nil, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/ipc\x00') ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc018aa09, &(0x7f0000000000)={{&(0x7f0000f8d000/0x3000)=nil, 0x3000}, 0x1}) 1.601740986s ago: executing program 5 (id=315): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00') getdents64(r1, &(0x7f0000000200)=""/63, 0x3f) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000000)) getdents(r1, 0xffffffffffffffff, 0x7a) 1.518294807s ago: executing program 6 (id=316): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x4000000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, {0xffffffff, 0x0, 0x9, 0xa}]}) 1.43164932s ago: executing program 7 (id=317): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000100)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xc00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r0, 0x8, 0x0, 0x8000) 839.230248ms ago: executing program 6 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_usb_connect$uac2(0x2, 0x8c, &(0x7f0000001140)=ANY=[@ANYBLOB="1201500200000010d118052d40000102030109027a000301098001080b01020103201609040000000101200009240101010a1a00070c240304030301011077ee0605240401ff090401000001022000090401010101022000090501090000000607082501003f1cff03090402000000090402010101022000090582090800800f0f082501823f00f9ff"], &(0x7f0000001540)={0x0, 0x0, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="37e124efb775bf51106e74560a9a2739c6a5282ece61235192b4cd7b420c4099b643b50b17ecb9b368048487669cb747e62b1052cba5529585d8309ea3d2f28268c3b38ef6d646b684746a0b715ce8654eff9c6a45228ec5cc87dff30a83000000000000"]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x70bd25, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x11}, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000002c0), 0x4) sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) sendto$inet6(r3, 0x0, 0x0, 0x40080, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r4, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x700, 0x8000, 0xfff, 0x9, {{0x18, 0x4, 0x2, 0x9, 0x60, 0x65, 0x0, 0x7, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x13, 0x2d, [@multicast2, @private=0xa010100, @private=0xa010101, @broadcast]}, @ra={0x94, 0x4}, @generic={0x7, 0x5, "78edbb"}, @end, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0xbf, [@local, @private=0xa010100, @rand_addr=0x64010100]}, @cipso={0x86, 0x1c, 0x2, [{0x0, 0x8, "a2756c13ecb0"}, {0x5, 0xb, "9aa360a7bad70d06e3"}, {0x5, 0x3, "d3"}]}]}}}}}) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000600)={@loopback, @private=0xa010100, r5}, 0xc) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000018c0)={&(0x7f0000003ec0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000003c00)=[@mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x1000}, &(0x7f00000000c0)=0x1ff, 0x0, 0x412f, 0x8, 0x8, 0x6, 0x55, 0x8}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x2}, 0x0, 0x0, 0x5, 0x8, 0x4, 0x1, 0x0, 0x5}}], 0xb0, 0x54}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) fcntl$getflags(r6, 0xb) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xb, 0xb}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a03000000000000000000010080000900010073797a30000000002c0000001b0a01010000000000000000010000070900010073797a3000000000090003"], 0xfc}}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="70000000420001000000000000000000030100000f0000004e0001000011223344556677889901800000000000000000060001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e1bafaa4e97d65500797db9030c8df7d33d4036b5000004000280040003"], 0x70}, 0x1, 0x0, 0x0, 0x4400c005}, 0x80) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r12, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000480)=""/40, 0x28}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/72, 0x48}, {&(0x7f0000002a00)=""/100, 0x64}], 0x7}, 0x9}], 0x1, 0x20, 0x0) 810.336897ms ago: executing program 5 (id=319): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000000300)=ANY=[@ANYBLOB="7379735f697a00c5f861626c652c73686f72746e616d653d6d697865642c74696d655f6f66667365743d3078303030303030303030303030303438622c6e6f6e756d7461696c3d302c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c757466383d312c756e695f786c6174653d302c646973636172642c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c757466383d302c00"], 0x0, 0x2bf, &(0x7f0000002bc0)="$eJzs3U1rE2sUwPHTpGnSlDZZlAv3wuUerhvdDG38BEFaEANKbURdCFM70ZAxE2ZiJCK2O7d+juLSlYL6Bbpx517cFEFw04U4kmQmpuloX7Sd1vx/UOZ0zpw8Tzoz5UyhT7auP71Xq3hGxWxKIqOSEFmXbZF8JwqMBdtEN56QQetyburzu3+v3rh5qVgqLSypLhaXzxdUdea/Vw8ePfv/TXPq2vOZl2nZzN/a+lR4v/nX5t9bX5fDV3dETF1xnKa5Ylu6WvVqhuoV2zI9S6t1z3Kbaqob5iu202i01ayvTmcbruV5atbbWrPa2nS06bbVvGNW62oYhk5nZdQkD1xR3lhaMotHMhnEYTJqp+sWzWRksrxxHJMCAAAnS1z9/92qp1VP606nv/9J/5+Qwfwe/b/ISPf/h9X4cSqyn8Tp0un/s8H9uxP9PwAAAAAAAAAAAAAAAAAAAAAAp8G27+d838+F2/ArLSIZEQm/j3ueOBqc/9E28I97GRH7SavcKve2vXyxIjNiiyVzKZEv3esh0IsXL5YW5rQrL6/ttaB+rVVOSrpXX+0Plo+un+/V62D9mqQkG9Z3xi9ITmaj6wsR9a3yhJw946eDkS0xJCdvb4sjtqx2r+vv9Y/nVS9cLg3VT3aPAwAAAADgT2Bo367n927e0HDZkKF8b2f/+XxOcnv8fWDo+Xpc/hmP730DAAAAADBKvAmpmbZtuV77YWxB6njGChez/S0vKBLnT6wTZPZ78LiIBHtexDznAwUJERlOpXbtiQ6Sv3aWP4rsvC9mYz/dhw78ZP9a/XB/4GNi9iiP8ZcSAAAAgCMRNv1jcU8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIARtt9VxMLjD7MI2cBwyXjeJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAyfAsAAP//+xwQhQ==") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x3, 0x0, 0x2, 0x3, 0xa, 0xfffe}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) syz_create_resource$binfmt(&(0x7f00000000c0)='./file0\x00') read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 699.523299ms ago: executing program 7 (id=320): openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x521ca1, 0x0, 0x80, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x19a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008014}, 0x20000081) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xe, '\x00', {0xe, 0x6, "ea785a", 0x7fff, 0x2c, 0x0, @remote, @mcast2, [@routing={0x2c, 0x0, 0x0, 0x3}]}}}}}}}, 0x0) 414.506437ms ago: executing program 5 (id=321): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r2, 0x0, 0x8010) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='1', 0x1) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) close_range(r6, r7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e5000200000000f5e400fcff0000000085000000ae0000009500000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prlimit64(0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) modify_ldt$read(0x0, &(0x7f0000000240)=""/41, 0x29) write$proc_mixer(r8, &(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES8=r4, @ANYRESHEX=r3], 0xb0) 0s ago: executing program 7 (id=322): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x38000, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r3, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f00000004c0)=""/24, 0x18, 0x0, 0x0}}, 0x10) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x90, 0x2}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000005c0)={r6, 0xde6, 0x20}, &(0x7f0000000600)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1a04bc0101e6010000000000fdffff6600000000b5040000308700007100000095bcf53aa4cec4a8aa634671439875034d4f7f2dcbebef613114f685d695865ffaa95b9676644972409b273a7a302e91e1ebac08f1af770a79c257f94cc079b86c507d190101000000000000000ba871395e786bca03befe48d50000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x28, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000700090000000000e204000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003d5102001000000095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000851000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000851000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x9, 0xa1, &(0x7f0000000300)=""/161, 0x0, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xe, 0x2, 0x3}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r0, r0], 0x0, 0x10, 0xbac}, 0x94) kernel console output (not intermixed with test programs): nted, running fsck.hfsplus is recommended. mounting read-only. [ 172.071542][ T6265] team0 (unregistering): Port device team_slave_0 removed [ 172.624172][ T5015] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 172.774990][ T5015] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.776392][ T5015] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.776423][ T5015] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.776446][ T5015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.776496][ T5015] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.779378][ T5015] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.779405][ T5015] usb 3-1: Product: syz [ 172.779424][ T5015] usb 3-1: Manufacturer: syz [ 172.865351][ T5015] cdc_wdm 3-1:1.0: skipping garbage [ 172.865375][ T5015] cdc_wdm 3-1:1.0: skipping garbage [ 172.869917][ T5015] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 172.870366][ T5015] cdc_wdm 3-1:1.0: Unknown control protocol [ 173.074968][ T5015] usb 3-1: USB disconnect, device number 7 [ 173.435359][ T6315] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 173.441269][ T6315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.442304][ T6315] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 173.478449][ T6315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.522632][ T6572] loop1: detected capacity change from 0 to 128 [ 173.536938][ T5015] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 173.559161][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 173.703067][ T5015] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.720131][ T5015] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.720167][ T5015] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.720191][ T5015] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.720251][ T5015] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.748587][ T5015] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.748621][ T5015] usb 3-1: Product: syz [ 173.748640][ T5015] usb 3-1: Manufacturer: syz [ 173.800605][ T5015] cdc_wdm 3-1:1.0: skipping garbage [ 173.800630][ T5015] cdc_wdm 3-1:1.0: skipping garbage [ 173.849314][ T5015] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 173.849343][ T5015] cdc_wdm 3-1:1.0: Unknown control protocol [ 173.975578][ T5745] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 174.114979][ T5745] usb 2-1: device descriptor read/64, error -71 [ 174.338758][ T6265] IPVS: stop unused estimator thread 0... [ 174.365311][ T5745] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 174.504226][ T5745] usb 2-1: device descriptor read/64, error -71 [ 174.776751][ T6594] loop0: detected capacity change from 0 to 32768 [ 174.801063][ T5745] usb usb2-port1: attempt power cycle [ 174.801221][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE [ 174.829935][ T6594] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 174.829964][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.0.174 Not tainted syzkaller #0 PREEMPT(full) [ 174.829995][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 174.830011][ T6594] Call Trace: [ 174.830021][ T6594] [ 174.830032][ T6594] dump_stack_lvl+0xe8/0x150 [ 174.830079][ T6594] sysfs_create_dir_ns+0x271/0x2a0 [ 174.830128][ T6594] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 174.830176][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.830208][ T6594] ? do_raw_spin_unlock+0xf5/0x200 [ 174.830256][ T6594] kobject_add_internal+0x622/0xcd0 [ 174.830293][ T6594] kobject_init_and_add+0x12b/0x1a0 [ 174.830327][ T6594] ? __pfx_kobject_init_and_add+0x10/0x10 [ 174.830357][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.830390][ T6594] ? __raw_spin_lock_init+0x45/0x100 [ 174.830433][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.830464][ T6594] ? __init_swait_queue_head+0xa8/0x150 [ 174.830505][ T6594] gfs2_sys_fs_add+0x257/0x480 [ 174.830546][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.830578][ T6594] ? is_dynamic_key+0x1aa/0x1c0 [ 174.830609][ T6594] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 174.830662][ T6594] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 174.830715][ T6594] gfs2_fill_super+0x1347/0x20d0 [ 174.830765][ T6594] ? __pfx_gfs2_fill_super+0x10/0x10 [ 174.830799][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.830838][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.830869][ T6594] ? sb_set_blocksize+0x155/0x240 [ 174.830902][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.830933][ T6594] ? setup_bdev_super+0x586/0x680 [ 174.830967][ T6594] get_tree_bdev_flags+0x430/0x4f0 [ 174.830996][ T6594] ? __pfx_gfs2_fill_super+0x10/0x10 [ 174.831030][ T6594] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 174.831063][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.831104][ T6594] gfs2_get_tree+0x51/0x1e0 [ 174.831141][ T6594] vfs_get_tree+0x92/0x2a0 [ 174.831172][ T6594] do_new_mount+0x319/0xdc0 [ 174.831212][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.831250][ T6594] ? __pfx_do_new_mount+0x10/0x10 [ 174.831292][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.831324][ T6594] ? ns_capable+0x89/0xe0 [ 174.831363][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.831394][ T6594] ? path_mount+0x647/0x1050 [ 174.831437][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.831469][ T6594] ? user_path_at+0xd4/0x160 [ 174.831497][ T6594] __se_sys_mount+0x31d/0x420 [ 174.831543][ T6594] ? __pfx___se_sys_mount+0x10/0x10 [ 174.831581][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.831621][ T6594] ? srso_alias_return_thunk+0x5/0xfbef5 [ 174.831654][ T6594] ? __x64_sys_mount+0x20/0xc0 [ 174.831704][ T6594] do_syscall_64+0x166/0x520 [ 174.831742][ T6594] ? trace_irq_disable+0x3b/0x140 [ 174.831772][ T6594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.831807][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.831834][ T6594] RIP: 0033:0x7f4db1b9f3ca [ 174.831859][ T6594] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.831882][ T6594] RSP: 002b:00007f4db2a7de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 174.831911][ T6594] RAX: ffffffffffffffda RBX: 00007f4db2a7dee0 RCX: 00007f4db1b9f3ca [ 174.831931][ T6594] RDX: 0000200000037f40 RSI: 00002000000008c0 RDI: 00007f4db2a7dea0 [ 174.831950][ T6594] RBP: 0000200000037f40 R08: 00007f4db2a7dee0 R09: 0000000001010084 [ 174.831968][ T6594] R10: 0000000001010084 R11: 0000000000000246 R12: 00002000000008c0 [ 174.831986][ T6594] R13: 00007f4db2a7dea0 R14: 0000000000037fb5 R15: 0000200000000280 [ 174.832027][ T6594] [ 174.833711][ T6594] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 174.833733][ T6594] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 175.060683][ T2103] usb 3-1: USB disconnect, device number 8 [ 175.324266][ T5745] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 175.348368][ T5745] usb 2-1: device descriptor read/8, error -71 [ 175.999568][ T5745] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 176.014669][ T5745] usb 2-1: device descriptor read/8, error -71 [ 176.030878][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.030964][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.031094][ T6436] bridge_slave_0: entered allmulticast mode [ 176.040803][ T6436] bridge_slave_0: entered promiscuous mode [ 176.071726][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.071840][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.071991][ T6436] bridge_slave_1: entered allmulticast mode [ 176.099421][ T6436] bridge_slave_1: entered promiscuous mode [ 176.138323][ T5745] usb usb2-port1: unable to enumerate USB device [ 176.443773][ T6611] loop0: detected capacity change from 0 to 1024 [ 176.627488][ T6611] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 177.904256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 178.430873][ T6625] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 178.936331][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.799392][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e94000: rx timeout, send abort [ 184.017104][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 184.049935][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.082134][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.190402][ T6622] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff0x0000000000' [ 184.220439][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.299474][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055e94000: abort rx timeout. Force session deactivation [ 184.432741][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.569607][ T6436] team0: Port device team_slave_0 added [ 184.580682][ T6644] loop9: detected capacity change from 0 to 255852544 [ 184.599757][ T6436] team0: Port device team_slave_1 added [ 185.370415][ T4932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.372855][ T4932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.394483][ T4932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.406475][ T4932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.407195][ T4932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.435957][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.435977][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.436005][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.588774][ T42] team0: Port device netdevsim1 removed [ 185.640407][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.857672][ T6656] loop1: detected capacity change from 0 to 1024 [ 186.037867][ T6656] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 186.287659][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.287682][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.287718][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.458812][ T6315] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.229749][ T6676] loop2: detected capacity change from 0 to 128 [ 187.434759][ T5621] Bluetooth: hci4: command tx timeout [ 187.444283][ T2103] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.618851][ T2103] usb 2-1: Using ep0 maxpacket: 16 [ 187.642015][ T2103] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 187.659644][ T2103] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 187.659686][ T2103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 187.758242][ T2103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.758278][ T2103] usb 2-1: Product: syz [ 187.758297][ T2103] usb 2-1: Manufacturer: syz [ 187.758315][ T2103] usb 2-1: SerialNumber: syz [ 187.787942][ T2103] usb 2-1: config 0 descriptor?? [ 187.806725][ T2103] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 187.806764][ T2103] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 187.811519][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.880916][ T1537] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.881042][ T1537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.928342][ T1404] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.928464][ T1404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.973980][ T6436] hsr_slave_0: entered promiscuous mode [ 187.976945][ T6436] hsr_slave_1: entered promiscuous mode [ 188.409814][ T2103] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 188.413464][ T2103] em28xx 2-1:0.0: Config register raw data: 0x3f [ 188.413490][ T2103] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 188.413510][ T2103] em28xx 2-1:0.0: No AC97 audio processor [ 188.791795][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 188.813620][ T42] bridge_slave_1: left allmulticast mode [ 188.813654][ T42] bridge_slave_1: left promiscuous mode [ 188.813885][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.837729][ T42] bridge_slave_0: left allmulticast mode [ 188.837760][ T42] bridge_slave_0: left promiscuous mode [ 188.837985][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.030060][ T2103] usb 2-1: USB disconnect, device number 14 [ 190.294182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 190.704316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 190.767851][ T5621] Bluetooth: hci4: command tx timeout [ 191.057434][ T6704] loop1: detected capacity change from 0 to 1024 [ 191.058999][ T6704] EXT4-fs: Ignoring removed oldalloc option [ 191.059023][ T6704] EXT4-fs: Ignoring removed orlov option [ 191.092021][ T4932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.095932][ T4932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.100526][ T4932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.107777][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.108447][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 191.173467][ T6704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 191.173575][ T6704] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.262148][ T6704] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: comm syz.1.194: lblock 0 mapped to illegal pblock 0 (length 6) [ 191.262737][ T6704] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 191.262770][ T6704] EXT4-fs (loop1): This should not happen!! Data will be lost [ 191.262770][ T6704] [ 191.265457][ T6704] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.194: bg 0: block 112: padding at end of block bitmap is not set [ 191.270716][ T6704] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 191.270749][ T6704] EXT4-fs (loop1): This should not happen!! Data will be lost [ 191.270749][ T6704] [ 191.270769][ T6704] EXT4-fs (loop1): Total free blocks count 0 [ 191.270786][ T6704] EXT4-fs (loop1): Free/Dirty block details [ 191.270803][ T6704] EXT4-fs (loop1): free_blocks=0 [ 191.270820][ T6704] EXT4-fs (loop1): dirty_blocks=48 [ 191.270837][ T6704] EXT4-fs (loop1): Block reservation details [ 191.302084][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.348387][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.380179][ T42] bond0 (unregistering): Released all slaves [ 191.419226][ T1169] EXT4-fs error (device loop1): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 191.469802][ T6315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.969433][ T6720] loop9: detected capacity change from 0 to 255852544 [ 192.738276][ T42] hsr_slave_0: left promiscuous mode [ 192.761094][ T42] hsr_slave_1: left promiscuous mode [ 192.762140][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.762165][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.789038][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.789067][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.804111][ T5621] Bluetooth: hci4: command tx timeout [ 192.892561][ T42] veth1_macvtap: left promiscuous mode [ 192.892605][ T42] veth0_macvtap: left promiscuous mode [ 192.892726][ T42] veth1_vlan: left promiscuous mode [ 192.892821][ T42] veth0_vlan: left promiscuous mode [ 193.214109][ T5621] Bluetooth: hci2: command tx timeout [ 193.331531][ T6744] loop1: detected capacity change from 0 to 128 [ 193.607396][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.607460][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.784763][ T42] team0 (unregistering): Port device team_slave_1 removed [ 193.810077][ T6750] loop1: detected capacity change from 0 to 1024 [ 193.825860][ T6750] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 193.875618][ T42] team0 (unregistering): Port device team_slave_0 removed [ 194.258047][ T6754] gadgetfs: bound to dummy_udc driver [ 194.401515][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 194.401538][ T6758] openvswitch: netlink: Flow actions attr not present in new flow. [ 194.471681][ T6436] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 194.487569][ T6436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.488660][ T6436] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 194.509832][ T6436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.539731][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 194.555093][ T6436] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 194.577407][ T6436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.579917][ T6436] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 194.607080][ T6436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.882789][ T6770] loop0: detected capacity change from 0 to 4096 [ 194.885082][ T5621] Bluetooth: hci4: command tx timeout [ 194.982842][ T6770] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 195.004423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 195.128700][ T6769] FAULT_INJECTION: forcing a failure. [ 195.128700][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 195.128744][ T6769] CPU: 0 UID: 0 PID: 6769 Comm: syz.0.203 Not tainted syzkaller #0 PREEMPT(full) [ 195.128775][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 195.128792][ T6769] Call Trace: [ 195.128802][ T6769] [ 195.128814][ T6769] dump_stack_lvl+0xe8/0x150 [ 195.128860][ T6769] should_fail_ex+0x410/0x560 [ 195.128903][ T6769] should_failslab+0xa8/0x100 [ 195.128945][ T6769] ? vm_area_dup+0x28/0x760 [ 195.128974][ T6769] kmem_cache_alloc_noprof+0xa1/0x600 [ 195.129005][ T6769] ? vm_area_dup+0x28/0x760 [ 195.129041][ T6769] vm_area_dup+0x28/0x760 [ 195.129066][ T6769] ? dup_mmap+0x875/0x1dc0 [ 195.129097][ T6769] dup_mmap+0x87d/0x1dc0 [ 195.129146][ T6769] ? __pfx_dup_mmap+0x10/0x10 [ 195.129172][ T6769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.129206][ T6769] ? do_raw_spin_lock+0x12b/0x2f0 [ 195.129277][ T6769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.129309][ T6769] ? lock_acquire+0x115/0x350 [ 195.129341][ T6769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.129394][ T6769] copy_mm+0x115/0x480 [ 195.129436][ T6769] copy_process+0x1e79/0x4400 [ 195.129472][ T6769] ? futex_unqueue+0x211/0x240 [ 195.129524][ T6769] ? copy_process+0xd16/0x4400 [ 195.129584][ T6769] ? __pfx_copy_process+0x10/0x10 [ 195.129624][ T6769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.129670][ T6769] kernel_clone+0x2d7/0x940 [ 195.129718][ T6769] ? __pfx_kernel_clone+0x10/0x10 [ 195.129769][ T6769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.129802][ T6769] ? do_futex+0x3e7/0x4e0 [ 195.129850][ T6769] __x64_sys_clone+0x1b6/0x230 [ 195.129896][ T6769] ? __pfx___x64_sys_clone+0x10/0x10 [ 195.129956][ T6769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.129989][ T6769] ? rcu_is_watching+0x16/0xb0 [ 195.130025][ T6769] ? srso_alias_return_thunk+0x5/0xfbef5 [ 195.130073][ T6769] do_syscall_64+0x166/0x520 [ 195.130113][ T6769] ? trace_irq_disable+0x3b/0x140 [ 195.130144][ T6769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.130179][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.130208][ T6769] RIP: 0033:0x7f4db1b9e159 [ 195.130243][ T6769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.130266][ T6769] RSP: 002b:00007f4db2a7dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 195.130295][ T6769] RAX: ffffffffffffffda RBX: 00007f4db1e25fa0 RCX: 00007f4db1b9e159 [ 195.130321][ T6769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 195.130338][ T6769] RBP: 00007f4db1c3506b R08: 0000000000000000 R09: 0000000000000000 [ 195.130356][ T6769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.130374][ T6769] R13: 00007f4db1e26038 R14: 00007f4db1e25fa0 R15: 00007fff473ff958 [ 195.130417][ T6769] [ 195.286126][ T5621] Bluetooth: hci2: command tx timeout [ 195.654497][ T5745] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 197.306204][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.328379][ T5745] usb 2-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 197.329801][ T5745] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.329838][ T5745] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 197.340123][ T5745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.340156][ T5745] usb 2-1: Product: syz [ 197.340175][ T5745] usb 2-1: Manufacturer: syz [ 197.340194][ T5745] usb 2-1: SerialNumber: syz [ 197.368545][ T5621] Bluetooth: hci2: command tx timeout [ 197.430957][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.636455][ T5745] kaweth 2-1:1.0: Firmware present in device. [ 197.770659][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.813669][ T5745] kaweth 2-1:1.0: Statistics collection: 0 [ 197.813697][ T5745] kaweth 2-1:1.0: Multicast filter limit: 0 [ 197.813717][ T5745] kaweth 2-1:1.0: MTU: 0 [ 197.813734][ T5745] kaweth 2-1:1.0: Read MAC address 00:00:00:00:00:00 [ 197.942369][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.990255][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 198.021656][ T6778] loop1: detected capacity change from 0 to 16 [ 198.023144][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.023335][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.023551][ T6646] bridge_slave_0: entered allmulticast mode [ 198.042517][ T6646] bridge_slave_0: entered promiscuous mode [ 198.060380][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.065971][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.066153][ T6646] bridge_slave_1: entered allmulticast mode [ 198.083158][ T6646] bridge_slave_1: entered promiscuous mode [ 198.122223][ T6778] erofs (device loop1): mounted with root inode @ nid 36. [ 198.217815][ T6811] program syz.1.204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.239457][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.389623][ T6646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.393813][ T6646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.527543][ T6705] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.527830][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.528294][ T6705] bridge_slave_0: entered allmulticast mode [ 198.530296][ T6705] bridge_slave_0: entered promiscuous mode [ 198.562751][ T6646] team0: Port device team_slave_0 added [ 198.571644][ T6646] team0: Port device team_slave_1 added [ 198.589795][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.591236][ T6705] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.591359][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.591519][ T6705] bridge_slave_1: entered allmulticast mode [ 198.593820][ T6705] bridge_slave_1: entered promiscuous mode [ 198.821993][ T6705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.884565][ T5745] kaweth 2-1:1.0: probe with driver kaweth failed with error -5 [ 198.903863][ T5745] usb 2-1: USB disconnect, device number 15 [ 198.924585][ T6705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.948113][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.948136][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.948169][ T6646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.952300][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.952317][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.952350][ T6646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.328306][ T6705] team0: Port device team_slave_0 added [ 199.355864][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.425979][ T6705] team0: Port device team_slave_1 added [ 199.434458][ T5621] Bluetooth: hci2: command tx timeout [ 199.546449][ T42] bridge_slave_1: left allmulticast mode [ 199.546481][ T42] bridge_slave_1: left promiscuous mode [ 199.546715][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.571797][ T42] bridge_slave_0: left allmulticast mode [ 199.571826][ T42] bridge_slave_0: left promiscuous mode [ 199.572045][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.959181][ T6835] loop1: detected capacity change from 0 to 1024 [ 200.330663][ T6835] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 200.629548][ T6833] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd89 [ 200.694586][ T6833] loop0: detected capacity change from 0 to 8192 [ 200.804570][ T6833] loop0: p1 < > p2 < > p3 p4 < p5 > [ 200.804601][ T6833] loop0: partition table partially beyond EOD, truncated [ 200.808524][ T6833] loop0: p1 start 83886080 is beyond EOD, truncated [ 200.808552][ T6833] loop0: p2 start 16776960 is beyond EOD, truncated [ 201.123423][ T6833] raw_sendmsg: syz.0.206 forgot to set AF_INET. Fix it! [ 201.202843][ T6840] loop1: detected capacity change from 0 to 512 [ 201.217984][ T6840] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 201.281441][ T6840] EXT4-fs (loop1): 1 truncate cleaned up [ 201.305461][ T6840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.552943][ T6849] loop0: detected capacity change from 0 to 2048 [ 201.553964][ T6849] ext4: Unknown parameter 'fowner<00000000000000000000' [ 201.579201][ T5629] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 201.583774][ T5629] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 201.673373][ T6849] device-mapper: ioctl: Invalid ioctl structure: name j, dev 8045d08669761000 [ 201.868687][ T6648] udevd[6648]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 201.871191][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 201.903367][ T6651] udevd[6651]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 201.919789][ T6849] loop0: detected capacity change from 0 to 4096 [ 201.963161][ T6849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.003155][ T6849] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 202.079635][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.192595][ T4932] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 202.198240][ T4932] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 202.205127][ T4932] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 202.219319][ T4932] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 202.219982][ T4932] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 202.263434][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.282143][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.300887][ T42] bond0 (unregistering): Released all slaves [ 203.112498][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.112521][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.112554][ T6705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.116979][ T6705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.116998][ T6705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.117031][ T6705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.852821][ T5621] Bluetooth: hci5: command tx timeout [ 205.003217][ T6646] hsr_slave_0: entered promiscuous mode [ 205.007850][ T6646] hsr_slave_1: entered promiscuous mode [ 205.011786][ T6646] debugfs: 'hsr0' already exists in 'hsr' [ 205.011808][ T6646] Cannot create hsr debugfs directory [ 205.038528][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 205.144985][ T1558] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.145098][ T1558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.250747][ T6705] hsr_slave_0: entered promiscuous mode [ 205.251931][ T6705] hsr_slave_1: entered promiscuous mode [ 205.252796][ T6705] debugfs: 'hsr0' already exists in 'hsr' [ 205.252818][ T6705] Cannot create hsr debugfs directory [ 205.297965][ T1558] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.298050][ T1558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.302392][ T5629] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.907465][ T42] hsr_slave_0: left promiscuous mode [ 205.908279][ T42] hsr_slave_1: left promiscuous mode [ 205.910797][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.910821][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.911765][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.911787][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.988043][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.990197][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.991950][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.996156][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.996844][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.999076][ T42] veth1_macvtap: left promiscuous mode [ 205.999183][ T42] veth0_macvtap: left promiscuous mode [ 205.999305][ T42] veth1_vlan: left promiscuous mode [ 205.999380][ T42] veth0_vlan: left promiscuous mode [ 206.513151][ T42] team_slave_1 (unregistering): left allmulticast mode [ 206.514355][ T42] team0 (unregistering): Port device team_slave_1 removed [ 206.545662][ T42] team_slave_0 (unregistering): left allmulticast mode [ 206.548943][ T42] team0 (unregistering): Port device team_slave_0 removed [ 206.878498][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 206.878542][ T5622] Bluetooth: hci5: command tx timeout [ 206.878647][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 207.439343][ T42] IPVS: stop unused estimator thread 0... [ 208.074902][ T4932] Bluetooth: hci6: command tx timeout [ 208.253389][ T6705] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 208.278807][ T6705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.279770][ T6705] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 208.303469][ T6705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.315216][ T6705] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 208.343879][ T6705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 208.432862][ T6705] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 208.444452][ T6705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.446276][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 208.803503][ T6646] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 208.817372][ T6646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.818395][ T6646] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 208.832239][ T6646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.916398][ T6646] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 208.936078][ T6646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 208.956922][ T4932] Bluetooth: hci5: command tx timeout [ 209.091730][ T6646] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 209.097121][ T6646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.472600][ T6852] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.472786][ T6852] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.472930][ T6852] bridge_slave_0: entered allmulticast mode [ 209.479751][ T6852] bridge_slave_0: entered promiscuous mode [ 209.482827][ T6852] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.482940][ T6852] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.483085][ T6852] bridge_slave_1: entered allmulticast mode [ 209.485981][ T6852] bridge_slave_1: entered promiscuous mode [ 209.522756][ T6852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.531410][ T6852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.538922][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.691499][ T6852] team0: Port device team_slave_0 added [ 209.753170][ T1417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.798082][ T6852] team0: Port device team_slave_1 added [ 209.814523][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8 [ 209.824663][ T6872] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.824874][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.825049][ T6872] bridge_slave_0: entered allmulticast mode [ 209.830328][ T6872] bridge_slave_0: entered promiscuous mode [ 209.881124][ T6872] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.881231][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.881374][ T6872] bridge_slave_1: entered allmulticast mode [ 209.886838][ T6872] bridge_slave_1: entered promiscuous mode [ 209.932101][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.932124][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.932158][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.982975][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.982996][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.983031][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.032722][ T1417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.049754][ T6872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.087425][ T6872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.164220][ T4932] Bluetooth: hci6: command tx timeout [ 210.208151][ T1417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.233014][ T6872] team0: Port device team_slave_0 added [ 210.240946][ T6705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.252361][ T6872] team0: Port device team_slave_1 added [ 210.269792][ T6852] hsr_slave_0: entered promiscuous mode [ 210.270917][ T6852] hsr_slave_1: entered promiscuous mode [ 210.271853][ T6852] debugfs: 'hsr0' already exists in 'hsr' [ 210.271875][ T6852] Cannot create hsr debugfs directory [ 210.390273][ T1417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.426314][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.426337][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.426371][ T6872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.504915][ T6872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.504938][ T6872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.504972][ T6872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.682950][ T6705] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.751217][ T6872] hsr_slave_0: entered promiscuous mode [ 210.752461][ T6872] hsr_slave_1: entered promiscuous mode [ 210.753273][ T6872] debugfs: 'hsr0' already exists in 'hsr' [ 210.753295][ T6872] Cannot create hsr debugfs directory [ 210.841982][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.842094][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.036496][ T4932] Bluetooth: hci5: command tx timeout [ 211.123955][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9 [ 211.134545][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.134669][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.143612][ T6436] veth0_vlan: entered promiscuous mode [ 211.186944][ T1417] bridge_slave_1: left allmulticast mode [ 211.186976][ T1417] bridge_slave_1: left promiscuous mode [ 211.187290][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.190451][ T1417] bridge_slave_0: left allmulticast mode [ 211.190470][ T1417] bridge_slave_0: left promiscuous mode [ 211.192129][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.232663][ T1417] bridge_slave_1: left allmulticast mode [ 211.232686][ T1417] bridge_slave_1: left promiscuous mode [ 211.232859][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.258726][ T1417] bridge_slave_0: left allmulticast mode [ 211.258766][ T1417] bridge_slave_0: left promiscuous mode [ 211.259014][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.432538][ T6978] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd89 [ 211.773542][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.788994][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.795055][ T1417] bond0 (unregistering): Released all slaves [ 212.048530][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.067069][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.073865][ T1417] bond0 (unregistering): Released all slaves [ 212.103284][ T6646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.112396][ T6436] veth1_vlan: entered promiscuous mode [ 212.238138][ T4932] Bluetooth: hci6: command tx timeout [ 212.330566][ T6985] loop0: detected capacity change from 0 to 512 [ 212.333463][ T6985] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 212.369341][ T6985] EXT4-fs (loop0): 1 truncate cleaned up [ 212.374457][ T6985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.493299][ T5618] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 212.498271][ T5618] EXT4-fs error (device loop0): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 212.640693][ T6646] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.669813][ T5618] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.795188][ T1417] hsr_slave_0: left promiscuous mode [ 212.796061][ T1417] hsr_slave_1: left promiscuous mode [ 212.797067][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.797807][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.803128][ T1417] hsr_slave_0: left promiscuous mode [ 212.803942][ T1417] hsr_slave_1: left promiscuous mode [ 212.808901][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.808925][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.810646][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.810666][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.872937][ T1417] veth1_macvtap: left promiscuous mode [ 212.872986][ T1417] veth0_macvtap: left promiscuous mode [ 212.873069][ T1417] veth1_vlan: left promiscuous mode [ 212.873123][ T1417] veth0_vlan: left promiscuous mode [ 213.181299][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.181956][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.182603][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.183627][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.185937][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.288596][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 213.311644][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 213.631826][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 213.646163][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 213.785131][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.785245][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.787249][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.787332][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.833055][ T6436] veth0_macvtap: entered promiscuous mode [ 213.906231][ T6436] veth1_macvtap: entered promiscuous mode [ 214.314644][ T5621] Bluetooth: hci6: command tx timeout [ 214.512738][ T6852] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.544498][ T6852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 214.547344][ T6852] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.587238][ T6852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 214.589914][ T6852] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 214.614335][ T6852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.678709][ T4932] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 214.680756][ T4932] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 214.700675][ T4932] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.714091][ T4932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 214.715694][ T4932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.866923][ T6872] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.017824][ T6852] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.038789][ T6852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 215.246860][ T6872] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.292689][ T5621] Bluetooth: hci1: command tx timeout [ 215.501740][ T6872] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.710132][ T1417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.803070][ T6872] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.960160][ T1417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.021766][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10 [ 216.141253][ T1417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.258208][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.305905][ T1417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.351882][ T6705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.794993][ T5621] Bluetooth: hci7: command tx timeout [ 216.985495][ T6872] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.990697][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.991595][ T6872] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.033687][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.141216][ T6872] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.155731][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.200055][ T6872] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.203286][ T6872] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.354270][ T5621] Bluetooth: hci1: command tx timeout [ 217.380752][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.381276][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.381454][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.381868][ T6990] bridge_slave_0: entered allmulticast mode [ 217.383656][ T6990] bridge_slave_0: entered promiscuous mode [ 217.387551][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.387664][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.387812][ T6990] bridge_slave_1: entered allmulticast mode [ 217.389982][ T6990] bridge_slave_1: entered promiscuous mode [ 217.592187][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.629490][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.800630][ T6990] team0: Port device team_slave_0 added [ 217.817510][ T6990] team0: Port device team_slave_1 added [ 217.822648][ T6852] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.881639][ T6705] veth0_vlan: entered promiscuous mode [ 217.883930][ T6646] veth0_vlan: entered promiscuous mode [ 217.990923][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.990947][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.990980][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.013874][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.014037][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.053174][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.053194][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.053227][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.099963][ T6646] veth1_vlan: entered promiscuous mode [ 218.113537][ T6705] veth1_vlan: entered promiscuous mode [ 218.145607][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.145730][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.332859][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.333049][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.333196][ T7008] bridge_slave_0: entered allmulticast mode [ 218.337781][ T7008] bridge_slave_0: entered promiscuous mode [ 218.348197][ T6990] hsr_slave_0: entered promiscuous mode [ 218.349254][ T6990] hsr_slave_1: entered promiscuous mode [ 218.350033][ T6990] debugfs: 'hsr0' already exists in 'hsr' [ 218.350054][ T6990] Cannot create hsr debugfs directory [ 218.360921][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11 [ 218.410880][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.411056][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.411231][ T7008] bridge_slave_1: entered allmulticast mode [ 218.413950][ T7008] bridge_slave_1: entered promiscuous mode [ 218.601347][ T7008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.648395][ T7008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.706713][ T1417] bridge_slave_1: left allmulticast mode [ 218.706747][ T1417] bridge_slave_1: left promiscuous mode [ 218.707994][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.734981][ T1417] bridge_slave_0: left allmulticast mode [ 218.735013][ T1417] bridge_slave_0: left promiscuous mode [ 218.735302][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.772760][ T1417] bridge_slave_1: left allmulticast mode [ 218.772794][ T1417] bridge_slave_1: left promiscuous mode [ 218.773006][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.799784][ T1417] bridge_slave_0: left allmulticast mode [ 218.799816][ T1417] bridge_slave_0: left promiscuous mode [ 218.800010][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.874129][ T5621] Bluetooth: hci7: command tx timeout [ 218.987727][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.990145][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.991485][ T1417] bond0 (unregistering): Released all slaves [ 219.109692][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.111865][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.113184][ T1417] bond0 (unregistering): Released all slaves [ 219.201120][ T7008] team0: Port device team_slave_0 added [ 219.216644][ T7008] team0: Port device team_slave_1 added [ 219.255654][ T6646] veth0_macvtap: entered promiscuous mode [ 219.321593][ T6705] veth0_macvtap: entered promiscuous mode [ 219.346970][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.346992][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.347026][ T7008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.349118][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.349134][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.349166][ T7008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.376991][ T6646] veth1_macvtap: entered promiscuous mode [ 219.385272][ T6705] veth1_macvtap: entered promiscuous mode [ 219.434773][ T5621] Bluetooth: hci1: command tx timeout [ 219.573205][ T7008] hsr_slave_0: entered promiscuous mode [ 219.580900][ T7008] hsr_slave_1: entered promiscuous mode [ 219.581770][ T7008] debugfs: 'hsr0' already exists in 'hsr' [ 219.581790][ T7008] Cannot create hsr debugfs directory [ 219.628935][ T1417] hsr_slave_0: left promiscuous mode [ 219.629760][ T1417] hsr_slave_1: left promiscuous mode [ 219.630735][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.630759][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.631696][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.631717][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.647119][ T1417] hsr_slave_0: left promiscuous mode [ 219.657796][ T1417] hsr_slave_1: left promiscuous mode [ 219.660002][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.666676][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.709866][ T1417] veth1_macvtap: left promiscuous mode [ 219.709910][ T1417] veth0_macvtap: left promiscuous mode [ 219.710022][ T1417] veth1_vlan: left promiscuous mode [ 219.711220][ T1417] veth0_vlan: left promiscuous mode [ 219.712914][ T1417] veth1_macvtap: left promiscuous mode [ 219.712949][ T1417] veth0_macvtap: left promiscuous mode [ 219.713072][ T1417] veth1_vlan: left promiscuous mode [ 219.713144][ T1417] veth0_vlan: left promiscuous mode [ 220.135072][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 220.158516][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 220.502662][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 220.517323][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 220.717709][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12 [ 220.843715][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.921576][ T6872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.944163][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.956308][ T5621] Bluetooth: hci7: command tx timeout [ 220.970763][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.093499][ T6705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.284490][ T6266] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.285458][ T6266] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.286057][ T6266] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.286106][ T6266] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.286152][ T6266] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.286196][ T6266] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.286242][ T6266] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.286287][ T6266] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.306832][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.353170][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.353290][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.360458][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.360566][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.437450][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.514236][ T5621] Bluetooth: hci1: command tx timeout [ 221.783552][ T1558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.783577][ T1558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.065423][ T1475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.065452][ T1475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.121639][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.121664][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.333898][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13 [ 222.356227][ T6990] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.362116][ T6990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.363136][ T6990] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.369931][ T6990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.418418][ T1558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.418445][ T1558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.422171][ T6990] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.432597][ T6990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 222.469196][ T6990] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.479819][ T6990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.945095][ T6852] veth0_vlan: entered promiscuous mode [ 222.964058][ T7163] loop8: detected capacity change from 0 to 32768 [ 222.982376][ T7163] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 222.982401][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: syz.8.185 Not tainted syzkaller #0 PREEMPT(full) [ 222.982431][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 222.982448][ T7163] Call Trace: [ 222.982459][ T7163] [ 222.982470][ T7163] dump_stack_lvl+0xe8/0x150 [ 222.982517][ T7163] sysfs_create_dir_ns+0x271/0x2a0 [ 222.982567][ T7163] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 222.982616][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.982648][ T7163] ? do_raw_spin_unlock+0xf5/0x200 [ 222.982697][ T7163] kobject_add_internal+0x622/0xcd0 [ 222.982744][ T7163] kobject_init_and_add+0x12b/0x1a0 [ 222.982779][ T7163] ? __pfx_kobject_init_and_add+0x10/0x10 [ 222.982809][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.982842][ T7163] ? __raw_spin_lock_init+0x45/0x100 [ 222.982884][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.982917][ T7163] ? __init_swait_queue_head+0xa8/0x150 [ 222.982959][ T7163] gfs2_sys_fs_add+0x257/0x480 [ 222.982999][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.983031][ T7163] ? is_dynamic_key+0x1aa/0x1c0 [ 222.983062][ T7163] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 222.983115][ T7163] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 222.983161][ T7163] gfs2_fill_super+0x1347/0x20d0 [ 222.983211][ T7163] ? __pfx_gfs2_fill_super+0x10/0x10 [ 222.983243][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.983281][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.983313][ T7163] ? sb_set_blocksize+0x155/0x240 [ 222.983347][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.983379][ T7163] ? setup_bdev_super+0x586/0x680 [ 222.983413][ T7163] get_tree_bdev_flags+0x430/0x4f0 [ 222.983444][ T7163] ? __pfx_gfs2_fill_super+0x10/0x10 [ 222.983477][ T7163] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 222.983510][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.983551][ T7163] gfs2_get_tree+0x51/0x1e0 [ 222.983589][ T7163] vfs_get_tree+0x92/0x2a0 [ 222.983620][ T7163] do_new_mount+0x319/0xdc0 [ 222.983660][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.983699][ T7163] ? __pfx_do_new_mount+0x10/0x10 [ 222.983748][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.983780][ T7163] ? ns_capable+0x89/0xe0 [ 222.983819][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.983850][ T7163] ? path_mount+0x647/0x1050 [ 222.983894][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.983926][ T7163] ? user_path_at+0xd4/0x160 [ 222.983955][ T7163] __se_sys_mount+0x31d/0x420 [ 222.984009][ T7163] ? __pfx___se_sys_mount+0x10/0x10 [ 222.984044][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.984077][ T7163] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.984107][ T7163] ? __x64_sys_mount+0x20/0xc0 [ 222.984151][ T7163] do_syscall_64+0x166/0x520 [ 222.984188][ T7163] ? trace_irq_disable+0x3b/0x140 [ 222.984218][ T7163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.984253][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.984279][ T7163] RIP: 0033:0x7f985479f3ca [ 222.984304][ T7163] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.984325][ T7163] RSP: 002b:00007f98556efe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 222.984349][ T7163] RAX: ffffffffffffffda RBX: 00007f98556efee0 RCX: 00007f985479f3ca [ 222.984366][ T7163] RDX: 0000200000037f40 RSI: 00002000000008c0 RDI: 00007f98556efea0 [ 222.984382][ T7163] RBP: 0000200000037f40 R08: 00007f98556efee0 R09: 0000000001010084 [ 222.984397][ T7163] R10: 0000000001010084 R11: 0000000000000246 R12: 00002000000008c0 [ 222.984412][ T7163] R13: 00007f98556efea0 R14: 0000000000037fb5 R15: 0000200000000280 [ 222.984445][ T7163] [ 222.987404][ T7163] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 222.987428][ T7163] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 223.037042][ T5621] Bluetooth: hci7: command tx timeout [ 223.345568][ T6852] veth1_vlan: entered promiscuous mode [ 223.566436][ T7175] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 224.115140][ T7173] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff0x0000000000' [ 224.802591][ T6852] veth0_macvtap: entered promiscuous mode [ 224.808103][ T6852] veth1_macvtap: entered promiscuous mode [ 224.847813][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.859270][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.867353][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.892096][ T6990] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.938710][ T1475] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.941849][ T6837] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.942237][ T6837] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.942606][ T6837] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.945323][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.945454][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.014345][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.014460][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.603818][ T7197] fuse: fd is not a fuse device [ 225.681232][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.681260][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.933465][ T7008] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 225.953779][ T7008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.965791][ T7188] loop8: detected capacity change from 0 to 32768 [ 226.021642][ T7188] JBD2: Ignoring recovery information on journal [ 226.023562][ T7008] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 226.057652][ T7008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.058711][ T7008] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 226.084973][ T7008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.090125][ T6837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.090149][ T6837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.123040][ T6872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.132364][ T7008] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 226.151577][ T7008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.248562][ T7188] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 226.336648][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14 [ 226.692510][ T7008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.843392][ T7231] program syz.9.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.848923][ T7008] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.873744][ T7231] netlink: 256 bytes leftover after parsing attributes in process `syz.9.231'. [ 226.873770][ T7231] ksmbd: Unknown IPC event: 0, ignore. [ 226.908579][ T1417] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.908694][ T1417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.944696][ T5015] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 226.976927][ T1417] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.977043][ T1417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.094078][ T5015] usb 7-1: Using ep0 maxpacket: 8 [ 227.096014][ T5015] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 227.097504][ T5015] usb 7-1: config 3 has an invalid interface number: 45 but max is 0 [ 227.097531][ T5015] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 227.097554][ T5015] usb 7-1: config 3 has no interface number 0 [ 227.097598][ T5015] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.097631][ T5015] usb 7-1: config 3 interface 45 has no altsetting 0 [ 227.100302][ T5015] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.100330][ T5015] usb 7-1: Product: syz [ 227.100348][ T5015] usb 7-1: Manufacturer: syz [ 227.100366][ T5015] usb 7-1: SerialNumber: syz [ 227.189133][ T6646] ocfs2: Unmounting device (7,8) on (node local) [ 227.550422][ T6872] veth0_vlan: entered promiscuous mode [ 227.613032][ T6872] veth1_vlan: entered promiscuous mode [ 227.657612][ T5015] usb 7-1: USB disconnect, device number 2 [ 227.761761][ T7231] loop9: detected capacity change from 0 to 164 [ 227.783864][ T6651] udevd[6651]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.929376][ T6872] veth0_macvtap: entered promiscuous mode [ 227.972439][ T7231] isofs_fill_super: root inode is not a directory. Corrupted media? [ 228.018652][ T6872] veth1_macvtap: entered promiscuous mode [ 229.424300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 229.885416][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.973224][ T6872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.989072][ T5746] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 230.065707][ T6837] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.066227][ T6837] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.070403][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.117388][ T156] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.165303][ T5746] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 230.168465][ T5746] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 230.168518][ T5746] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 230.168551][ T5746] usb 9-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 230.168580][ T5746] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.168608][ T5746] usb 9-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 230.168654][ T5746] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.172728][ T6837] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.219879][ T7260] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 230.252485][ T5746] ims_pcu 9-1:1.0: Max IN packet size is too small (0) [ 230.278941][ T5746] ims_pcu 9-1:1.0: probe with driver ims_pcu failed with error -22 [ 230.387859][ T7270] FAULT_INJECTION: forcing a failure. [ 230.387859][ T7270] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 230.387890][ T7270] CPU: 0 UID: 0 PID: 7270 Comm: syz.6.234 Not tainted syzkaller #0 PREEMPT(full) [ 230.387912][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 230.387925][ T7270] Call Trace: [ 230.387933][ T7270] [ 230.387941][ T7270] dump_stack_lvl+0xe8/0x150 [ 230.387975][ T7270] should_fail_ex+0x410/0x560 [ 230.388004][ T7270] prepare_alloc_pages+0x223/0x600 [ 230.388033][ T7270] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 230.388061][ T7270] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 230.388084][ T7270] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 230.388116][ T7270] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 230.388146][ T7270] ? __pfx_policy_nodemask+0x10/0x10 [ 230.388171][ T7270] ? __get_vm_area_node+0x155/0x2f0 [ 230.388200][ T7270] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 230.388232][ T7270] ? __vmalloc_noprof+0xd2/0x120 [ 230.388265][ T7270] __alloc_pages_noprof+0x10/0x100 [ 230.388292][ T7270] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 230.388314][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.388345][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.388367][ T7270] ? alloc_pages_noprof+0x140/0x2b0 [ 230.388399][ T7270] __kasan_populate_vmalloc+0xb7/0x1c0 [ 230.388426][ T7270] alloc_vmap_area+0xd1a/0x1420 [ 230.388466][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.388491][ T7270] ? __pfx_alloc_vmap_area+0x10/0x10 [ 230.388519][ T7270] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 230.388542][ T7270] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 230.388564][ T7270] ? __get_vm_area_node+0x155/0x2f0 [ 230.388598][ T7270] __get_vm_area_node+0x200/0x2f0 [ 230.388635][ T7270] __vmalloc_node_range_noprof+0x343/0x1540 [ 230.388671][ T7270] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 230.388697][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.388721][ T7270] ? __lock_acquire+0x747/0x2de0 [ 230.388766][ T7270] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.388813][ T7270] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 230.388836][ T7270] __vmalloc_noprof+0xd2/0x120 [ 230.388867][ T7270] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 230.388894][ T7270] bpf_prog_alloc_no_stats+0x47/0x560 [ 230.388918][ T7270] ? bpf_prog_alloc+0x2a/0x1a0 [ 230.388944][ T7270] bpf_prog_alloc+0x3c/0x1a0 [ 230.388971][ T7270] bpf_prog_load+0x7f8/0x1c20 [ 230.389007][ T7270] ? __pfx_bpf_prog_load+0x10/0x10 [ 230.389055][ T7270] __sys_bpf+0xd0d/0xd90 [ 230.389087][ T7270] ? __pfx___sys_bpf+0x10/0x10 [ 230.389121][ T7270] ? __fget_files+0x2a/0x420 [ 230.389165][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.389188][ T7270] ? ksys_write+0x242/0x270 [ 230.389209][ T7270] ? __pfx_ksys_write+0x10/0x10 [ 230.389226][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.389255][ T7270] __x64_sys_bpf+0xba/0xd0 [ 230.389281][ T7270] do_syscall_64+0x166/0x520 [ 230.389309][ T7270] ? trace_irq_disable+0x3b/0x140 [ 230.389331][ T7270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.389355][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.389375][ T7270] RIP: 0033:0x7f5b7519e159 [ 230.389393][ T7270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.389410][ T7270] RSP: 002b:00007f5b76039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.389430][ T7270] RAX: ffffffffffffffda RBX: 00007f5b75425fa0 RCX: 00007f5b7519e159 [ 230.389445][ T7270] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 230.389458][ T7270] RBP: 00007f5b76039090 R08: 0000000000000000 R09: 0000000000000000 [ 230.389471][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.389483][ T7270] R13: 00007f5b75426038 R14: 00007f5b75425fa0 R15: 00007ffe85ecb0e8 [ 230.389513][ T7270] [ 230.425130][ T7255] x_tables: duplicate underflow at hook 3 [ 230.439997][ T7270] syz.6.234: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 230.440204][ T7270] CPU: 0 UID: 0 PID: 7270 Comm: syz.6.234 Not tainted syzkaller #0 PREEMPT(full) [ 230.440232][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 230.440249][ T7270] Call Trace: [ 230.440258][ T7270] [ 230.440269][ T7270] dump_stack_lvl+0xe8/0x150 [ 230.440314][ T7270] warn_alloc+0x24d/0x270 [ 230.440344][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.440376][ T7270] ? lockdep_hardirqs_on+0x7b/0x110 [ 230.440416][ T7270] ? __pfx_warn_alloc+0x10/0x10 [ 230.440444][ T7270] ? kfree+0x1c5/0x650 [ 230.440491][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.440523][ T7270] ? __get_vm_area_node+0x219/0x2f0 [ 230.440573][ T7270] __vmalloc_node_range_noprof+0x36b/0x1540 [ 230.440617][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.440648][ T7270] ? __lock_acquire+0x747/0x2de0 [ 230.440708][ T7270] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.440762][ T7270] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 230.440801][ T7270] __vmalloc_noprof+0xd2/0x120 [ 230.440844][ T7270] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 230.440881][ T7270] bpf_prog_alloc_no_stats+0x47/0x560 [ 230.440914][ T7270] ? bpf_prog_alloc+0x2a/0x1a0 [ 230.440949][ T7270] bpf_prog_alloc+0x3c/0x1a0 [ 230.440985][ T7270] bpf_prog_load+0x7f8/0x1c20 [ 230.441034][ T7270] ? __pfx_bpf_prog_load+0x10/0x10 [ 230.441098][ T7270] __sys_bpf+0xd0d/0xd90 [ 230.441140][ T7270] ? __pfx___sys_bpf+0x10/0x10 [ 230.441186][ T7270] ? __fget_files+0x2a/0x420 [ 230.441245][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.441280][ T7270] ? ksys_write+0x242/0x270 [ 230.441309][ T7270] ? __pfx_ksys_write+0x10/0x10 [ 230.441332][ T7270] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.441371][ T7270] __x64_sys_bpf+0xba/0xd0 [ 230.441404][ T7270] do_syscall_64+0x166/0x520 [ 230.441441][ T7270] ? trace_irq_disable+0x3b/0x140 [ 230.441470][ T7270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.441505][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.441532][ T7270] RIP: 0033:0x7f5b7519e159 [ 230.441556][ T7270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.441578][ T7270] RSP: 002b:00007f5b76039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.441604][ T7270] RAX: ffffffffffffffda RBX: 00007f5b75425fa0 RCX: 00007f5b7519e159 [ 230.441623][ T7270] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 230.441641][ T7270] RBP: 00007f5b76039090 R08: 0000000000000000 R09: 0000000000000000 [ 230.441659][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.441675][ T7270] R13: 00007f5b75426038 R14: 00007f5b75425fa0 R15: 00007ffe85ecb0e8 [ 230.441715][ T7270] [ 230.488811][ T7270] Mem-Info: [ 230.488828][ T7270] active_anon:33383 inactive_anon:0 isolated_anon:0 [ 230.488828][ T7270] active_file:65 inactive_file:62277 isolated_file:0 [ 230.488828][ T7270] unevictable:0 dirty:39 writeback:0 [ 230.488828][ T7270] slab_reclaimable:11782 slab_unreclaimable:101267 [ 230.488828][ T7270] mapped:43802 shmem:27036 pagetables:1342 [ 230.488828][ T7270] sec_pagetables:0 bounce:0 [ 230.488828][ T7270] kernel_misc_reclaimable:0 [ 230.488828][ T7270] free:1250429 free_pcp:14449 free_cma:0 [ 230.488897][ T7270] Node 0 active_anon:133532kB inactive_anon:0kB active_file:260kB inactive_file:248908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175208kB dirty:156kB writeback:0kB shmem:108144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13436kB pagetables:5204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 230.488968][ T7270] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 230.489035][ T7270] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.489110][ T7270] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 230.489162][ T7270] Node 0 DMA32 free:1047408kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:133532kB inactive_anon:0kB active_file:260kB inactive_file:248908kB unevictable:0kB writepending:156kB zspages:0kB present:3129332kB managed:2546880kB mlocked:0kB bounce:0kB free_pcp:39364kB local_pcp:18552kB free_cma:0kB [ 230.489241][ T7270] lowmem_reserve[]: 0 0 0 0 0 [ 230.489296][ T7270] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.489367][ T7270] lowmem_reserve[]: 0 0 0 0 0 [ 230.489416][ T7270] Node 1 Normal free:3938948kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:18432kB local_pcp:18432kB free_cma:0kB [ 230.489492][ T7270] lowmem_reserve[]: 0 0 0 0 0 [ 230.489541][ T7270] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.489702][ T7270] Node 0 DMA32: 2*4kB (UE) 1*8kB (U) 2*16kB (ME) 2*32kB (UE) 1*64kB (U) 69*128kB (UME) 88*256kB (UM) 22*512kB (UME) 13*1024kB (M) 10*2048kB (M) 237*4096kB (UM) = 1047344kB [ 230.489923][ T7270] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 230.490060][ T7270] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 8*16kB (UM) 7*32kB (UM) 6*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (M) 960*4096kB (UM) = 3938948kB [ 230.490282][ T7270] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.490304][ T7270] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 230.490341][ T7270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.490362][ T7270] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 230.499864][ T5746] usb 9-1: USB disconnect, device number 2 [ 230.506634][ T7270] 89285 total pagecache pages [ 230.506649][ T7270] 0 pages in swap cache [ 230.506658][ T7270] Free swap = 124996kB [ 230.506669][ T7270] Total swap = 124996kB [ 230.506682][ T7270] 2097051 pages RAM [ 230.506692][ T7270] 0 pages HighMem/MovableOnly [ 230.506701][ T7270] 428715 pages reserved [ 230.506711][ T7270] 0 pages cma reserved [ 231.214675][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.214701][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.302108][ T7276] loop9: detected capacity change from 0 to 512 [ 231.349696][ T7276] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 231.406305][ T7276] EXT4-fs (loop9): 1 truncate cleaned up [ 231.428322][ T7276] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.752840][ T6837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.752870][ T6837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.878821][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15 [ 232.142777][ T6705] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 232.158384][ T6705] EXT4-fs error (device loop9): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 232.542182][ T6705] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.552143][ T6990] veth0_vlan: entered promiscuous mode [ 232.619872][ T6990] veth1_vlan: entered promiscuous mode [ 232.662018][ T7301] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 232.662053][ T7301] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 232.662129][ T7301] vhci_hcd vhci_hcd.0: Device attached [ 232.857034][ T1558] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.865180][ T5015] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 232.904115][ T44] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 232.924307][ T5015] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 232.941595][ T7008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.090682][ T44] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.127249][ T44] usb 6-1: config 0 has no interfaces? [ 233.127395][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.217403][ T44] usb 6-1: config 0 descriptor?? [ 233.299785][ T6990] veth0_macvtap: entered promiscuous mode [ 233.348735][ T6990] veth1_macvtap: entered promiscuous mode [ 233.379346][ T7310] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 233.457228][ T7302] usbip_core: unknown command [ 233.457326][ T7302] vhci_hcd: unknown pdu 0 [ 233.457381][ T7302] usbip_core: unknown command [ 233.517614][ T49] vhci_hcd vhci_hcd.5: stop threads [ 233.517780][ T49] vhci_hcd vhci_hcd.5: release socket [ 233.517891][ T49] vhci_hcd vhci_hcd.5: disconnect device [ 233.546711][ T5015] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 233.773755][ T7306] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff0x0000000000' [ 233.940613][ T1558] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.414707][ T7325] loop6: detected capacity change from 0 to 1024 [ 235.225503][ T1558] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.698804][ T7325] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 235.859447][ T5881] usb 6-1: USB disconnect, device number 7 [ 235.940790][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.510238][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.583567][ T4932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 236.598834][ T4932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 236.601246][ T4932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.642639][ T4932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.654799][ T4932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.779184][ T1558] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.926282][ T1417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.926374][ T1417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.926436][ T1417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.926481][ T1417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.461291][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16 [ 237.608011][ T7348] loop8: detected capacity change from 0 to 512 [ 237.671611][ T7348] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 237.720647][ T7348] EXT4-fs (loop8): 1 truncate cleaned up [ 237.774226][ T7348] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.813837][ T1558] bridge_slave_1: left allmulticast mode [ 237.813870][ T1558] bridge_slave_1: left promiscuous mode [ 237.826117][ T1558] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.854770][ T1558] bridge_slave_0: left allmulticast mode [ 237.854803][ T1558] bridge_slave_0: left promiscuous mode [ 237.856962][ T1558] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.139024][ T6646] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 238.143370][ T6646] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 238.351408][ T1558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.375090][ T1558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.381789][ T1558] bond0 (unregistering): Released all slaves [ 238.437820][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.437840][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.542310][ T7330] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.714394][ T4932] Bluetooth: hci0: command tx timeout [ 239.046211][ T7359] xt_l2tp: invalid flags combination: 8 [ 239.092782][ T1537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.092810][ T1537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.216301][ T7008] veth0_vlan: entered promiscuous mode [ 239.628157][ T7008] veth1_vlan: entered promiscuous mode [ 240.794410][ T4932] Bluetooth: hci0: command tx timeout [ 240.925681][ T1558] hsr_slave_0: left promiscuous mode [ 240.963433][ T1558] hsr_slave_1: left promiscuous mode [ 240.980300][ T1558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.980328][ T1558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.022911][ T1558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.022941][ T1558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.089502][ T7374] loop4: detected capacity change from 0 to 1024 [ 241.102451][ T7374] EXT4-fs: quotafile must be on filesystem root [ 241.172521][ T1558] veth1_macvtap: left promiscuous mode [ 241.172567][ T1558] veth0_macvtap: left promiscuous mode [ 241.172723][ T1558] veth1_vlan: left promiscuous mode [ 241.172788][ T1558] veth0_vlan: left promiscuous mode [ 241.655884][ T7383] fuse: Unknown parameter 'Ăser_id' [ 241.656418][ T7383] capability: warning: `syz.4.257' uses deprecated v2 capabilities in a way that may be insecure [ 241.799093][ T7384] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 242.878375][ T4932] Bluetooth: hci0: command tx timeout [ 243.171092][ T7383] kexec: Could not allocate control_code_buffer [ 243.786409][ T1558] team0 (unregistering): Port device team_slave_1 removed [ 243.881096][ T1558] team0 (unregistering): Port device team_slave_0 removed [ 244.043194][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.058126][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.059776][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.063582][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.089970][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.267652][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 244.420386][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.420445][ T44] usb 5-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=af.98 [ 244.422994][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.425549][ T44] usb 5-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 244.425577][ T44] usb 5-1: Product: syz [ 244.425595][ T44] usb 5-1: Manufacturer: syz [ 244.425613][ T44] usb 5-1: SerialNumber: syz [ 244.550939][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17 [ 244.776420][ T44] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 244.781970][ T44] gspca_sn9c20x: Write register 1000 failed -71 [ 244.781990][ T44] gspca_sn9c20x: Device initialization failed [ 244.782067][ T44] gspca_sn9c20x 5-1:1.0: probe with driver gspca_sn9c20x failed with error -71 [ 244.934036][ T44] usb 5-1: USB disconnect, device number 8 [ 244.974096][ T4932] Bluetooth: hci0: command tx timeout [ 245.917121][ T7008] veth0_macvtap: entered promiscuous mode [ 246.154913][ T4932] Bluetooth: hci2: command tx timeout [ 246.176313][ T7008] veth1_macvtap: entered promiscuous mode [ 246.477125][ T7008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.556208][ T7008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.737126][ T1537] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.737831][ T1537] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.737916][ T1537] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.738000][ T1537] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.156323][ T7433] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd89 [ 248.234162][ T4932] Bluetooth: hci2: command tx timeout [ 248.305010][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.268'. [ 249.019376][ T59] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.197803][ T5738] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 249.345218][ T5738] usb 6-1: Using ep0 maxpacket: 16 [ 249.346399][ T5738] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 249.347496][ T5738] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 74, changing to 7 [ 249.347531][ T5738] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1261, setting to 1024 [ 249.347563][ T5738] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.347596][ T5738] usb 6-1: config 0 interface 0 has no altsetting 0 [ 249.347634][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.369729][ T5738] usb 6-1: config 0 descriptor?? [ 249.407845][ T5738] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 249.409497][ T59] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.545296][ T7467] loop4: detected capacity change from 0 to 1024 [ 249.561831][ T7467] EXT4-fs: Ignoring removed oldalloc option [ 249.561857][ T7467] EXT4-fs: Ignoring removed orlov option [ 249.626227][ T7467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 249.626335][ T7467] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.239098][ T7470] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 250.314203][ T4932] Bluetooth: hci2: command tx timeout [ 250.802221][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18 [ 251.076672][ T5746] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 251.246300][ T5746] usb 7-1: Using ep0 maxpacket: 16 [ 251.262201][ T5746] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 251.373028][ T5746] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 74, changing to 7 [ 251.373238][ T5746] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1261, setting to 1024 [ 251.373288][ T5746] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.387122][ T5746] usb 7-1: config 0 interface 0 has no altsetting 0 [ 251.387237][ T5746] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.614868][ T5746] usb 7-1: config 0 descriptor?? [ 251.869700][ T5746] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 251.973279][ T6265] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm kworker/u8:16: lblock 0 mapped to illegal pblock 0 (length 6) [ 251.991563][ T6265] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 251.991614][ T6265] EXT4-fs (loop4): This should not happen!! Data will be lost [ 251.991614][ T6265] [ 252.003798][ T146] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 252.010420][ T146] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 252.010459][ T146] EXT4-fs (loop4): This should not happen!! Data will be lost [ 252.010459][ T146] [ 252.066979][ T6990] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 252.127923][ T6990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 252.128475][ T7474] loop6: detected capacity change from 0 to 164 [ 252.215589][ T2103] usb 6-1: USB disconnect, device number 8 [ 252.227566][ T59] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.363756][ T7487] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 252.395695][ T4932] Bluetooth: hci2: command tx timeout [ 252.458737][ T7486] loop4: detected capacity change from 0 to 1024 [ 252.496998][ T7489] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 252.618910][ T7486] EXT4-fs: Ignoring removed oldalloc option [ 252.618952][ T7486] EXT4-fs: Ignoring removed orlov option [ 253.330157][ T7486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 253.330425][ T7486] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.646751][ T6266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.646784][ T6266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.654929][ T10] usb 7-1: USB disconnect, device number 3 [ 253.682545][ T7486] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: comm syz.4.273: lblock 0 mapped to illegal pblock 0 (length 4) [ 253.718947][ T7486] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 253.718988][ T7486] EXT4-fs (loop4): This should not happen!! Data will be lost [ 253.718988][ T7486] [ 253.863496][ T1475] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 4: comm kworker/u8:13: lblock 4 mapped to illegal pblock 4 (length 2) [ 253.864329][ T1475] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 253.864363][ T1475] EXT4-fs (loop4): This should not happen!! Data will be lost [ 253.864363][ T1475] [ 253.909473][ T1475] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 253.917076][ T1475] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 253.917113][ T1475] EXT4-fs (loop4): This should not happen!! Data will be lost [ 253.917113][ T1475] [ 253.945907][ T6990] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost [ 253.952871][ T6990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 254.125530][ T7505] FAULT_INJECTION: forcing a failure. [ 254.125530][ T7505] name failslab, interval 1, probability 0, space 0, times 0 [ 254.125570][ T7505] CPU: 1 UID: 0 PID: 7505 Comm: syz.6.275 Not tainted syzkaller #0 PREEMPT(full) [ 254.125600][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 254.125616][ T7505] Call Trace: [ 254.125626][ T7505] [ 254.125636][ T7505] dump_stack_lvl+0xe8/0x150 [ 254.125674][ T7505] should_fail_ex+0x410/0x560 [ 254.125707][ T7505] should_failslab+0xa8/0x100 [ 254.125737][ T7505] ? inet_frag_find+0x8c6/0x1e50 [ 254.125765][ T7505] kmem_cache_alloc_noprof+0xa1/0x600 [ 254.125790][ T7505] ? inet_frag_find+0x8c6/0x1e50 [ 254.125821][ T7505] inet_frag_find+0x8c6/0x1e50 [ 254.125847][ T7505] ? __pfx_ip4_obj_cmpfn+0x10/0x10 [ 254.125895][ T7505] ? lock_acquire+0x115/0x350 [ 254.125921][ T7505] ? __pfx_inet_frag_find+0x10/0x10 [ 254.125943][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.125974][ T7505] ? ip_route_input_noref+0xad/0x270 [ 254.125999][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.126034][ T7505] ip_defrag+0x332/0x2030 [ 254.126066][ T7505] ? ip_route_input_noref+0xad/0x270 [ 254.126089][ T7505] ? ip_route_input_noref+0xad/0x270 [ 254.126116][ T7505] ? ip_route_input_noref+0x211/0x270 [ 254.126143][ T7505] ? __pfx_ip_route_input_noref+0x10/0x10 [ 254.126175][ T7505] ? ipt_do_table+0x2b9/0x15d0 [ 254.126206][ T7505] ? ip_defrag+0xdf/0x2030 [ 254.126240][ T7505] ? __pfx_ip_defrag+0x10/0x10 [ 254.126282][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.126309][ T7505] ? ip_rcv_finish_core+0xd00/0x1c00 [ 254.126350][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.126382][ T7505] ip_local_deliver+0xe8/0x190 [ 254.126418][ T7505] NF_HOOK+0x336/0x3c0 [ 254.126449][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.126480][ T7505] ? __pfx_ip_rcv_finish+0x10/0x10 [ 254.126514][ T7505] ? NF_HOOK+0x9e/0x3c0 [ 254.126551][ T7505] ? __pfx_NF_HOOK+0x10/0x10 [ 254.126585][ T7505] ? __pfx_ip_rcv_finish+0x10/0x10 [ 254.126641][ T7505] ? netif_receive_skb+0x102/0xbf0 [ 254.126672][ T7505] ? __pfx_ip_rcv+0x10/0x10 [ 254.126713][ T7505] netif_receive_skb+0x45b/0xbf0 [ 254.126747][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.126783][ T7505] ? __pfx_netif_receive_skb+0x10/0x10 [ 254.126818][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.126850][ T7505] ? rcu_is_watching+0x16/0xb0 [ 254.126888][ T7505] ? tun_rx_batched+0x185/0x790 [ 254.126925][ T7505] tun_rx_batched+0x1de/0x790 [ 254.126967][ T7505] ? __pfx_tun_rx_batched+0x10/0x10 [ 254.127000][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.127032][ T7505] ? lock_acquire+0x115/0x350 [ 254.127063][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.127102][ T7505] ? tun_get_user+0x23ba/0x44d0 [ 254.127134][ T7505] ? __local_bh_enable_ip+0xd6/0x140 [ 254.127172][ T7505] ? tun_get_user+0x27b0/0x44d0 [ 254.127208][ T7505] tun_get_user+0x2be0/0x44d0 [ 254.127264][ T7505] ? tun_get_user+0x27b0/0x44d0 [ 254.127304][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.127335][ T7505] ? aa_file_perm+0x4ed/0x15f0 [ 254.127377][ T7505] ? __pfx_tun_get_user+0x10/0x10 [ 254.127412][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.127444][ T7505] ? __lock_acquire+0x747/0x2de0 [ 254.127491][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.127523][ T7505] ? ref_tracker_alloc+0x341/0x4b0 [ 254.127564][ T7505] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 254.127604][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.127636][ T7505] ? lock_acquire+0x115/0x350 [ 254.127666][ T7505] ? tun_get+0x1c/0x2f0 [ 254.127701][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.127736][ T7505] ? tun_get+0x1c/0x2f0 [ 254.127769][ T7505] ? tun_get+0x1c/0x2f0 [ 254.127800][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.127838][ T7505] tun_chr_write_iter+0x113/0x200 [ 254.127874][ T7505] vfs_write+0x612/0xba0 [ 254.127911][ T7505] ? __pfx_vfs_write+0x10/0x10 [ 254.127950][ T7505] ? __fget_files+0x2a/0x420 [ 254.127996][ T7505] ? srso_alias_return_thunk+0x5/0xfbef5 [ 254.128033][ T7505] ksys_write+0x150/0x270 [ 254.128063][ T7505] ? __pfx_ksys_write+0x10/0x10 [ 254.128103][ T7505] do_syscall_64+0x166/0x520 [ 254.128151][ T7505] ? trace_irq_disable+0x3b/0x140 [ 254.128182][ T7505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.128217][ T7505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.128250][ T7505] RIP: 0033:0x7f5b7515e98e [ 254.128274][ T7505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.128297][ T7505] RSP: 002b:00007f5b76038fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.128326][ T7505] RAX: ffffffffffffffda RBX: 00007f5b760396c0 RCX: 00007f5b7515e98e [ 254.128347][ T7505] RDX: 0000000000000032 RSI: 0000200000000b40 RDI: 00000000000000c8 [ 254.128365][ T7505] RBP: 00007f5b7523506b R08: 0000000000000000 R09: 0000000000000000 [ 254.128383][ T7505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.128400][ T7505] R13: 00007f5b75426038 R14: 00007f5b75425fa0 R15: 00007ffe85ecb0e8 [ 254.128442][ T7505] [ 254.131567][ T59] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.627140][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 254.706421][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.706555][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.706734][ T7333] bridge_slave_0: entered allmulticast mode [ 254.710133][ T7333] bridge_slave_0: entered promiscuous mode [ 254.743821][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.754891][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.755040][ T7333] bridge_slave_1: entered allmulticast mode [ 254.758599][ T7333] bridge_slave_1: entered promiscuous mode [ 254.787340][ T10] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 254.789618][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.789639][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 254.827602][ T10] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 254.827629][ T10] usb 7-1: Product: syz [ 254.827642][ T10] usb 7-1: Manufacturer: syz [ 254.827656][ T10] usb 7-1: SerialNumber: syz [ 254.847763][ T10] usb 7-1: config 0 descriptor?? [ 255.047618][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.047719][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.541432][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.541458][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.665428][ T5606] usb 7-1: USB disconnect, device number 4 [ 255.706784][ T7333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.790356][ T7333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.822056][ T7521] FAULT_INJECTION: forcing a failure. [ 255.822056][ T7521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.822098][ T7521] CPU: 1 UID: 0 PID: 7521 Comm: syz.4.279 Not tainted syzkaller #0 PREEMPT(full) [ 255.822128][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 255.822144][ T7521] Call Trace: [ 255.822154][ T7521] [ 255.822165][ T7521] dump_stack_lvl+0xe8/0x150 [ 255.822209][ T7521] should_fail_ex+0x410/0x560 [ 255.822260][ T7521] _copy_to_user+0x31/0xb0 [ 255.822302][ T7521] copy_siginfo_to_user+0x22/0xc0 [ 255.822344][ T7521] x64_setup_rt_frame+0x764/0xc50 [ 255.822412][ T7521] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 255.822466][ T7521] arch_do_signal_or_restart+0x456/0x860 [ 255.822511][ T7521] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 255.822575][ T7521] exit_to_user_mode_loop+0x10e/0x770 [ 255.822607][ T7521] ? srso_alias_return_thunk+0x5/0xfbef5 [ 255.822640][ T7521] ? rcu_is_watching+0x16/0xb0 [ 255.822680][ T7521] do_syscall_64+0x328/0x520 [ 255.822719][ T7521] ? trace_irq_disable+0x3b/0x140 [ 255.822749][ T7521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.822784][ T7521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.822811][ T7521] RIP: 0033:0x7f7e8519e159 [ 255.822836][ T7521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.822859][ T7521] RSP: 002b:00007f7e860ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 255.822887][ T7521] RAX: 0000000000000000 RBX: 00007f7e85425fa0 RCX: 00007f7e8519e159 [ 255.822906][ T7521] RDX: 00002000000002c0 RSI: 0000000000000021 RDI: 0000000000000023 [ 255.822924][ T7521] RBP: 00007f7e8523506b R08: 0000000000000000 R09: 0000000000000000 [ 255.822941][ T7521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.822957][ T7521] R13: 00007f7e85426038 R14: 00007f7e85425fa0 R15: 00007ffc29f84df8 [ 255.822997][ T7521] [ 256.270653][ T7333] team0: Port device team_slave_0 added [ 256.325627][ T7523] tipc: Started in network mode [ 256.325668][ T7523] tipc: Node identity d691f5516841, cluster identity 4711 [ 256.325899][ T7523] tipc: Enabled bearer , priority 0 [ 256.380456][ T7528] tipc: Resetting bearer [ 256.404232][ T7526] syzkaller0: entered promiscuous mode [ 256.404270][ T7526] syzkaller0: entered allmulticast mode [ 256.409780][ T7333] team0: Port device team_slave_1 added [ 256.526447][ T7522] tipc: Resetting bearer [ 256.694731][ T7522] tipc: Disabling bearer [ 256.730299][ T7538] loop4: detected capacity change from 0 to 2048 [ 256.785059][ T7538] loop4: p1 < > [ 256.967513][ T2103] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 257.063620][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.063644][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.063671][ T7333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.115195][ T2103] usb 7-1: Using ep0 maxpacket: 16 [ 257.119132][ T2103] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 257.122690][ T2103] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 74, changing to 7 [ 257.122721][ T2103] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1261, setting to 1024 [ 257.122745][ T2103] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.122769][ T2103] usb 7-1: config 0 interface 0 has no altsetting 0 [ 257.122800][ T2103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.963207][ T2103] usb 7-1: config 0 descriptor?? [ 257.976948][ T2103] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 258.025690][ T7560] loop4: detected capacity change from 0 to 512 [ 258.086052][ T7560] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 258.086089][ T7560] FAT-fs (loop4): Filesystem has been set read-only [ 258.103809][ T7560] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 258.162586][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.162603][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.162629][ T7333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.241840][ T59] bridge_slave_1: left allmulticast mode [ 258.241873][ T59] bridge_slave_1: left promiscuous mode [ 258.242104][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.263509][ T59] bridge_slave_0: left allmulticast mode [ 258.263542][ T59] bridge_slave_0: left promiscuous mode [ 258.263827][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.270545][ T7545] loop6: detected capacity change from 0 to 164 [ 258.483753][ T7568] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 258.506414][ T7568] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 260.221062][ T5881] usb 7-1: USB disconnect, device number 5 [ 260.490151][ T7576] netlink: 'syz.6.288': attribute type 4 has an invalid length. [ 260.501760][ T7567] loop7: detected capacity change from 0 to 32768 [ 260.503444][ T7567] BTRFS warning: excessive commit interval 43283, use with care [ 260.510242][ T7567] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.286 (7567) [ 260.543532][ T7578] netlink: 'syz.6.288': attribute type 4 has an invalid length. [ 260.612875][ T7567] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 260.612916][ T7567] BTRFS info (device loop7): using sha256 checksum algorithm [ 261.380163][ T7567] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 261.386884][ T7567] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 261.423117][ T7567] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 261.513869][ T7567] BTRFS error (device loop7): open_ctree failed: -ENOMEM [ 261.613439][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 261.683808][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.713887][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.765325][ T59] bond0 (unregistering): Released all slaves [ 261.781125][ T10] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 261.782329][ T10] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 261.782356][ T10] usb 6-1: config 1 has no interface number 0 [ 261.782399][ T10] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 261.782430][ T10] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 261.782462][ T10] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.851016][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.851049][ T10] usb 6-1: Product: syz [ 261.851069][ T10] usb 6-1: Manufacturer: syz [ 261.851087][ T10] usb 6-1: SerialNumber: syz [ 261.873433][ T7580] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 262.236812][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19 [ 262.779960][ T7333] hsr_slave_0: entered promiscuous mode [ 262.783577][ T7333] hsr_slave_1: entered promiscuous mode [ 263.170023][ T10] usb 6-1: Error in usbnet_get_endpoints (-71) [ 263.209375][ T10] usb 6-1: USB disconnect, device number 9 [ 263.276731][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.276848][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.277011][ T7411] bridge_slave_0: entered allmulticast mode [ 263.356731][ T7411] bridge_slave_0: entered promiscuous mode [ 263.541778][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.541896][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.542059][ T7411] bridge_slave_1: entered allmulticast mode [ 263.569158][ T7411] bridge_slave_1: entered promiscuous mode [ 263.654203][ T7605] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 263.654241][ T7605] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 264.058963][ T7411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.361275][ T7411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.579246][ T7605] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 264.579276][ T7605] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 264.668870][ T7605] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 264.668898][ T7605] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 264.729709][ T7411] team0: Port device team_slave_0 added [ 264.756991][ T7411] team0: Port device team_slave_1 added [ 264.882819][ T7605] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.882847][ T7605] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 264.934921][ T7605] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 264.934951][ T7605] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 265.123609][ T7621] loop4: detected capacity change from 0 to 1024 [ 265.188477][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.188501][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.188535][ T7411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.554258][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 265.622595][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.622620][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.622653][ T7411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.744122][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 265.744848][ T10] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 265.748319][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.748347][ T10] usb 7-1: Product: syz [ 265.748366][ T10] usb 7-1: Manufacturer: syz [ 265.748383][ T10] usb 7-1: SerialNumber: syz [ 265.778778][ T10] usb 7-1: config 0 descriptor?? [ 265.802392][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 266.199986][ T7605] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.200016][ T7605] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 266.247160][ T7634] macsec1: entered promiscuous mode [ 266.247189][ T7634] macsec1: entered allmulticast mode [ 266.793399][ T7641] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 268.871896][ T10] gspca_sonixj: reg_w1 err -71 [ 268.944828][ T10] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 269.005722][ T7637] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff0x0000000000' [ 269.016840][ T10] usb 7-1: USB disconnect, device number 6 [ 269.276912][ T7646] loop4: detected capacity change from 0 to 512 [ 269.293747][ T7646] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 269.307766][ T7646] EXT4-fs (loop4): 1 truncate cleaned up [ 269.318801][ T7646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.543741][ T7605] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.543771][ T7605] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 269.562274][ T6990] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 269.569132][ T6990] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 269.604330][ T7411] hsr_slave_0: entered promiscuous mode [ 269.607368][ T7411] hsr_slave_1: entered promiscuous mode [ 269.611643][ T7411] debugfs: 'hsr0' already exists in 'hsr' [ 269.611673][ T7411] Cannot create hsr debugfs directory [ 269.613411][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20 [ 270.024137][ T5843] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 270.174095][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 270.174945][ T5843] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 270.176316][ T5843] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 74, changing to 7 [ 270.176353][ T5843] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1261, setting to 1024 [ 270.176386][ T5843] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.176418][ T5843] usb 6-1: config 0 interface 0 has no altsetting 0 [ 270.176457][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.272445][ T5843] usb 6-1: config 0 descriptor?? [ 270.289021][ T5843] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 270.303386][ T6990] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.878235][ T7663] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 272.958019][ T59] hsr_slave_0: left promiscuous mode [ 272.970477][ T59] hsr_slave_1: left promiscuous mode [ 272.984824][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.984854][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.011958][ T5843] usb 6-1: USB disconnect, device number 10 [ 273.013218][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.013243][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.080198][ T59] veth1_macvtap: left promiscuous mode [ 273.080235][ T59] veth0_macvtap: left promiscuous mode [ 273.080338][ T59] veth1_vlan: left promiscuous mode [ 273.080395][ T59] veth0_vlan: left promiscuous mode [ 273.817380][ T5738] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 274.179120][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.209417][ T7667] loop7: detected capacity change from 0 to 131072 [ 274.212095][ T7673] netlink: 'syz.5.311': attribute type 1 has an invalid length. [ 274.221053][ T7667] f2fs: Unknown parameter '/dev/i2c-#' [ 274.881893][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.882631][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.884180][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.893106][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 274.904312][ T5738] usb 7-1: Using ep0 maxpacket: 16 [ 274.905710][ T5738] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 274.906984][ T5738] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 74, changing to 7 [ 274.907020][ T5738] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1261, setting to 1024 [ 274.907054][ T5738] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.907086][ T5738] usb 7-1: config 0 interface 0 has no altsetting 0 [ 274.907123][ T5738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.915881][ T5738] usb 7-1: config 0 descriptor?? [ 274.936496][ T5738] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 274.944434][ T4932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 274.956806][ T4932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 274.965424][ T4932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 274.966561][ T4932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 274.967268][ T4932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.161166][ T7665] loop6: detected capacity change from 0 to 164 [ 275.395693][ T7681] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 275.710240][ T7682] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 275.758910][ T7682] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 275.960289][ T7676] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff0x0000000000' [ 277.034194][ T5621] Bluetooth: hci1: command tx timeout [ 277.670882][ T5015] usb 7-1: USB disconnect, device number 7 [ 277.836373][ T59] team0 (unregistering): Port device team_slave_1 removed [ 277.853530][ T59] team0 (unregistering): Port device team_slave_0 removed [ 278.187264][ T7687] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 278.738403][ T7683] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff0x0000000000' [ 279.046268][ T7691] FAULT_INJECTION: forcing a failure. [ 279.046268][ T7691] name failslab, interval 1, probability 0, space 0, times 0 [ 279.046309][ T7691] CPU: 0 UID: 0 PID: 7691 Comm: syz.7.314 Not tainted syzkaller #0 PREEMPT(full) [ 279.046340][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 279.046357][ T7691] Call Trace: [ 279.046367][ T7691] [ 279.046378][ T7691] dump_stack_lvl+0xe8/0x150 [ 279.046425][ T7691] should_fail_ex+0x410/0x560 [ 279.046470][ T7691] should_failslab+0xa8/0x100 [ 279.046510][ T7691] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 279.046542][ T7691] ? __d_alloc+0x37/0x6f0 [ 279.046566][ T7691] ? __d_alloc+0x37/0x6f0 [ 279.046591][ T7691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.046646][ T7691] __d_alloc+0x37/0x6f0 [ 279.046679][ T7691] path_from_stashed+0x35c/0x580 [ 279.046716][ T7691] proc_ns_get_link+0x16b/0x2a0 [ 279.046747][ T7691] ? __pfx_proc_ns_get_link+0x10/0x10 [ 279.046789][ T7691] ? __pfx_proc_ns_get_link+0x10/0x10 [ 279.046817][ T7691] pick_link+0x72f/0xfe0 [ 279.046871][ T7691] step_into_slowpath+0x58a/0x820 [ 279.046920][ T7691] ? __pfx_step_into_slowpath+0x10/0x10 [ 279.046960][ T7691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.047006][ T7691] path_openat+0x98e/0x1d60 [ 279.047058][ T7691] do_file_open+0x23e/0x4a0 [ 279.047094][ T7691] ? __pfx_do_file_open+0x10/0x10 [ 279.047149][ T7691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.047180][ T7691] ? _raw_spin_unlock+0x28/0x50 [ 279.047213][ T7691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.047245][ T7691] ? alloc_fd+0x651/0x6c0 [ 279.047296][ T7691] do_sys_openat2+0x115/0x200 [ 279.047331][ T7691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.047361][ T7691] ? __se_sys_futex+0x3a8/0x450 [ 279.047403][ T7691] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.047447][ T7691] ? rcu_is_watching+0x16/0xb0 [ 279.047482][ T7691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 279.047520][ T7691] __x64_sys_openat+0x138/0x170 [ 279.047563][ T7691] do_syscall_64+0x166/0x520 [ 279.047602][ T7691] ? trace_irq_disable+0x3b/0x140 [ 279.047632][ T7691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.047665][ T7691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.047692][ T7691] RIP: 0033:0x7fc81615e98e [ 279.047717][ T7691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 279.047740][ T7691] RSP: 002b:00007fc817085ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.047769][ T7691] RAX: ffffffffffffffda RBX: 00007fc8170866c0 RCX: 00007fc81615e98e [ 279.047795][ T7691] RDX: 0000000000000000 RSI: 00007fc817085f90 RDI: ffffffffffffff9c [ 279.047814][ T7691] RBP: 00007fc81623506b R08: 0000000000000000 R09: 0000000000000000 [ 279.047832][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.047849][ T7691] R13: 00007fc816426038 R14: 00007fc816425fa0 R15: 00007ffe5ae279f8 [ 279.047890][ T7691] [ 279.114804][ T5621] Bluetooth: hci1: command tx timeout [ 279.391245][ T7696] loop7: detected capacity change from 0 to 1024 [ 279.392380][ T7696] EXT4-fs: Ignoring removed oldalloc option [ 279.392404][ T7696] EXT4-fs: Ignoring removed orlov option [ 279.513410][ T7696] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 279.513521][ T7696] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.676469][ T7333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 279.698524][ T7333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.713618][ T7333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 279.749727][ T7333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.762740][ T7333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 279.822987][ T7333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.835959][ T7333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 279.857990][ T7333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.943879][ T7008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 280.226408][ T7715] loop7: detected capacity change from 0 to 4096 [ 280.256181][ T7715] EXT4-fs (loop7): Test dummy encryption mode enabled [ 280.278582][ T7715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.285913][ T5738] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 280.312540][ T7715] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 280.602209][ T7008] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.635228][ T31] INFO: task syz-executor:5625 blocked for more than 143 seconds. [ 280.635268][ T31] Not tainted syzkaller #0 [ 280.635784][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.635798][ T31] task:syz-executor state:D stack:22216 pid:5625 tgid:5625 ppid:1 task_flags:0x400140 flags:0x00080002 [ 280.635875][ T31] Call Trace: [ 280.635885][ T31] [ 280.635902][ T31] __schedule+0x17db/0x58f0 [ 280.635944][ T31] ? __lock_acquire+0x747/0x2de0 [ 280.635985][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 280.636029][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.636080][ T31] ? __pfx___schedule+0x10/0x10 [ 280.636114][ T31] ? lock_acquire+0x115/0x350 [ 280.636151][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.636188][ T31] ? schedule+0x90/0x2b0 [ 280.636227][ T31] schedule+0x164/0x2b0 [ 280.636273][ T31] bit_wait+0x11/0xd0 [ 280.636339][ T31] __wait_on_bit+0xac/0x300 [ 280.636378][ T31] ? __pfx_bit_wait+0x10/0x10 [ 280.636421][ T31] out_of_line_wait_on_bit+0x13b/0x190 [ 280.636459][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.636494][ T31] ? __pfx_bit_wait+0x10/0x10 [ 280.636531][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 280.636595][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 280.636640][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 280.636693][ T31] gfs2_glock_wait+0xbd/0x2a0 [ 280.636736][ T31] __gfs2_lookup+0x131/0x2b0 [ 280.636779][ T31] ? __pfx___gfs2_lookup+0x10/0x10 [ 280.636817][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.636856][ T31] ? __lookup_slow+0x1fb/0x2f0 [ 280.636903][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.636946][ T31] __lookup_slow+0x1fb/0x2f0 [ 280.636994][ T31] lookup_slow+0x53/0x70 [ 280.637038][ T31] path_lookupat+0x3f5/0x8c0 [ 280.637098][ T31] filename_lookup+0x265/0x5d0 [ 280.637147][ T31] ? __pfx_filename_lookup+0x10/0x10 [ 280.637215][ T31] ? strncpy_from_user+0x150/0x2c0 [ 280.637253][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.637317][ T31] ? getname_long+0xbc/0x130 [ 280.637357][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.637389][ T31] ? do_getname+0x151/0x250 [ 280.637429][ T31] user_path_at+0x40/0x160 [ 280.637458][ T31] __x64_sys_umount+0xf6/0x170 [ 280.637495][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 280.637529][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 280.637577][ T31] do_syscall_64+0x166/0x520 [ 280.637616][ T31] ? trace_irq_disable+0x3b/0x140 [ 280.637646][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.637682][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.637709][ T31] RIP: 0033:0x7f324879f397 [ 280.637734][ T31] RSP: 002b:00007ffd2dcb4288 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 280.637762][ T31] RAX: ffffffffffffffda RBX: 00007f32488344bb RCX: 00007f324879f397 [ 280.637784][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2dcb4340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 280.637802][ T31] RBP: 00007ffd2dcb4340 R08: 0000000000000000 R09: 00000000ffffffff [ 280.637821][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2dcb5430 [ 280.637840][ T31] R13: 00007f32488344bb R14: 000000000001eb74 R15: 00007ffd2dcb75f0 [ 280.637882][ T31] [ 280.637961][ T31] [ 280.637961][ T31] Showing all locks held in the system: [ 280.637974][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 280.637994][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 280.638068][ T31] locks held by kworker/u8:4/59: 8, on CPU#0: [ 280.638088][ T31] #0: ffff88801c2ce140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 280.638168][ T31] #1: ffffc9000200fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 280.638238][ T31] #2: ffffffff90246448 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 280.638340][ T31] #3: ffff888026ada128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 280.638412][ T31] #4: ffff88807e8cf258 (&devlink->lock_key#13){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 280.638490][ T31] #5: ffffffff90254cc0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 280.638555][ T31] #6: ffff88807d3e0e70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2140 [ 280.638630][ T31] #7: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 280.638711][ T31] locks held by kworker/0:1H/1998: 2, last CPU#0: [ 280.638729][ T31] #0: ffff88801b06ad40 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 280.638803][ T31] #1: ffffc900069b7c40 ((work_completion)(&vmidi->output_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 280.638893][ T31] locks held by dhcpcd/5277: 2, on CPU#1: [ 280.638911][ T31] #0: ffffffff902c5e08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 280.638985][ T31] #1: ffffffff90254cc0 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 280.639067][ T31] locks held by getty/5372: 2, on CPU#1: [ 280.639085][ T31] #0: ffff88803684b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 280.639154][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 280.639233][ T31] locks held by syz-executor/5625: 1, on CPU#1: [ 280.639253][ T31] #0: ffff888055a30e00 (&type->i_mutex_dir_key#12){++++}-{4:4}, at: lookup_slow+0x46/0x70 [ 280.639378][ T31] locks held by kworker/0:3/5738: 6, last CPU#0: [ 280.639398][ T31] #0: ffff888021ead540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 280.639476][ T31] #1: ffffc90004a3fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 280.639555][ T31] #2: ffff888029f981d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 280.639630][ T31] #3: ffff888029d63568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 280.639704][ T31] #4: ffff88802a1a2360 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 280.639780][ T31] #5: ffffffff8fafde28 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 280.639858][ T31] locks held by kworker/u8:17/6266: 2, last CPU#0: [ 280.639878][ T31] #0: ffff8880541cc140 ((wq_completion)loop7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 280.639954][ T31] #1: ffffc90008c77c40 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 280.640034][ T31] locks held by udevd/6651: 1, last CPU#1: [ 280.640053][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 280.640125][ T31] locks held by syz-executor/7008: 1, on CPU#1: [ 280.640145][ T31] #0: ffff8880340660e8 (&type->s_umount_key#33){++++}-{4:4}, at: deactivate_super+0xac/0xe0 [ 280.640234][ T31] locks held by syz-executor/7333: 1, on CPU#1: [ 280.640254][ T31] #0: ffffffff90254cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 280.640366][ T31] locks held by syz-executor/7411: 7, last CPU#0: [ 280.640386][ T31] #0: ffff888035aa6460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 280.640457][ T31] #1: ffff8880402d9880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 280.640534][ T31] #2: ffff8880295401e8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 280.640617][ T31] #3: ffffffff8facc180 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 280.640690][ T31] #4: ffff8880227a2128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 280.640769][ T31] #5: ffff88807905c258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 280.640853][ T31] #6: ffffffff8ed62c68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 280.640935][ T31] locks held by syz-executor/7669: 2, on CPU#0: [ 280.640955][ T31] #0: ffffffff90246448 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 280.641028][ T31] #1: ffffffff90254cc0 [ 280.962590][ T7724] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 281.206723][ T5621] Bluetooth: hci1: command tx timeout [ 281.429183][ T31] (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 281.429340][ T31] locks held by syz.6.318/7713: 1, last CPU#1: [ 281.429383][ T31] #0: ffffffff8f4f2938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 281.429511][ T31] locks held by syz.5.321/7723: 2, last CPU#1: [ 281.429589][ T31] #0: ffff888057ed6b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 281.429832][ T31] #1: ffff888052fb0460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 281.430084][ T31] locks held by syz.5.321/7724: 7, last CPU#1: [ 281.430144][ T31] #0: ffff88801e78d0b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 281.430315][ T31] #1: ffff888052fb0460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 281.430643][ T31] #2: ffff8880557c3880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 281.737806][ T31] #3: ffff88801ee9dd28 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 281.738208][ T31] #4: ffffffff8f5ba2c0 (pci_rescan_remove_lock){+.+.}-{4:4}, at: rescan_store+0xb5/0x150 [ 281.738364][ T31] #5: ffffffff8f5f2ea0 (acpi_pm_notifier_install_lock){+.+.}-{4:4}, at: acpi_add_pm_notifier+0x4c/0x230 [ 281.738549][ T31] #6: ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x5f/0x600 [ 281.738982][ T31] [ 281.738990][ T31] ============================================= [ 281.738990][ T31] [ 281.739070][ T31] NMI backtrace for cpu 1 [ 281.739090][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 281.739119][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 281.739136][ T31] Call Trace: [ 281.739147][ T31] [ 281.739158][ T31] dump_stack_lvl+0xe8/0x150 [ 281.739202][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 281.739234][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.739280][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.739329][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 281.739367][ T31] sys_info+0x135/0x170 [ 281.739394][ T31] watchdog+0xfd7/0x1030 [ 281.739434][ T31] ? watchdog+0x1c7/0x1030 [ 281.739472][ T31] kthread+0x38b/0x480 [ 281.739502][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.739529][ T31] ? __pfx_kthread+0x10/0x10 [ 281.739559][ T31] ret_from_fork+0x514/0xb70 [ 281.739589][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 281.739616][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.739648][ T31] ? __switch_to+0xc89/0x1420 [ 281.739691][ T31] ? __pfx_kthread+0x10/0x10 [ 281.739721][ T31] ret_from_fork_asm+0x1a/0x30 [ 281.739784][ T31] [ 281.739814][ T31] Sending NMI from CPU 1 to CPUs 0: [ 281.739841][ C0] NMI backtrace for cpu 0 [ 281.739855][ C0] CPU: 0 UID: 0 PID: 1998 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 281.739880][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 281.739899][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 281.739939][ C0] RIP: 0010:try_to_wake_up+0x6c/0x14d0 [ 281.739968][ C0] Code: 89 04 24 65 48 8b 05 eb d3 ff 11 48 39 c3 0f 84 76 03 00 00 48 8d bb 80 0a 00 00 48 89 7c 24 10 e8 09 b1 53 0a 48 89 44 24 08 <41> f7 c5 00 10 00 00 0f 94 c0 41 81 fd 00 10 00 00 0f 94 c1 08 c1 [ 281.739987][ C0] RSP: 0018:ffffc900069b78a0 EFLAGS: 00000046 [ 281.740006][ C0] RAX: 0000000000000087 RBX: ffff888027259f40 RCX: 0000000000000001 [ 281.740023][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900069b7800 [ 281.740038][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 281.740053][ C0] R10: dffffc0000000000 R11: fffff52000d36f00 R12: 0000000000000001 [ 281.740070][ C0] R13: 0000000000000003 R14: 0000000000000000 R15: ffff888056184098 [ 281.740087][ C0] FS: 0000000000000000(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 281.740107][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.740123][ C0] CR2: 0000200000007000 CR3: 00000000750c2000 CR4: 0000000000350ef0 [ 281.740141][ C0] Call Trace: [ 281.740150][ C0] [ 281.740162][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.740195][ C0] __wake_up_common_lock+0x13a/0x1f0 [ 281.740236][ C0] __snd_rawmidi_transmit_ack+0x273/0x350 [ 281.740268][ C0] snd_rawmidi_transmit+0x7c/0xd0 [ 281.740296][ C0] snd_vmidi_output_work+0x1a5/0x3e0 [ 281.740338][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 281.740378][ C0] ? rcu_is_watching+0x16/0xb0 [ 281.740409][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.740438][ C0] ? process_scheduled_works+0x97a/0x1630 [ 281.740471][ C0] process_scheduled_works+0xc3d/0x1630 [ 281.740504][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.740553][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 281.740590][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.740618][ C0] ? assign_work+0x3cf/0x5d0 [ 281.740653][ C0] worker_thread+0xa47/0xfb0 [ 281.740689][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.740724][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.740757][ C0] ? __kthread_parkme+0x71/0x1f0 [ 281.740800][ C0] kthread+0x38b/0x480 [ 281.740823][ C0] ? __pfx_worker_thread+0x10/0x10 [ 281.740855][ C0] ? __pfx_kthread+0x10/0x10 [ 281.740879][ C0] ret_from_fork+0x514/0xb70 [ 281.740903][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 281.740925][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 281.740952][ C0] ? __switch_to+0xc89/0x1420 [ 281.740987][ C0] ? __pfx_kthread+0x10/0x10 [ 281.741012][ C0] ret_from_fork_asm+0x1a/0x30 [ 281.741060][ C0] [ 281.798935][ T7720] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff0x0000000000' [ 281.985042][ T5738] usb 7-1: unable to get BOS descriptor or descriptor too short [ 281.990880][ T5738] usb 7-1: not running at top speed; connect to a high speed hub [ 281.990937][ T5738] usb 7-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 282.077822][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 282.336160][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 282.345448][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 282.355502][ T31] Call Trace: [ 282.358778][ T31] [ 282.361712][ T31] vpanic+0x56d/0xa60 [ 282.365709][ T31] ? __pfx___schedule+0x10/0x10 [ 282.370570][ T31] ? __pfx_vpanic+0x10/0x10 [ 282.375082][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.380735][ T31] panic+0xc5/0xd0 [ 282.384475][ T31] ? __pfx_panic+0x10/0x10 [ 282.388902][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 282.394363][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 282.399746][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 282.406001][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 282.412211][ T31] watchdog+0x1030/0x1030 [ 282.416556][ T31] ? watchdog+0x1c7/0x1030 [ 282.421017][ T31] kthread+0x38b/0x480 [ 282.425171][ T31] ? __pfx_watchdog+0x10/0x10 [ 282.429845][ T31] ? __pfx_kthread+0x10/0x10 [ 282.434438][ T31] ret_from_fork+0x514/0xb70 [ 282.439038][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 282.444149][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 282.449874][ T31] ? __switch_to+0xc89/0x1420 [ 282.454562][ T31] ? __pfx_kthread+0x10/0x10 [ 282.459157][ T31] ret_from_fork_asm+0x1a/0x30 [ 282.463983][ T31] [ 282.467232][ T31] Kernel Offset: disabled [ 282.471549][ T31] Rebooting in 86400 seconds..