last executing test programs: 6m23.208291364s ago: executing program 4 (id=2730): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) sched_setparam(r4, &(0x7f00000006c0)=0x4) process_vm_writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/114, 0x72}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/97, 0x61}], 0x9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000740)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r5, r1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6m22.303985013s ago: executing program 4 (id=2734): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x18, '\x00', @a}) 6m20.963346726s ago: executing program 4 (id=2737): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x18, '\x00', @a}) 6m20.172562071s ago: executing program 4 (id=2743): syz_mount_image$nilfs2(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="d1794da8c0cc267f0ee6070419e2bd7eda034276e28a258e1eb8b595a37ffdfe7d2a8c397215d8790d46ccb3a5f36ff412236251d8", @ANYRES32, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES32=0x0, @ANYRESOCT], 0x1, 0xa7a, &(0x7f0000000980)="$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") r0 = fanotify_init(0xf00, 0x181000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105440, 0x3e) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x4ade, &(0x7f0000000280)=ANY=[], 0x4, 0x32e, &(0x7f0000000a40)="$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") r6 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x591) 6m17.776967899s ago: executing program 4 (id=2753): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) sched_setparam(r4, &(0x7f00000006c0)=0x4) process_vm_writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/114, 0x72}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/97, 0x61}], 0x9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000740)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r5, r1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6m13.005654242s ago: executing program 4 (id=2767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 6m12.209042407s ago: executing program 32 (id=2767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2m36.419665003s ago: executing program 3 (id=3325): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010500000000fcdbdf25000000001eb23744f2386ab87d86d532690869814f75f9e80a5b586f01a43953f8c1ec7f8aac59e87a", @ANYRES32=r3, @ANYBLOB="01600000000000001c0012800900010069706970000000000c00028008000100", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000190010002dbd7000ffdbdf2502142005fd02fd030010000008000300eb4b09e76711cc10277a4675cc719f13e2b49e1080cc60ef34a2f3f4af39782acb6ad75c2c4debb631132795e799757465cb61fa61fb76a2f5068482d2e0c5a0c4e95ed778205df4c1c28cfc943d4bea701fb1a9fd39bd042965de1b927c3144cbc4f32b03d741a48d1143024cfbe640c8f83b20571e767afec114c8a6b49cbf73c7e0bdc4ad4332bdad104fdfb987e96282fe50a57504ba5188b92ccfe06d1fc3543f274f54b83cf56a5f2209f1e040fc14bf9c9820cffd647dad9a39", @ANYRES32=r3, @ANYBLOB="08000200ac1e0101080010000b000000"], 0x34}}, 0x20004040) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000140)=0xf8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) sendto$ax25(r0, &(0x7f0000000080)="04a0f49e0b", 0x5, 0x4040, &(0x7f0000000380)={{0x3, @default, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) unshare(0x2c060000) unshare(0x2c020400) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000ac0)={0x1d}) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) 2m36.019332426s ago: executing program 3 (id=3329): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) process_vm_writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/114, 0x72}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/97, 0x61}], 0x9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000740)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r5, r1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m35.001080948s ago: executing program 3 (id=3332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) fsopen(&(0x7f0000000080)='configfs\x00', 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_cmd={0x31, 0x9, 0x2, 0x8001, 0x1f, 0x5, 0x10, 0x6, 0x2e, 0x7, 0x1ff, 0x1, 0x6, 0x4, 0x67, 0x3, [0xffffccc8]}}) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) 2m33.921443183s ago: executing program 3 (id=3336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x8, 0x4200) setuid(0xee00) ioctl$BLKFRASET(r1, 0x1264, 0x0) socket$packet(0x11, 0x3, 0x300) 2m33.743213689s ago: executing program 3 (id=3337): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,acl,background_gc=off,noflush_merge,fault_injection=0000001262,acl,inlinecrypt,compress_cache,alloc_mode=default,noinline_xattr,grpjquota=,checkpoint=disable,\x00'], 0x4, 0x5510, &(0x7f00000020c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDhKaN3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/Nl5Xy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetcZ7sAw9ru9m40dzKYrufZrF1mNd1cJj/33bYH+R5GkW+D7P0MRiMYz7fPGjm+9l5lMV6b1DM53nTRvNgFIdFLC4X9bTTyOrYOs43/f/2Vru3d5AMm7v9dtpL1irVFyvVO+XqbtpoDpqr5Vq3cWc1WWh1RsvKg2atu95K01anWamn3cVkoVWvl6vVZOFuc6td6yXVamWlslReWyzObiev3X836TSShVF8pd3bG7Q7/WQ73U3yTywmy5WVlxaTW9Xk7Y3NZPPBvXsbm++8f/e9+y9vvPFqsehvZb0Qy0vLy+XqUnm5uniO9v9xUXSyMLH9w7GUpl0AwNmj/wem4eT6/90HESff/4f+fyLOVP87LmuC/e953z8ci/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+n7ui9ezk/l8fK2Yf6qYeqYYlyJiJiJ++wezcfFIztkiz9y/rJ/7Sw3flCLLMLrGpeK4GhHrxfHr0yf9LQAAAMCT68uPbn6ad+v5y/y0C+I05TdtZq5/MKF8pYiYm/9hQtlmRi/PTihZ9u/7QhxMKFt2A+vyhJLlt9wuTCrbfzJ7JFx+LJTyMHOq5QAAAKfiaCdwul0IAAAAp+mTaRfAdJRi/Chz/Cw4+8v7Px8IXjkyAgAAAM6g0rQLAAAAAE5c1v/7/T8AAAB4suW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3cqA1EcQB+NjiQfwqKck8ruUEZKSHHHCMKSBMUkANpIQ1QA7ltCStY4RlYWKG9eIy1q++TzDCW+fGM8GFmpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA+/W/Wi7+/vv7umrPbd1PmbgAAAIBrts160b6Zpf77fP5jPvU596uIqCPi2th9FG8uMkc5p3m8/s/59c2TGv5FtAmH75jk411EfMvH/ae+fwUAAAB4vTbL1TyN1tPLbOiCuKU0aVN/+F4or4qIZnZXKK0+5H0pFNb+v8fxs1BaO4E1LRSWptzGuVMs9Vnt436atZueNVVq6qsfOxZ5oyoBAICyRhfNeNBaAAAA6NOPoQtgGFUclzJPS4GT1OTlvbcXPQAAAOAFqoYuAAAAAOhdO/6/0f5/e/v/AQAAwDDS/n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0adusF5vlat41Z7fvpszdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwwP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX/S7X/5PTI0zydxpY+l4JFm7amxdNfYeNI4ejLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fv20YVBwD8nc/n0ALCBOQhCIHEAAt13dLSDTGAIgb+BESUuiXU5UebgVYVIgsbytwFwYgQEihs/R86J1KWsGXwECTmoDvf2ZcfUsyvO5N8PtK79/XpdO/7nqUo33uXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBh+PYkjtNDexQ38nObew+W037rUJ96tL69kLY0jqpM+v/hxfKHqDMO9+pIBgAAgLMhLur7EMJOsrGY9o12Vv8nxTVpzf/d06O4qOcP1/1FX9T+afv1l93nxwO1R+OkN72xMuhfPJpK87+b5Wx75sQrmtnKZ89e4uwLaby39twwydYz+ubx43daWThXRbYAwN9xoejzoPh9KO17dSYGwJnRLBXeRf0ft+vNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAKw7XwZBFHIYSF5iRObe09WD6uf7S+vVC0qw8froevJvdMb5GEEG6sDPoXK53NbLt77/6tpcGgf6f64KUQQl2jv5VP/9YHU1wcQi3rI/h3gv25/MuekXxmIPgwOnk1avyhBADAqZTkLa3rd5KNxfRcNB/C/vcH6/9XS3GYsv7f/ejqZnmscv3fq2yGs6+7evuz7t17919fub10s3+z/8kbl3pv9i5fu3LlWjd7VtL1xAQAAIB/ppW3cv3fmD+6/3++FIcp6//Pv+19WR4rVv8fa7LpV3cmAAAAZ9uzL//xe3TM+ajVCl8sra7e6Y2O48+XRscaUv3L5vJWrv/j+bqzAgAAAKowXIsO7P9fL8Vhyv3/p3544afyPeMQwrl8///C8qeD69VNZ6ZV8SfHdc8RAACAep3LW3n/P8ne/2+MX3lohBBee2UU5/8GcKr6P3736x/LY5Xf/79c3RRnUqMzWo+s74TQ7NSdEQAAAKfZE3lLi/3fko3Fj38+/37L+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVfszAAD//z3MPqM=") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0x8, &(0x7f0000002100)={[{@fat=@nfs}, {@shortname_win95}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@shortname_mixed}, {@utf8no}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@utf8no}, {@shortname_lower}]}, 0x88, 0x29b, &(0x7f0000000180)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000001040), &(0x7f00000010c0)=0x80) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f00000002c0)="88d9007138ce0533b4a54f8fc3af8217d43ce510fc7840d479aa4ed8cf78fe24544c44005fc8d8daf199f7b373d1b76a60509370fdbef15f1d67340b697c38e5bab74a113ca404b23ca83c7587d9a17699f4d67b228b7a806e54e54d66871595a23c7da292c186ab14eb2b43963b3adf8160291d776c0b2741dd106006", 0x0, 0x0, 0x0, 0x7ff, r2, 0xf9602932265e38f}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000001100)=0x2, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="050000006dee374f449e2d7e00000000020000000f00"/32]) 2m30.315221199s ago: executing program 3 (id=3343): stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f00000001c0)={[{@uid}, {@creator={'creator', 0x3d, "aa34aaf6"}}, {@dir_umask}, {@creator={'creator', 0x3d, "0de07c34"}}, {@codepage={'codepage', 0x3d, 'macturkish'}}, {@creator={'creator', 0x3d, "4931630f"}}, {@part={'part', 0x3d, 0x2008}}, {@dir_umask={'dir_umask', 0x3d, 0x1000}}, {@file_umask={'file_umask', 0x3d, 0xfffffffffffffff7}}, {@umask={'umask', 0x3d, 0x8}}]}, 0x7, 0x325, &(0x7f0000000800)="$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") r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x8, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)) (async) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f00000001c0)={[{@uid}, {@creator={'creator', 0x3d, "aa34aaf6"}}, {@dir_umask}, {@creator={'creator', 0x3d, "0de07c34"}}, {@codepage={'codepage', 0x3d, 'macturkish'}}, {@creator={'creator', 0x3d, "4931630f"}}, {@part={'part', 0x3d, 0x2008}}, {@dir_umask={'dir_umask', 0x3d, 0x1000}}, {@file_umask={'file_umask', 0x3d, 0xfffffffffffffff7}}, {@umask={'umask', 0x3d, 0x8}}]}, 0x7, 0x325, &(0x7f0000000800)="$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") (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) gettid() (async) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x8, 0x4, @tid=r2}, &(0x7f0000044000)) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) 2m14.815183378s ago: executing program 33 (id=3343): stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f00000001c0)={[{@uid}, {@creator={'creator', 0x3d, "aa34aaf6"}}, {@dir_umask}, {@creator={'creator', 0x3d, "0de07c34"}}, {@codepage={'codepage', 0x3d, 'macturkish'}}, {@creator={'creator', 0x3d, "4931630f"}}, {@part={'part', 0x3d, 0x2008}}, {@dir_umask={'dir_umask', 0x3d, 0x1000}}, {@file_umask={'file_umask', 0x3d, 0xfffffffffffffff7}}, {@umask={'umask', 0x3d, 0x8}}]}, 0x7, 0x325, &(0x7f0000000800)="$eJzs3U1rE00AB/D/7CZp8rT0WdtKwWO14Km09aB4sUjx4hfwIMXaplC6VtAKWhCjFy8i3gTBozfPol9BL+IX0FMPIgh6KR5cmbdkN53ZJmntNvb/g6bZ3XndmdmdSUkXRHRkXZz//OrMlvwRZQAhgPNAAKAKlAAcx3j1zvrG6kZcX85LKFQx5I+Ajil2hFlar7uiyngqhhHJrRKG0vvo70iSJPmS3jHgCvXjwMpDxRB67O8Q6B5RMtcGPVb72nf12vD09H9aqoXFNrZxF8NFFoeIiIpn7v+BuUsMmfl7EACTZh7e7/f/zPxmu7hyHArN+3+gtxMhz8//6lBrvaeWcLL1A7tKdKXl7BNJ63RXoHtWpgHEbqtKVZagtrIa16caKoFHuGCkgo2p12XYiii+0lb0rwnH2jRHXt3zDao6lGUdZj3lH+06x3df8dyd3cKHDsok3ouPYkFEeIHl5vyvlAh5ctT5idpaSpd/2p+iqmWkQ2Vq2Vq/H1OZnLAt8PZ1q5Y133mtIpRlcZGpiPb5e2TL+azij4URZD9W0LWb8ddOxRp1xpptbv9yxhprj1VbKcf1qaWbce5HKfvGuaITT8UVMYFveIP51Pw/kKEn4R+ZmVEuVEjTM3LrU1IhPe2YoQbwja5GJimXnA2d7wmu4xyGb9/bXFuM4/qt4t/YoXJIyqM7oumOco/8nQqDqnxTBrBvmf5OksR5qISDqHJZVfXsy1aVN9cWRUNv7i0LNJoJ2kNz/sAA5gCYPaYJHq8293Se+wPYPQPoLvpP2dpqj7tD2utUV+UJ209CR29sVplDIQY6Gim1Htrr8v21xbi3SxH1l1ajY/xq0YWhIsh5l9Drv9R6ZVpddeRLlLMaSXZLPJXijGcFNKJe/+tsBddM1jtPHLRvdllznTwNnGrLMYDN8WF7spEpJw7jXyW7/1OGmMcnXOPn/0RERERERERERERERERERERERERE/abbbyP08nWCbI5bR/AfbxARERERERERERERERERERERERERERER7U3q+b9AqJ4YUyn8+b9hB8//tc+lIKKe/QkAAP//T49gVA==") r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x8, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)) (async) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f00000001c0)={[{@uid}, {@creator={'creator', 0x3d, "aa34aaf6"}}, {@dir_umask}, {@creator={'creator', 0x3d, "0de07c34"}}, {@codepage={'codepage', 0x3d, 'macturkish'}}, {@creator={'creator', 0x3d, "4931630f"}}, {@part={'part', 0x3d, 0x2008}}, {@dir_umask={'dir_umask', 0x3d, 0x1000}}, {@file_umask={'file_umask', 0x3d, 0xfffffffffffffff7}}, {@umask={'umask', 0x3d, 0x8}}]}, 0x7, 0x325, &(0x7f0000000800)="$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") (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) gettid() (async) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x8, 0x4, @tid=r2}, &(0x7f0000044000)) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_settime(r3, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) 7.48534467s ago: executing program 2 (id=3748): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x3, 0x1, 0x1}, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "2a9c5b2931b36ad308591c7d445c484b9fa250f61a691885", "526b2d80618e18408a8d8ab019a339024183021bfe2010c5d4254ee026d62c83"}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@generic={0x88, 0x2}]}}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd}}}}}}, 0x0) 6.311936397s ago: executing program 6 (id=3750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x4) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 5.255241631s ago: executing program 0 (id=3753): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x2, 0x0, 0x8}, 0x20) io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r4, 0x3, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x0, 0x3938700}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "67a2"}]}}}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff39}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xc0d0}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x76}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010004}, 0x44000) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r7 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7ff, 0x20000) ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000240)=@ax25={{0x3, @default}, [@null, @bcast, @default, @netrom, @remote, @remote, @remote, @rose]}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/103, 0x67}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/253, 0xfd}], 0x4, &(0x7f0000000800)=""/243, 0xf3}, 0xffffffd8}], 0x1, 0x1, &(0x7f0000000940)={0x77359400}) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x158, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'vlan0\x00', {}, {0xff}}, 0x7a, 0x118, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x3, 0x0, 0x0, 0x0, 0x400}}, @common=@unspec=@connlabel={{0x28}, {0xffff}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0x0, 0x0, 0xff], 'veth0_to_batadv\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4.727226008s ago: executing program 2 (id=3757): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xb1, &(0x7f0000000240)="$eJzs0T9KA0EcBeC3f1C30QN4B+9ga+8JtrS0UgStPIY38CoeYW9gsW2aCctuIGlSBEIS+D6YmccwAw9+f6vf+9wm5TMppZSrJF3m/Pr2/vL8NO1NkvykzXVmm5MLVy/rZpr53Zz/H/P9tfVmGD/6oUo/jGVxwsIAAMDB6jwsqdq57/Z9apM0x2wFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcD7WAQAA//9dPSJg") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0xffa1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x2000c010) truncate(0x0, 0x20fffffffc) 4.714751269s ago: executing program 0 (id=3758): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000b80)="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", 0x136}], 0x4}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000100)="146d7d1fe23f2a38ae8e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r2, 0x891e, &(0x7f00000000c0)={'geneve0\x00', @ifru_names='pimreg\x00'}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000300)="4274aa814c8f6ea8d8db43178dd2f41e", 0x10}, {&(0x7f0000004280)="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", 0x1aa}, {&(0x7f0000000600)="1a13a7837ea8ca56a91f616de628b8b1b2107d0400000000560000805237ffee5666e0e28cfda9249a7beaeaab10864089fb7c447ce7416df7c0aea488b69d959465548a35aabfb0ed3524428b68945f0a2c8f90e10316618c7695aed1e852be6f9a23127af49764f9c8560ef1e10729", 0xffffffa5}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb3eb5f4759b8afa9a3d6fa9075032a5", 0x2e}], 0x4}, 0x41) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x540, 0x65, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x414, 0x2, [@TCA_BPF_ACT={0x410, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe8, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x95, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83a23b"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x104, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xc9, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2578f669067fc7f4e7e11e7d6206ac703d98c3cd3b5372b60c63437ce"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0xcc, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x34, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0xf0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe0, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xac, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x7d, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a9c4c25107289c2b66110cdb18b8dad6c876d5cfcf012a45cfa35105f45b2f785d52e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x540}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xd5}, 0x44004) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010b6118288cfdbcfe250c4000004f7ff4bb2db78911c88f484", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c000280080003000a010100"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') io_setup(0x401, &(0x7f0000000000)=0x0) io_destroy(r6) gettid() socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40084}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x440e0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000a40)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @tail_call, @jmp={0x5, 0x0, 0x2, 0x5, 0x3, 0xfffffffffffffff8, 0x4}], &(0x7f0000000cc0)='GPL\x00', 0x7f, 0x27, &(0x7f0000000d00)=""/39, 0x41100, 0x12, '\x00', 0x0, 0x17, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x0, 0x5, 0xd4c, 0x9}, 0x10, 0x2074a, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0), 0x0, 0x10, 0x5}, 0x94) 4.65880807s ago: executing program 6 (id=3759): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4004, &(0x7f0000000240)={[{@part={'part', 0x3d, 0x60d2}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@codepage={'codepage', 0x3d, 'iso8859-15'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@file_umask={'file_umask', 0x3d, 0x6}}], [{@hash}, {@euid_eq}]}, 0x1, 0x35f, &(0x7f0000000e80)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000600)=""/171) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200020c0, 0xffffffff, 0xfffffff8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) rename(&(0x7f0000000980)='./file1\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1\x00') 4.36317842s ago: executing program 2 (id=3761): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x250, 0x4d, 0xf0, 0xb, 0x8, 0x7fd, 0x4, 0xc396, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x4, 0x10, 0x6, "", [{{0x9, 0x4, 0xb, 0x0, 0x1, 0xff, 0x25, 0x5c, 0x9, [], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0xd4, 0x9}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="7996e55d257ea72b11a7928d0eaecfdf2a44d67e55a8c3da5173fcfcec751add01d881f33dc2bc83a5d5bcbd6b8c6f61258dfe595ebe5b1d72f24edd106580603e3b293323781158da2e3658edc8ea13bbc6ddab73fb52855bef6170c884bdcd05719a0e66f2923a2803c452ad4daf507efa99852cdf45a4574bd97bd1a2630968c4336a", @ANYBLOB="000000000000000007000000000000000000000000000000ffffff7f000000000000000000000000020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000001000003000000004400050020010000000000000000000000000000000000022b0000000a000000fc0100000000000000000000000000000000000004", @ANYRESDEC=r3], 0xfc}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r4, &(0x7f0000002600)={0x2020}, 0x2020) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x80000) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x3, 0x80000006}, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x7, 0x4) 4.217546755s ago: executing program 0 (id=3762): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x60, r2, 0x1, 0x70bd30, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400}, 0x4040894) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x2) 4.103415128s ago: executing program 6 (id=3763): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8213, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x0, 0x30, 0x3, {0x8, 0xb, 0x0, 0x3, 0x1, 0x9, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x2, 0x6, 0x26, 0x3}, [@processing_unit={0x11, 0x24, 0x8, 0x3, 0x2, [0x0, 0x0, 0x0, 0x2, 0x2, 0x0]}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x9ebe44fdcc7c7df6, 0x1, 0x3, 0xd, 0x7, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x6, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0xe6, 0x40, {0x8, 0x25, 0x1, 0x3, 0x33, 0xfe, 0x5}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) unshare(0x2c020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x1000000000000, 0x20004080}, 0x48810) 3.991393482s ago: executing program 5 (id=3764): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0xfff6, &(0x7f0000000400)) 3.881748806s ago: executing program 5 (id=3765): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) timer_create(0x3, &(0x7f0000000040)={0x0, 0x20, 0x1}, 0x0) (async) syz_open_dev$usbfs(0x0, 0x7, 0x101301) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x4000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000190001002abd7000fddbdf251c1480f9fd0000040012000005001a000000000008000100000000000c0009001a0f0006", @ANYRES32=0x0, @ANYBLOB="140012000100c7468bc3135fd351908694b58fb00c00090007002c03", @ANYRES32=0x0, @ANYBLOB="05001a0008000099"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x21c0, 0x103) write$P9_RXATTRWALK(r5, &(0x7f0000000040)={0xf, 0x1f, 0x2, 0x84}, 0xf) (async) close(r5) (async) openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x42, 0x120) splice(r4, 0x0, r5, 0x0, 0x6, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="03000000000000000000000000000000000000001973c1749b18a3c13c31b571101ebad8d408773ef472522d909c5f858d18d3fe86df83970852e1896b00db6aab6e54494e19f04a71c390c289807242f30a93b74ff85e885b5981961a60c349f819c2cfa1ba1681c987d488f349600ff0190cd8587f80c52dbdcb5ef91fe760b5aa15f1a9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000300"/28], 0x50) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f8480b0000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40040) (async) socket$inet_tcp(0x2, 0x1, 0x0) 3.809611358s ago: executing program 0 (id=3766): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x12b100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYRES32=r1], 0x64}}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000108004500001c000000000002000100"/42], 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x6e, 0x1800) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000008c0)={'\x00', 0x0, 0xb1c, 0x4961, 0x7, 0xbce, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000880)=0x5462bfa2c98bada9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001fc0)=0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmmsg$unix(r6, &(0x7f000000a0c0)=[{{&(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000004c0)="04494aa1b889f3517b40ae66a4f51a0450c03aba1d4c18bdabd7db6db4d0537ff2c4fdb90432df41b9938facddb93b9fac3a9793ee7240079ff37b2481f36d9616db478263b7687c72a34642117bdc052173b5ba6fe15d20298a3cdcdecf486dd8ec986dfafe4f70f36c66086d42b37d381fe5e2e519018f807e03d5cd805ec583b0f8652ebeb77afc99be1ac1bfcaeab617e69d5215f6484fb0f23e75936147df12b71e4b89c9479bf76dc0d97a64378cb64269da4d2a325132c757ea0ca1613a48c58428f3676188b640a961de3fe0634209902bb92675e9099b6c0fd09eaf735f6f618927e9c299", 0xe9}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="12ef8c99ca08099e45cf380d82ae33fd3bda874abd4e46d66b12f0acfde97769b5d54e5bef64af3b0759", 0x2a}, {&(0x7f0000000640)="ad1955e3ead6fb9f0a674ae67fd955146744ff8bf9483b24f6242e5892da329225beb8965319e2af3e4f270b04de85e73e0529191ec3fd4519b9bb48edcfbcf1e4455a94f261a4277aa2c79befc22fd3ebac7ab06eab63c64fcbe2be", 0x5c}, {&(0x7f00000006c0)="b6b17c142ee64967f8fb7410fd6e42999402da79ddc77597e83ca66131b91f47bedfcf9a883f7e29b58095fafbe1aa5b5d2d095f485549fcd6cda7073aadf6039bcc86eb4e7fc9f3881fc6fa3db92de201386679997b866db81ea77145b047b58989d18e934f3ae8a496dc833925c9829ca1164f8d52e5ba7c07e2dd87f134f2dad6", 0x82}], 0x5, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r7, r9}}}], 0x20, 0x20000010}}, {{&(0x7f0000000b00)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000000b80)}, {&(0x7f0000000bc0)="746c6568f82e0d9b5157185f70ec1bc1687ddcfd0fd7bb926125aa1507a620bbee42529c09af5b1ba09a7c67e76a0b77670ec6978d6c2d6878dffacc519a6f68b698fd790eed8cea1fc7f7921c4b8ac11c0027b90cd0bf5f6b78e45cfdd225935b3b50586e368e0f97c53dfd", 0x6c}, {&(0x7f0000002180)="cd09e39b2f84a893a185af93c93799840f66cc49f208bd2547623f5f252b0853b69c3f543ac672ee42d90e2ff6eb715f9482fe091299b609b02f70343065edd2259e2dbccb31d146bdc72a04a61024fafde140d63e008cb5d075d38ae30a3cfa4f243071c1ba34f340bcbbd3021906cb133587222cba0d579db1eb063a75ad8ec47cbe57c9660b14637f24f8e37a3ce2348150cb2629be79df4cc7e09728a3ca25b4af915b8c26869f7684e93e1e28826eda4b2d1b4c36e3bf71e60ce91b30c03e7eeb", 0xc3}, {&(0x7f0000000d40)="c4f849eb5d8c61ac41fffdd90b36413954071d2ba7b2e578cb4ade14195e4c44f1ab5457a27ea90e3079700a83f9232d1dcd2da2040de73776afec09f2238dfecf67482ede831dcd73c2024b32981bc47ea3744ce10d", 0x56}, {&(0x7f0000000dc0)="e2d95962a3169910f8d33e65db2cac1657d27f90c87301c0afa870bb0f685c640adb1bf0b628ba0bfcb9f7e5fabd02f380215f86d252a7b50b6b8749c6a5bc5fb14ce39bbcde21dd13a70568ad606e69ed2e01fdbc9bea79e50d08511e8e210428ecfd67bd962cda110eab6d67ea712e3ceae2987ccaa0c149177e639b4e690f552cd67831a8ea0e522fda2ce3f17f873a61cc6d602709", 0x97}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="fc515b05a4eaeecf981801d0b31b2af47f5e60436835b508f3e9ef91a3", 0x1d}, {&(0x7f0000001ec0)="cb731887c0a15cc4d5bafcc1d4e6d1fbe173ff102c1a88f781c7cbb73748359850f1e7c051c858784dcd51b3d81cbc6d5b3367556794040ae4e02025040694df669ab6", 0x43}], 0x8, &(0x7f0000003540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRESHEX=r10, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2c000000000000000100090000000000", @ANYRES32=r6, @ANYRES32=r11, @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYRES32=r0, @ANYRES8=r3, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x4000000}}, {{&(0x7f00000083c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000008440)="3619c7e4605a6437d0854208435c83e947d8c07ee037717ac03a27127881529e4be95a96e1a287b51b255abfe1b5b995d2dc0baf6092b4c7fda39c08ee4897257eeab9e07f5dff9b83a693181f266e457340d9a7c4d64cbc68d777ac5881dbc422a2a5dee39a5211a44e5ca5db76b4093975505791b6a447bb2dc55e1af9d53a6d862c50bebca7dd24181ad7c1fd90c9a695c627cd0c24dfa0bad26ecc5fb2df82a4f5c5308f2cfa409c30384bdc18e8aef064604dfbb0cd1beaab42fb29aab89354d81d39", 0xc5}, {&(0x7f0000008540)="54be7bf3ce6f970c422854c576d1242ba65b3f6ca863bd5b1268ff46c57d946bee0e99be371dafe1c3594c1921555779ed0e", 0x32}, {&(0x7f0000008580)="e77d452c3f9b8cca7dfd4e290b25b80ce4879728513b458e461c92bdf7f71da65e106dcef98f06ca30c4be8fe7e7dae0216062e970634435f6081316abf571619b5b98aac8de87d2f093df165b30b273018c035f64af0d36b37c9c3da789d249f4fa2b4f2e", 0x65}], 0x3, &(0x7f00000020c0)=ANY=[@ANYBLOB="28000000e27bda269ed269501e47627bc9d23fa34900000000820700", @ANYRES32=r0, @ANYRES32, @ANYRES16=r1, @ANYRES32=r8, @ANYRES32=r7, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000c54d2c6e0000000000000100000001ffeb00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x4801}}, {{&(0x7f0000008740)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000008ac0)=[{&(0x7f00000087c0)="fa9a6e38de723dbdc35d9c1bf196bc0677eeeeb986dcdc", 0x17}, {&(0x7f0000008800)="cfcf4010ca83e4b5560e18afc853bbf51ffa80036fafd14df3aa1a66d9c583b08df8a9b9dabbbe93f396f7dda83dd7d96d8181fcd3304353fc5f50098871d881925923c6c31d27490f679bea4c217fb0cd2fcdde420310ad0efd7eb0e76becfafdbde514b0c569a1ebb80cfdd7000b57ef3390bb45fd06f34a9a245b32d18fdba2a51af2ddbc8111d8439ec2a86d9fa2f6c74719b22bbcebb87968b10652051b0ca58277", 0xa4}, {&(0x7f00000088c0)="7fafb3b6b20ded113850b65d76d02fe978656f407f54f749ff071f0842995320b124d75a3f3aa465cd543303fc3a1f52c6986f7fed4fe5caed4c7e39c192ec861ef223e5625acddcc14d27545a0e0a7b5a", 0x51}, {&(0x7f0000008940)="ab8e28680559c5c5aa2910df9527eaceb9319a52aa733e674c53f3d8a92c273244562492289d83b8dc15d8af1713713f8555e75f41e7aaa78a7d3308d8b548ee71cbb6d12f3e54fec62812cccf1e7a5d9f329396918e76e0baef15596dd756842da743199c562c3f3aad3b9216773ec13c3fcf52c7da1f1d48fd2029add7e1c0201382f67db98a8f28650edb8ec53a2e03718e02424ea3321e52426b8f488bbf3aff4ff672ebebc27369e15981f7eea09977edd741af820a5f873bc36804f76e9163a6fa900f75297e711419f2e8f9a46d7127aba681d57fda0acbad05504bfc204bc47c06a62872ed", 0xe9}, {&(0x7f0000008a40)="f5e18e0dfa7bbe99ee94ff8d516d33b89e8193", 0x13}, {&(0x7f0000008a80)="ed421c6bbbbd0df42edf34f52103b22f2f158f3860f1929d", 0x18}], 0x6, &(0x7f0000002280)=ANY=[@ANYBLOB="000100000001000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r11, @ANYBLOB="000000001c000000000000000008000000008faf5bbc15d5b8269a", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYBLOB="0c1a0bb2c1a8aae38f36fe64532b370bf4ea94c8c4d55f57b495e7bbf6ae69f45ea4f1650ec4c9adc1aaeb248618f17df4bb5d68f50310630f147fbf929471614e6588bbc2c5ce4afc686333e9cae31ab82e4470b2e87e7c86e1f889ccc246770a09785a6502602a7cb3d0d60261b6a3df065f1028439e9f769624a206f1f223ca0673f2dad226", @ANYRES32=0x0, @ANYRESHEX=r10], 0x78, 0x1}}, {{0x0, 0x0, &(0x7f0000009c80), 0x0, &(0x7f00000033c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000003e6227d62454d622000000", @ANYRES64=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES8=r8, @ANYRESOCT, @ANYBLOB="cab510b9954f4fceae3d0b7cd3e8226cc536cde5f4450449b0b7567c6a4dc022934f8430dff561c2f7995159979bf51787f1581b023fc26646600486853690a8fed75fefae1b1220b92dd9212329bcddeef97f7527e8e132f3ff9412fa811e3d5c654fa489961db56217b2ce649c45e92e042b0e2998924913a4a86f1a690234b226586e08653d8b79bd5e7f24071279551150c1340d389560df7af7c012f015735cad2f2203580f8dd32f6bc35b4e532a204de53f7183d999b6130ce0007ffb3da9e40584718b8e", @ANYRES32=r5, @ANYRES32=r1], 0x98, 0x64004010}}], 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) 3.672471162s ago: executing program 5 (id=3767): syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x3c, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r3, 0x211, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x69}}}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x21, 0x34, @random="9fd27f387f1b50e7b5d11b016f11d3a2e86ace6fe7e14500532b9fde22"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 3.483074298s ago: executing program 1 (id=3769): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x2, 0x0, 0x8}, 0x20) io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r4, 0x3, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)={0x0, 0x3938700}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "67a2"}]}}}}}}}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x40, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff39}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xc0d0}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x76}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010004}, 0x44000) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x80000) r7 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7ff, 0x20000) ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000240)=@ax25={{0x3, @default}, [@null, @bcast, @default, @netrom, @remote, @remote, @remote, @rose]}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/103, 0x67}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/253, 0xfd}], 0x4, &(0x7f0000000800)=""/243, 0xf3}, 0xffffffd8}], 0x1, 0x1, &(0x7f0000000940)={0x77359400}) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001880)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x158, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2b0, 0x20a, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'vlan0\x00', {}, {0xff}}, 0x7a, 0x118, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x80000001, 0x3, 0x0, 0x0, 0x0, 0x400}}, @common=@unspec=@connlabel={{0x28}, {0xffff}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @private1, [], [0x0, 0x0, 0x0, 0xff], 'veth0_to_batadv\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3.175330438s ago: executing program 1 (id=3770): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14013, &(0x7f0000000480)={[{@gid}, {@codepage={'codepage', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x4, 0x339, &(0x7f0000000140)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.147662049s ago: executing program 5 (id=3771): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea", 0x74}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcd", 0x7b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in={{0x2, 0x4e24, @empty}}, 0xffff, 0x4000, 0xfffffffe, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.031149993s ago: executing program 1 (id=3772): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) process_vm_writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/114, 0x72}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/97, 0x61}], 0x9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000740)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r5, r1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.914662357s ago: executing program 1 (id=3773): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) process_vm_writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/114, 0x72}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/97, 0x61}], 0x9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000740)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r5, r1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2.861277558s ago: executing program 5 (id=3774): r0 = socket$inet(0x2, 0x80000, 0xff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000080)={'syztnl0\x00', r1, 0x1, 0xf8e1, 0x8, 0xffff, {{0x5, 0x4, 0x0, 0xd, 0x14, 0x68, 0x0, 0x10, 0x29, 0x0, @multicast2, @multicast1}}}}) r2 = socket(0x2, 0x3, 0xff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000440)={{&(0x7f0000dfe000/0x2000)=nil, 0x2000}}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x8916, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0x2, 0x4e25, @local}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x80) 2.753786562s ago: executing program 1 (id=3775): syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xb1, &(0x7f0000000240)="$eJzs0T9KA0EcBeC3f1C30QN4B+9ga+8JtrS0UgStPIY38CoeYW9gsW2aCctuIGlSBEIS+D6YmccwAw9+f6vf+9wm5TMppZSrJF3m/Pr2/vL8NO1NkvykzXVmm5MLVy/rZpr53Zz/H/P9tfVmGD/6oUo/jGVxwsIAAMDB6jwsqdq57/Z9apM0x2wFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcD7WAQAA//9dPSJg") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000040)=0x5) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x2000c010) truncate(0x0, 0x20fffffffc) 2.591262597s ago: executing program 1 (id=3776): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) setregid(0xee00, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = getgid() setresgid(0x0, r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r3 = syz_mount_image$xfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x800, &(0x7f0000000340)={[{@pquota}, {@uqnoenforce}, {@inode64}]}, 0x3, 0xb94d, &(0x7f0000000dc0)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhFHaznU8lLaMjTIoyASq4zWgjMlghi0Kg0jRGFBCphJfIUZeIgbiA2d8gGFqYCCBjSAMRAUTGWDCa5gNNVBzes/t2ruuof/t/6+jn0+ynnvO7e/s9n77P5eSte2eu6Ajy2qykt6s0g3Lj32u8cb2H3xz2n2HL7626vXS0bZJxd0NxXbfYjsl6z9ZW367unSo5jurf1Gd71QPPu9u9fVV78my9xW7bcW2tbS5vKn8fn0VisOTy/dXDzyMqq+W/gyoz998ec6U8wafJ3/HLMsO3eYDHae62+fNLZ6TbFC3CcXdVVvv69/WlP4c9ccsO2pttt3PjzGVP87JZ6z6wpNj/UB2Bd3t8zor+rcVnauK9dhQuQbHo8rP83PPbFpWPIVVg69Hu5ru9rnHZyOs43/+5Ru9faXrZm2WZXVZlk3MsmzSWPdg52jvaOnIr/nl/SJ7ef1PHu7z4s7/Xv2zLMveXbxOHFZ+LQB2Le0dLUcPs/7rRlr/dx23/ibrH3Z9ne0dLflar1j/k0Za/9PuPmZh8UV3a2nqrbH9IAAAAACAYS2/bOWFi5Yu7bnEDTfccGPgxlhfmYDYti76sX4kQGop/nNirD9GAAAAGO86u9pfmlA15NCEwTt7P9zTv525pfuClXfPOaG8Le6eP8wph3yff19fX9/q05eeU+xOrPh+2UmVw/n5l9y36NJit6Hy+w9q+4/WZmefv2Rpz6H5XzW1Nrs032nKzzutNvtavtOc70yvzW7Pd1r6d+qzNfnOIecuW3pefuCAwGfsnaWzqzebMKRYNuSzYXD/Jff1/qq8HeGU5bP1/1CJvP/mplvuqrivbDv9B86/7//hzxd4Rxld/2uuKW9HOOU263/94llNw923/f4D55+if1zDXP+HNKq87ldc/xuGOeXA/K9P+/pzef8ZP113bXGo5u1c/wedf2pl//6TD1z/81PtV77+568t++/QkzEOdXZd9dJI63/k/jUfKt6tetDswNla+m77TN7/nuvaHi8O1Y6y/34jrf+qhm2uJ4xSZ9dNfRXrfxT9s+nDnHKgybvmdK7O+7/25iOPDrpvNP33r+zfuOKizzYuv2zljCUXLVrcs7jn4pbmWa3NrU2zZ89q7L8klN7u2JMyjuzY+s92q5ipyrL9B+ZnX3HMhrz/n28+9dbi0KRR9p824vo/e+hjZZAp1VldXXbpohUrLmkqvS3vNpfelt5tmP6jeP2fWv4iqr7YVmXZBwfmD7zy9YPz/ndu2HRLcahulP2nj9S/buvfS6AdXP/nVcwM6f/QIz035/2XH/ThC4tDo339P2DE9d9r/e+ozq6K/+Gzk+X9T958xMbA8QN9/RdXiv71G1tXBY5/RP+4UvRf82LL7YHjB+kfV4r+997feEbg+MH6x5Wi/+cePGhl4PgM/eNK0X/GU9P3DBw/RP+4UvT/xxNTZwaON+ofV4r+Jz174dWB44fqH1eK/t99ZdmNgeNN+seVov/v+859MHC8Wf+4UvTf/dXFLweOt+gfV4r+K565fK/A8Zn6x5Wi/2/XX3lk4PhH9Y8rRf+Na5afEjg+S/+4UvRvXPf5SwLHW/WPK0X/F1/44W8Cx2frH1eK/g3P3/K9wPHD9I8rRf/Lt/zkX4Hjh+sfV4r+d71xx2OB40foH1eK/g9v+OW0wPEj9Y8rRf+aJ38e+u80P6Z/XCn6n/XAvRcEjn9c/7hS9P/W2rtPDBw/avv9a3bWQxzXUvTve/bEZwPH26z/uFL0n/XK/NDfD9uuf1wp+l/UN+/HgeMd+seVov+trx79lcDxo/WPK0X/p58564rA8Tn6x5Wi/3vXL1wYOH6M/nGl6N+55rTmwPG5+seVon/vugXvDxyfp39cKfrPfeFLfw0cP1b/uFL0X/X81f8JHO/UP64U/f+05drrA8eP0z+uFP33fmPV6sDx+frHlaL/ORuubw8cP17/uFL0v+PJb58fOH6C/nGl6P/qAzfsETjepX9cKfoftvb7oT9s/UT940rR/7rXNtwQOH6S/nGl6D/nrcfuCRz/hP5xpei/z8vPPB44frL+caXo/8Tfn94UOL5A/7hS9P/RI2snBo5/Uv+4UvQ/+3d/GO73hLwdp+gfV4r+Rzy6rjNw/FT940rRf9PfHro4cPw0/eNK0X/mv/e6LXC8W/+4UvR/c/M+VwWOf0r/uFL0v23jni8Ejn9a/7hS9F/24gfWBY4v1D+uFP0n37/74YHjp+sfV4r+Tz24x96B42foH1eK/l98asKKwPEz9Y8rRf/5T0xcEDh+lv4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyPHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnt3Aq/pWPh//JmVEUIqKRo7ZVeWVJaspcUWIkt22UL2QossLSRFWuykTaFCloqEyJpKpZQWJUlSEf/XmDnTmL4zTf37NZrv+/16zXm2ex7Xc32e6z7Huc+5BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBGtPk6G685GIyccOvwf3j8lH3Xu2eZU9c468RFr37JzscOe3D8vavPPOHhsY9PZvDEk60+7rHh4zcZedKFZw0fd2P4pM87y5gxw2YfDJs7j+qQrf/JsOcYujL+SccOBoNhx4z/M9GYcR9Wu/vu2//Jc1XbfI111xk3eeP/TOw2YsLDE+6feH3k+D+rbjMYrLrVYIrvj+lvo3vvfGh6j+F/weZrrLv+ZP0HEzo/0X3y9d1q8vf5xbfsvup0Dfcfsvka62wwrvWU1vE5m61+1uNP7NdHnjoYjDxtMBh5+mAw8ozp3YP/jDXWXGHNcfv8odvjqx8+9AVB2r8PW2DjLWYZDAajxn+eGHnm0OcC4H/LGmuu8Iqw/kcPPZ7W/2p3zz6v9Q//+9ZfY80Vxl3eOnjS+h/6//u4/u8ZseHx02/EAAAAwL/qsfsuuXzCsb7hg8H8g8mO9z5hwvcFhp1/5U03TbeBPjWE42T/+DMT/2PGdZ75vLGDwZ6bTu+hMB0Mm94DYLrSv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/2LTeH4/xxDl2ucsMnLJ2y6yEpzb3bh5H9/3H0z/9dHPd3MqMf/B7sOG99yXPNdB4PBa9bYaJPFB4PBhZvNvdKCg4mPrTzusVXnGjHhBAGLP/FxkSk88dhJL2eZ+BznP/H86z9+2ohhkw1iEq9e69KDd9n84RdNfrnYlF/HxPNLXLj+WrMO/S7L8Mk2mtJ7dej5h17L5J0njH3xcWNfZr899l5m34MOXmrXPbbbecedd9xzheVXXGn5lZZbeeUVl9lp1913XHb8xynM2fhZWWha5mz05HN23xqTztnkr21KczZ26nP2xDPec/xmFw/N2ch/cc4Wmvqcjd11aKxjRw22fWJqxv0nFx41OHDcjeVmmmTfMs+4bV861/DB4Li/v9Bx12aa+B4cdviu/4Hzlky4XGDC5YLxvCUXTem8JYOh85YMnTBhlfEX+102tN3kv2c94e5pPm/JAWs+uuCkzzOFBP8J/9bn/3/otfKwiRM1dNKQCduM7/X380wMTdvqk5xnYqV0Lpn/pH8Y79jhE9/XabwTfi9u2GTzP7XfixvsvNOhi0yIutL4v/XYvx0l7zs2eOLjlNbz2Mkup7bvGPH3q3+/d8cb5pt83/GqKQ/xSetiaI5mmmyjKe07Dtzu6l0n3TdNYd+xwa4TftH47/uOcf/ZhYb2HePGvuiowXHjbiw/7sZiowbnjruxwhM3xgyuHHdj6e332n2HYU98vvqH98Hiw570A4/hfbvOZO/baTg/zmrXDQarXZNe15SnM0vv29FTGW/+fe7BVH+f+4rtFrhgMBjMNuF1rTI09n9HGu/IqY83nH9iMLXzTwxOu2n/M/7D4524zp54r03YTS8+hb/zpHU2xz+ssyNGTLIypvXrmh3C9uOvzzPx2U7f8cbrh+Zo1GTP+88+Rw+9ltR/6Gu+SQ07fDBsanMzpa/DnjQ3s099bqb165fFJ3yBMWYqc7Pkg4ctMTQ3o//FuVlsCnMz6dfDkxo9GIx58tyMHKw97iuaCXOz6LTMzaz/mffNLGH78dcXmXjXHWsfuvLQ3IS5iJ//h55/0X9xboZtO/F9s/ATjy04fDB69ODA7fbbb5/lxn8curn8+I9TX4MLT8tczvyfmct5J+x1hv/j5Ey8a7ezH1/h312DC/+rczl2MHzo/7l3nXyx/Of4/k83/bvp303/bvp307+b/t30LzaF4/9jh74vePSwMzee8M2YUVc9POd+03u809kMffx/Qt8nHf/fb86Hrxo+mPjYVI/Pjt/mKXl8dqXxF4csN7Td5McHJ9w9zcdnHzr2mi0G/53js/+WobU6Dd83tP/vpn83/bvp303/bvp3+1f7r/Z/NA6mD+u/m/7d9O+mfzf9u+nfTf9iUzj+v+zQzwHcvO+jZ044EDpq301WfWR6j3c6m6GP/0/o+6Tj/4+susm+wwcTH5vq8f/x23Qc/1/1rpOPHDyFj/8PrVXH//kn9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/YlM4/r/60M8BjNpzoYWGfh7g1vuPGjG9xzudzajH//37/73s/7vp303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7FJhz/H0z2zx6+zvsiCsf//7dNof+G+kct/TfSP2rpv7H+UUv/TfSPWvpvqn/U0v/1+kct/TfTP2rpv7n+UUv/LfSPWvq/Qf+opf+W+kct/bfSP2rp/0b9o5b+W+sftfTfRv+opf+2+kct/bfTP2rp/yb9o5b+2+sftfTfQf+opf+O+kct/XfSP2rpv7P+UUv/XfSPWvrvqn/U0n83/aOW/m/WP2rpv7v+UUv/PfSPWvrvqX/U0n8v/aOW/nvrH7X0f4v+UUv/ffSPWvrvq3/U0n8//aOW/m/VP2rpv7/+UUv/A/SPWvofqH/U0v8g/aOW/gfrH7X0P0T/qKX/ofpHLf3fpn/U0v/t+kct/Q/TP2rpf7j+UUv/I/SPWvq/Q/+opf879Y9a+r9L/6il/7v1j1r6H6l/1NL/PfpHLf2P0j9q6X+0/lFL/2P0j1r6H6t/1NL/vfpHLf3fp3/U0v/9+kct/T+gf9TS/7iy/qOncbuW/seX9Z9WLf0/qH/U0v8E/aOW/h/SP2rpf6L+UUv/D+sftfT/iP5RS/+T9I9a+p+sf9TS/6P6Ry39T9E/aun/Mf2jlv4f1z9q6f8J/aOW/p/UP2rpf6r+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf3P0T9q6X+u/lFL/0/pH83w/YeNr36e/tEM33+CT+sftfT/jP5RS//P6h+19P+c/lFL/8/rH7X0P1//qKX/F/SPWvp/Uf+opf8F+kct/S/UP2rpf5H+UUv/L+kftfT/sv5RS/+v6B+19L9Y/6il/yX6Ry39L9U/aun/Vf2jlv6X6R+19L9c/6il/xX6Ry39r9Q/aun/Nf2jlv5f1z9q6f8N/aOW/lfpH7X0v1r/qKX/N/WPWvpfo3/U0v9b+kct/a/VP2rpf53+UUv/6/WPWvp/W/+opf8N+kct/W/UP2rp/x39o5b+N+kftfS/Wf+opf8t+kct/W/VP2rpf5v+UUv/2/WPWvp/V/+opf8d+kct/b+nf9TS//v6Ry39f6B/1NL/Tv2jlv4/1D9q6f8j/aOW/j/WP2rpf5f+UUv/n+gftfT/qf5RS/+79Y9a+v9M/6il/8/1j1r636N/1NL/F/pHLf1/qX/U0v9X+kct/X+tf9TS/179o5b+v9E/aun/W/2jlv736R+19P+d/lFL//v1j1r6/17/qKX/A/pHLf3/oH/U0v9B/aOW/n/UP2rp/5D+UUv/P+kftfR/WP+opf+f9Y9a+v9F/6il/1/1j0r6jxnoH5X0Hzyqf9TS/2/6Ry39H9M/aun/uP5RSf9hA/2jlv7D9I9a+g/XP2rpP0L/qKX/SP2jlv6j9I9a+o/WP2rpP5P+UUv/mfWPWvqP0T9q6T+L/lFL/6fpH7X0n1X/qKX/bPpHLf1n1z9q6f90/aOW/nPoH7X0n1P/qKX/XPpHLf2foX/U0n9u/aOW/s/UP2rp/yz9o5b+z9Y/auk/j/5RS//n6B+19J9X/6il/3P1j1r6P0//qKX/fPpHLf3n1z9q6f98/aOW/mP1j1r6L6B/1NJ/Qf2jlv4L6R+19F9Y/6il/yL6Ry39F9U/aum/mP5RS//F9Y9a+i+hf9TS/wX6Ry39X6h/1NJ/Sf2jlv5L6R+19F+6vf8jj4832d0t/Zdp7z8FLf2X1T9q6b+c/lFL/+X1j1r6r6B/1NL/RfpHLf1frH/U0n9F/aOW/ivpH7X0X1n/qKX/KvpHLf1fon/U0n9V/aOW/i/VP2rp/zL9o5b+L9c/aum/mv5RS//V9Y9a+q+hf9TSf039o5b+r9A/aum/lv5RS/+19Y9a+q+jf9TSf139o5b+6+kftfRfX/+opf8r9Y9a+r9K/6il/wb6Ry39X61/1NL/NfpHLf1fq3/U0v91+kct/TfUP2rpv5H+UUv/jfWPWvpvon/U0n9T/aOW/q/XP2rpv5n+UUv/zfWPWvpvoX/U0v8N+kct/bfUP2rpv5X+UUv/N+oftfTfWv+opf82+kct/bfVP2rpv53+UUv/N+kftfTfXv+opf8O+kct/XfUP2rpv5P+UUv/nfWPWvrvon/U0n9X/aOW/rvpH7X0f7P+UUv/3fWPWvrvoX/U0n9P/aOW/nvpH7X033vK/cf8V8b1FNXS/y3Wf9TSfx/9o5b+++oftfTfT/+opf9b9Y9a+u+vf9TS/wD9o5b+B+oftfQ/SP+opf/B+kct/Q/RP2rpf6j+UUv/t+kftfR/u/5RS//D9I9a+h/e1n8af6qhpf8Rbf2nUUv/d+gftfR/p/5RS/936R+19H+3/lFL/yP1j1r6v0f/qKX/UfpHLf2P1j9q6X+M/lFL/2P1j1r6v1f/qKX/+/SPWvq/X/+opf8H9I9a+h+nf9TS/3j9o5b+H9Q/aul/gv5RS/8P6R+19D9R/6il/4f1j1r6f0T/qKX/SfpHLf1P1j9q6f9R/aOW/qfoH7X0/5j+UUv/j+sftfT/hP5RS/9P6h+19D9V/6il/2n6Ry39T9c/aul/hv5RS/8z9Y9a+p+lf9TS/2z9o5b+5+gftfQ/V/+opf+n9I9a+p+nf9TS/9P6Ry39P6N/1NL/s/pHLf0/p3/U0v/z+kct/c/XP2rp/wX9o5b+X9Q/aul/gf5RS/8L9Y9a+l+kf9TS/0v6Ry39v6x/1NL/K/pHLf0v1j9q6X+J/lFL/0v1j1r6f1X/qKX/ZfpHLf0v1z9q6X+F/lFL/yv1j1r6f03/qKX/1/WPWvp/Q/+opf9VVf1HTvOWLf2vruo/7Vr6f1P/qKX/NfpHLf2/pX/U0v9a/aOW/tfpH7X0v17/qKX/t/WPWvrfoH/U0v9G/aOW/t/RP2rpf5P+UUv/m/WPWvrfon/U0v9W/aOW/rfpH7X0v13/qKX/d/WPWvrfoX/U0v97g8Fg9PQa01NYS//vW/9RS/8f6B+19L9T/6il/w/1j1r6/0j/qKX/j/WPWvrfpX/U0v8n+kct/X+qf9TS/279o5b+P9M/aun/c/2jlv736B+19P+F/lFL/1/qH7X0/5X+UUv/X+sftfS/V/+opf9v9I9a+v9W/6il/336Ry39f6d/1NL/fv2jlv6/1z9q6f+A/lFL/z/oH7X0f1D/qKX/H/WPWvo/pH/U0v9P+kct/R/WP2rp/2f9o5b+f9E/aun/V/2jlv6P6B+19H9U/6il/9/0j1r6P6Z/1NL/cf2jkv5PXNX/H7X0H6Z/1NJ/uP5RS/8R+kct/UfqH7X0H6V/1NJ/tP5RS/+Z9I9a+s+sf9TSf4z+UUv/WfSPWvo/Tf+opf+s+kct/WfTP2rpP7v+UUv/p+sftfSfQ/+opf+c+kct/efSP2rp/wz9o5b+c+sftfR/pv5RS/9n6R+19H+2/lFL/3n0j1r6P0f/qKX/vPpHLf2fq3/U0v95+kct/efTP2rpP7/+UUv/5+sftfQfq3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/8X0j1r6L65/1NJ/Cf2jlv4v0D9q6f9C/aOW/kvqH7X0X0r/qKX/0vpHLf2X0T9q6b+s/lFL/+X0j1r6L69/1NJ/Bf2jlv4v0j9q6f9i/aOW/ivqH7X0X0n/qKX/yvpHLf1X0T9q6f8S/aOW/qvqH7X0f6n+UUv/l+kftfR/uf5RS//V9I9a+q8+hf5zLfPfGthTU0v/Naz/qKX/mvpHLf1foX/U0n8t/aOW/mvrH7X0X0f/qKX/uvpHLf3X0z9q6b++/lFL/1fqH7X0f5X+UUv/DfSPWvq/Wv+opf9r9I9a+r9W/6il/+v0j1r6b6h/1NJ/I/2jlv4b6x+19N9E/6il/6b6Ry39X69/1NJ/M/2jlv6b6x+19N9C/6il/xv0j1r6b6l/1NJ/K/2jlv5v1D9q6b+1/lFL/230j1r6b6t/1NJ/O/2jlv5v0j9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19N9F/6il/676Ry39d9M/aun/Zv2jlv676x+19N9D/6il/576Ry3999I/aum/t/5RS/+36B+19N9H/6il/776Ry3999M/aun/Vv2jlv776x+19D9A/6il/4H6Ry39D9I/aul/sP5RS/9D9I9a+h+qf9TS/236Ry39365/1NL/MP2jlv6H6x+19D9C/6il/zv0j1r6v1P/qKX/u/SPWvq/W/+opf+R+kct/d+jf9TS/yj9o5b+R+sftfQ/Rv+opf+x+kct/d+rf9TS/336Ry39369/1NL/A/pHLf2P0z9q6X+8/lFL/w/qH7X0P0H/qKX/h/SPWvqfqH/U0v/D+kct/T9S1v/wadyupf9JZf2nVUv/k/WPWvp/VP+opf8p+kct/T+mf9TS/+P6Ry39P6F/1NL/k/pHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19D9b/6il/zn6Ry39z9U/aun/Kf2jlv7n6R+19P+0/lFL/8/oH7X0/6z+UUv/z+kftfT/vP5RS//z9Y9a+n9B/6il/xf1j1r6X6B/1NL/Qv2jlv4X6R+19P+S/lFL/y/rH7X0/4r+UUv/i/WPWvpfon/U0v9S/aOW/l/VP2rpf5n+UUv/y/WPnug/esbvf4X+Ucv6v1L/J5l/wmVL/6/pH7X0/7r+UUv/b+gftfS/Sv+opf/V+kct/b+pf9TS/xr9o5b+39I/aul/rf5RS//r9I9a+l+vf9TS/9v6Ry39b9A/aul/o/5RS//v6B+19L9J/6il/836Ry39b9E/aul/q/5RS//b9I9a+t+uf9TS/7v6Ry3979A/aun/Pf2jlv7f1z9q6f8D/aOW/nfqH7X0/6H+UUv/H+kftfT/sf5RS/+79I9a+v9E/6il/0/1j1r6361/1NL/Z/pHLf1/rn/U0v8e/aOW/r/QP2rp/0v9o5b+v9I/aun/a/2jlv736h+19P+N/lFL/9/qH7X0v0//qKX/7/SPWvrfr3/U0v/3+kct/R/QP2rp/wf9o5b+D+oftfT/o/5RS/+H9I9a+v9J/6il/8P6Ry39/6x/1NL/L/pHLf3/qn80o/YfNln/R/SPZtT+g8n6P6p/1NL/b/pHLf0f0z9q6f+4/lFJ/xED/aOW/sP0j1r6D9c/auk/Qv+opf9I/aOW/qP0j1r6j9Y/auk/k/5RS/+Z9Y9a+o/RP2rpP4v+UUv/p+kftfSfVf+opf9sU+w//L8zrqeolv6zW/9RS/+n6x+19J9D/6il/5z6Ry3959I/aun/DP2jlv5z6x+19H+m/lFL/2fpH7X0f7b+UUv/efSPWvo/R/+opf+8+kct/Z+rf9TS/3n6Ry3959M/auk/v/5RS//n6x+19B+rf9TSfwH9o5b+C+oftfRfSP+opf/C+kct/RfRP2rpv6j+UUv/xfSPWvqPnF7jeYpr6b+E9R+19H+B/lFL/xfqH7X0X1L/qKX/UvpHLf2X1j9q6b+M/lFL/2X1j1r6L6d/1NJ/ef2jlv4r6B+19H+R/lFL/xfrH7X0X1H/qKX/SvpHLf1X7u0/09QebOm/Sm//qWrp/xL9o5b+q+oftfR/qf5RS/+X6R+19H+5/lFL/9X0j1r6r65/1NJ/Df2jlv5r6h+19H+F/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il//r6Ry39X6l/1NL/VfpHLf030D9q6f9q/aOW/q/RP2rp/1r9o5b+r9M/aum/of5RS/+N9I9a+m+sf9TSfxP9o5b+m+oftfR/vf5RS//N9I9a+m+ufzS+/8yDGb3/FvpHLev/DfpHLf231D9q6b+V/lFL/zfqH7X031r/qKX/NvpHLf231T9q6b+d/lFL/zfpH7X0317/qKX/DvpHLf131D9q6b+T/lFL/531j1r676J/1NJ/V/2jlv676R+19H+z/lFL/931j1r676F/1NJ/T/2jlv576R+19N9b/6il/1v0j1r676N/1NJ/X/2jlv776R+19H+r/lFL//31j1r6H6B/1NL/QP2jlv4H6R+19D9Y/6il/yH6Ry39D9U/aun/Nv2jlv5v1z9q6X+Y/lFL/8P1j1r6H6F/1NL/HfpHLf3fqX/U0v9d+kct/d+tf9TS/0j9hzz++CQ3Wvq/R/+opf9R+kct/Y/WP2rpf4z+UUv/Y/WPWvq/V/+opf/79I9a+r9f/6il/wf0j1r6H6d/1NL/eP2jlv4f1D9q6X+C/lFL/w/pH7X0P1H/qKX/h/WPWvp/RP+opf9J+kct/U/Wf6KZJrne0v+j+kct/U/RP2rp/zH9o5b+H9c/aun/Cf2jlv6f1D9q6X+q/lFL/9P0j1r6n65/1NL/DP2jlv5n6h+19D9L/6il/9n6Ry39z9E/aul/rv5RS/9P6R+19D9P/6il/6f1j1r6f0b/qKX/Z/WPWvp/Tv+opf/n9Y9a+p+vf9TS/wv6Ry39v6h/1NL/Av2jlv4X6h+19L9I/6il/5f0j1r6f1n/qKX/V/SPWvpfrH/U0v8S/aOW/pfqH83I/Vf/+70jvqp/NCP3n3T9X6Z/1NL/cv2jlv5X6B+19L9S/6il/9f0j1r6f13/qKX/N/SPWvpfpX/U0v9q/aOW/t/UP2rpf43+UUv/b+kftfS/Vv+opf91+kct/a/XP2rp/239o5b+N+gftfS/Uf+opf939I9a+t+kf9TS/2b9o5b+t+gftfS/Vf+opf9t+kct/W/XP2rp/139o5b+d+gftfT/nv5RS//v6x+19P+B/lFL/zv1j1r6/1D/qKX/j/SPWvr/WP+opf9d+kct/X+if9TS/6f6Ry3979Y/mtj/2hm7/8/0j1rW/8/1j1r636N/1NL/F/pHLf1/qX/U0v9X+kct/X+tf9TS/179o5b+v9E/aun/W/2jlv736R+19P+d/lFL//v1j1r6/17/qKX/A/pHLf3/oH/U0v9B/aOW/n/UP2rp/5D+UUv/P+kftfR/WP+opf+f9Y9a+v9F/6il/1/1j1r6P6J/1NL/Uf2jlv5/0z9q6f+Y/lFL/8f1j0r6jxzoH7X0H6Z/1NJ/+D/tP+L/dlxPUS39R1j/UUv/kfpHLf1H6R+19B+tf9TSfyb9o5b+M+sftfQfo3/U0n8W/aOW/k/TP2rpP6v+UUv/2fSPWvrPrn/U0v/p+kct/efQP2rpP6f+UUv/ufSPWvo/Q/+opf/c+kct/Z+pf9TS/1n6Ry39n61/1NJ/Hv2jlv7P0T9q6T+v/lFL/+fqH7X0f57+UUv/+fSPWvrPr3/U0v/5+kct/cfqH7X0X0D/qKX/gvpHLf0X0j9q6b+w/lFL/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19F9C/6il/wv0j1r6v1D/qKX/kvpHLf2X0j9q6b+0/lFL/2X0j1r6L6t/1NJ/Of2jlv7L6x+19F9B/2gG7j9mkntHvkj/aAbu/6T1/2L9o5b+K+oftfRfSf+opf/K+kct/VfRP2rp/5Ka/jP/S1u39F+1pv+/pqX/S/WPWvq/TP+opf/L9Y9a+q+mf9TSf3X9o5b+a+gftfRfU/+opf8r9I9a+q+lf9TSf239o5b+6+gftfRfV/+opf96+kct/dfXP2rp/0r9o5b+r9I/aum/gf5RS/9X6x+19H+N/lFL/9fqH7X0f53+UUv/DfWPWvpvpH/U0n9j/aOW/pvoH7X031T/qKX/6/WPWvpvpn/U0n9z/aOW/lvoH7X0f4P+UUv/LfWPWvpvpX/U0v+N+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0v9N+kct/bfXP2rpv4P+UUv/HfWPWvrvpH/U0n9n/aOW/rvoH7X031X/qKX/bvpHLf3frH/U0n93/aOW/nvoH7X031P/qKX/XvpHLf331j9q6f8W/aOW/vvoH7X031f/qKX/fvpHLf3fqn/U0n9//aOW/gfoH7X0P1D/qKX/QfpHLf0P1j9q6X+I/lFL/0P1j1r6v03/qKX/2/WPWvofpn/U0v9w/aOW/kfoH7X0f4f+UUv/d+oftfR/l/5RS/936x+19D9S/6il/3v0j1r6H6V/1NL/aP2jlv7H6B+19D9W/6il/3v1j1r6v0//qKX/+/WPWvp/QP+opf9x+kct/Y/XP2rp/0H9o5b+J+gftfT/kP5RS/8T9Y9a+n9Y/6il/0f0j1r6n6R/1NL/ZP2jlv4f1T9q6X+K/lFL/4/pH7X0/7j+UUv/T+gftfT/pP5RS/9T9Y9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/c/WP2rpf47+UUv/c/WPWvp/Sv9oRu4/89/vHXme/tGM3H/S9f9p/aOW/p/RP2rp/1n9o5b+n9M/aun/ef2jlv7n6x+19P+C/lFL/y/qH7X0v0D/qKX/hfpHLf0v0j9q6f8l/aOW/l/WP2rp/xX9o5b+F+sftfS/RP+opf+l+kct/b+qf9TS/zL9o5b+l+sftfS/Qv+opf+V+kct/b+mf9TS/+v6Ry39v6F/1NL/Kv2jlv5X6x+19P+m/lFL/2v0j1r6f0v/qKX/tfpHLf2v0z9q6X+9/lFL/2/rH7X0v0H/qKX/jfpHLf2/o3/U0v8m/aOW/jfrH7X0v0X/qKX/rXX9b398WrZq6X9bXf9p09L/dv2jlv7f1T9q6X+H/lFL/+/pH7X0/77+UUv/H+gftfS/U/+opf8P9Y9a+v9I/6il/4/1j1r63/XP+o/8Px7XU1RL/59Y/1FL/5/qH7X0v1v/qKX/z/SPWvr/XP+opf89+kct/X+hf9TS/5f6Ry39f6V/1NL/1/pHLf3v1T9q6f8b/aOW/r/VP2rpf5/+UUv/3+kftfS/X/+opf/v9Y9a+j+gf9TS/w/6Ry39H9Q/aun/R/2jlv4P6R+19P+T/lFL/4f1j1r6/1n/qKX/X/SPWvr/Vf+opf8j+kct/R/VP2rp/zf9o5b+j+kftfR/XP+opP+ogf5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/9R+kct/UfrH7X0n0n/qKX/zPpHLf3H6B+19J9F/6il/9P0j1r6z6p/NLH/lsMGgxm4/2z6Ry3rf3b9o5b+T9c/auk/h/5RS/859Y9a+s+lf9TS/xn6Ry3959Y/aun/TP2jlv7P0j9q6f9s/aOW/vPoH7X0f47+UUv/efWPWvo/V/+opf/z9I9a+s+nf9TSf379o5b+z9c/auk/Vv+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/EvpHLf1foH/U0v+F+kct/ZfUP2rpv5T+UUv/pfWPWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/CvpHLf1fpH/U0v/F+kct/VfUP2rpv5L+UUv/lfWPWvqvon/U0v8l+kct/VfVP2rp/1L9o5b+L9M/aun/cv2jlv6r6R+19F9d/6il/xr6Ry3919Q/aun/Cv2jlv5r6R+19F9b/6il/zr6Ry3919U/aum/nv5RS//19Y9a+r9S/6il/6v0j1r6b6B/1NL/1fpHLf1fo3/U0v+1+kct/V+nf9TSf0P9o3H9bxsMBjN6/430j1rW/8b6Ry39N9E/aum/qf5RS//X6x+19N9M/6il/+b6Ry39t9A/aun/Bv2jlv5b6h+19N9K/6il/xv1j1r6b61/1NJ/G/2jlv7b6h+19N9O/6il/5v0j1r6b69/1NJ/B/2jlv476h+19N9J/6il/876Ry39d9E/aum/q/5RS//d9I9a+r9Z/6il/+76Ry3999A/aum/p/5RS/+99I9a+u+tf9TS/y36Ry3999E/aum/r/5RS//99I9a+r9V/6il//76Ry39D9A/aul/oP5RS/+D9I9a+h+sf9TS/xD9o5b+h+oftfR/m/5RS/+36x+19D9M/6il/+H6Ry39j9A/aun/Dv2jlv7v1D9q6f8u/aOW/u/WP2rpf6T+UUv/9+gftfQ/Sv+opf/R+kct/Y/RP2rpf6z+UUv/9+oftfR/n/5RS//36x+19P+A/lFL/+P0j1r6H69/1NL/g/pHLf1P0D9q6f8h/aOW/ifqH7X0/7D+UUv/j+gftfQ/Sf+opf/J+kct/T+qf9TS/xT9o5b+H9M/aun/cf2jlv6f0D9q6f9J/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/lFL/7P0j1r6n61/1NL/HP2jlv7n6h+19P+U/lFL//P0j1r6f7qq/3pHT+uWLf0/U9V/2rX0/6z+UUv/z+kftfT/vP5RS//z9Y9a+n9B/6il/xf1j1r6X6B/1NL/Qv2jlv4X6R+19P+S/lFL/y/rH7X0/4r+UUv/i/WPWvpfon/U0v9S/aOW/l/VP2rpf5n+UUv/y/WPWvpfoX/U0v9K/aOW/l/TP2rp/3X9o5b+39A/aul/lf5RS/+r9Y9a+n9T/6il/zX6Ry39v6V/1NL/Wv2jlv7X6R+19L9e/6il/7f1j1r636B/1NL/Rv2jlv7f0T9q6X+T/lFL/5v1j1r636J/1NL/Vv2jlv636R+19L9d/6il/3f1j1r636F/1NL/e/pHLf2/r3/U0v8H+kct/e/s7b/V1B5s6f/D3v5T1dL/R/pHLf1/rH/U0v8u/aOW/j/RP2rp/1P9o5b+d+sftfT/mf5RS/+f6x+19L9H/6il/y/0j1r6/1L/qKX/r/SPWvr/Wv+opf+9+kct/X+jf9TS/7f6Ry3979M/aun/O/2jlv736x+19P+9/lFL/wf0j1r6/0H/qKX/g/pHLf3/qH/U0v8h/aOW/n8a6j/rdBrXU1RL/4et/6il/5/1j1r6/0X/qKX/X/WPWvo/on/U0v9R/aOW/n/TP2rp/5j+UUv/x/WPSvqPHugftfQfpn/U0n+4/lFL/xH6Ry39R+oftfQfpX/U0n+0/lFL/5n0j1r6z6x/1NJ/jP5RS/9Z9I9a+j9N/6il/6z6Ry39Z9M/auk/u/5RS/+n6x+19J9D/6il/5z6Ry3959I/aun/DP2jlv5z6x+19H+m/lFL/2fpH7X0f7b+UUv/efSPWvo/R/+opf+8+kct/Z+rf9TS/3n6Ry3959M/auk/v/5RS//n6x+19B+rf9TSfwH9o5b+C+oftfRfSP+opf/C+kct/RfRP2rpv6j+UUv/xfSPWvovrn/U0n8J/aOW/i/QP2rp/0L9o5b+S+oftfRfSv+opf/S+kct/ZfRP2rpv6z+UUv/5fSPWvovr3/U0n8F/aOW/i/SP2rp/2L9o5b+K+oftfRfSf+opf/K+kct/VfRP2rp/xL9o5b+q+oftfR/qf5RS/+X6R+19H+5/lFL/9X0j1r6r65/1NJ/Df2jlv5r6h+19H+F/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il//r6Ry39X6l/1NL/VfpHLf030D9q6f9q/aOW/q/RP2rp/1r9o5b+r9M/aum/of5RS/+N9I9a+m+sf9TSfxP9o5b+m+oftfR/vf5RS//N9I9a+m+uf9TSf4sp9p/5vzOup6iW/m+w/qOW/lvqH7X030r/qKX/G/WPWvpvrX/U0n8b/aOW/tvqH7X0307/qKX/m/SPWvpvr3/U0n8H/aOW/jvqH7X030n/qKX/zvpHLf130T9q6b+r/lFL/930j1r6v1n/qKX/7vpHLf330D9q6b+n/lFL/730j1r6761/1NL/LfpHLf330T9q6b+v/lFL//30j1r6v1X/qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6H6x/1NL/EP2jlv6H6h+19H+b/lFL/7frH7X0P0z/qKX/4fpHLf2P0D9q6f8O/aOW/u/UP2rp/y79o5b+79Y/aul/pP5RS//36B+19D9K/6il/9H6Ry39j9E/aul/rP5RS//36h+19H+f/lFL//frH7X0/4D+UUv/4/SPWvofr3/U0v+D+kct/U/QP2rp/yH9o5b+J+oftfT/sP5RS/+P6B+19D9J/6il/8n6Ry39P6p/1NL/FP2jlv4f0z9q6f9x/aOW/p/QP2rp/0n9o5b+p+oftfQ/Tf+opf/p+kct/c/QP2rpf6b+UUv/s/SPWvqfrX/U0v8c/aOW/ufqH7X0/5T+UUv/8/SPWvp/Wv+opf9n9I9a+n9W/6il/+f0j1r6f17/qKX/+fpHLf2/oH/U0v+L+kct/S/QP2rpf6H+UUv/i/SPWvp/Sf+opf+X9Y9a+n9F/6il/8X6Ry39L9E/aul/qf5RS/+v6h+19L9M/6il/+X6Ry39r9A/aul/pf5RS/+v6R+19P+6/lFL/2/oH7X0v0r/qKX/1fpHLf2/qX/U0v8a/aOW/t/SP2rpf63+UUv/6/SPWvpfr3/U0v/b+kct/W/QP2rpf6P+UUv/7+gftfS/Sf+opf/N+kct/W/RP2rpf6v+UUv/2/SPWvrfrn/U0v+7+kct/e/QP2rp/z39o5b+39c/aun/A/2jlv536h+19P+h/lFL/x/pH7X0/7H+UUv/u/SPWvr/RP+opf9P9Y9a+t+tf9TS/2f6Ry39f65/1NL/Hv2jlv6/0D9q6f9L/aOW/r/SP2rp/2v9o5b+9+oftfT/jf5RS//f6h+19L9P/6il/+/0j1r6369/1NL/9/pHLf0f0D9q6f8H/aOW/g/qH7X0/6P+UUv/h/SPWvr/Sf+opf/D+kct/f+sf9TS/y/6Ry39/6p/1NL/Ef2jlv6P6h+19P+b/lFL/8f0j1r6P65/VNJ/poH+UUv/YfpHLf2H6x+19B+hf9TSf6T+UUv/UfpHLf1H6x+19J9J/6il/8z6Ry39x+gftfSfRf+opf/T9I9a+s+qf9TSfzb9o5b+s+sftfR/uv5RS/859I9a+s+pf9TSfy79o5b+z9A/auk/t/5RS/9n6h+19H+W/lFL/2frH7X0n0f/qKX/c/SPWvrPq3/U0v+5+kct/Z+nf9TSfz79o5b+8+sftfR/vv5RS/+x+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0X0z/qKX/4vpHLf2X0D9q6f8C/aOW/i/UP2rpv6T+UUv/pfSPWvovrX/U0n8Z/aOW/svqH7X0X07/qKX/8vpHLf1X0D9q6f8i/aOW/i/WP2rpv6L+UUv/laah/wOz/18O7Kmppf/K1n/U0n8V/aOW/i/RP2rpv6r+UUv/l+oftfR/mf5RS/+X6x+19F9N/6il/+r6Ry3919A/aum/pv5RS/9X6B+19F9L/6il/9r6Ry3919E/aum/rv5RS//19I9a+q+vf9TS/5X6Ry39X6V/1NJ/A/2jlv6v1j9q6f8a/aOW/q/VP2rp/zr9o5b+G+oftfTfSP+opf/G+kct/TfRP2rpv6n+UUv/1+sftfTfTP+opf/m+kct/bfQP2rp/wb9o5b+W+oftfTfSv+opf8b9Y9a+m+tf9TSfxv9o5b+2+oftfTfTv+opf+b9I9a+m+vf9TSfwf9o5b+O+oftfTfSf+opf/O+kct/XfRP2rpv6v+UUv/3fSPWvq/Wf+opf/u+kct/ffQP2rpv6f+UUv/vfSPWvrvrX/U0v8t+kct/ffRP2rpv6/+UUv//fSPWvq/Vf+opf/++kct/Q/QP2rpf6D+UUv/g/SPWvofrH/U0v8Q/aOW/ofqH7X0f5v+UUv/t+sftfQ/TP+opf/h+kct/Y/QP2rp/w79o5b+79Q/aun/Lv2jlv7v1j9q6X+k/lFL//foH7X0P0r/qKX/0fpHLf2P0T9q6X+s/lFL//fqH7X0f5/+UUv/9+sftfT/gP5RS//j9I9a+h+vf9TS/4P6Ry39T9A/aun/If2jlv4n6h+19P9wbf+1p/poS/+P1Pafupb+J+kftfQ/Wf+opf9H9Y9a+p+if9TS/2P6Ry39P65/1NL/E/pHLf0/qX/U0v9U/aOW/qfpH7X0P13/qKX/GfpHLf3P1D9q6X+W/lFL/7P1j1r6n6N/1NL/XP2jlv6f0j9q6X+e/lFL/0/rH7X0/4z+UUv/z+oftfT/nP5RS//P6x+19D9f/6il/xf0j1r6f1H/qKX/BfpHLf0v1D9q6X+R/lFL/y/pH7X0/7L+UUv/r+gftfS/WP+opf8l+kct/S/VP2rp/1X9own9Rwxm8P6X6R+1rP/L9Y9a+l+hf9TS/0r9o5b+X9M/aun/df2jlv7f0D9q6X+V/lFL/6v1j1r6f1P/qKX/NfpHLf2/pX/U0v9a/aOW/tfpH7X0v17/qKX/t/WPWvrfoH/U0v9G/aOW/t/RP2rpf5P+UUv/m/WPWvrfon/U0v9W/aOW/rfpH7X0v13/qKX/d/WPWvrfoX/U0v97+kct/b+vf9TS/wf6Ry3979Q/aun/Q/2jlv4/0j9q6f9j/aOW/nfpH7X0/4n+UUv/n+oftfS/W/+opf/P9I9a+v9c/6il/z36Ry39f6F/1NL/l/pHLf1/pX/U0v/X+kct/e/VP2rp/xv9o5b+v9U/aul/n/5RS//f6R+19L9f/6il/+/1j1r6P6B/1NL/D/pHLf0f1D9q6f9H/aOW/g/pH7X0/5P+UUv/h/WPWvr/Wf+opf9f9I9a+v9V/6il/yP6Ry39H9U/aun/N/2jlv6P6R+19H9c/6ik/8wD/aOW/sP0j1r6D9c/auk/Qv+opf9I/aOW/qP0j1r6j9Y/auk/k/5RS/+Z9Y9a+o/RP2rpP4v+UUv/p+kftfSfVf+opf9s+kct/WfXP2rp/3T9o5b+c+gftfSfU/+opf9c+kct/Z+hf9TSf279o5b+z9Q/aun/LP2jlv7P1j9q6T+P/lFL/+foH7X0n1f/qKX/c/WPWvo/T/+opf98+kct/efXP2rp/3z9o5b+Y/WPWvovoH/U0n9B/aOW/gvpH7X0X1j/qKX/IvpHLf0X1T9q6b+Y/lFL/8X1j1r6L6F/1NL/BfpHLf1fqH/U0n9J/aOW/kvpH7X0X1r/qKX/MvpHLf2X1T9q6b+c/lFL/+X1j1r6r6B/1NL/RbH///yr/f/W0v/F1n/U0n9F/aOW/ivpH7X0X1n/qKX/KvpHLf1fon/U0n9V/aOW/i/VP2rp/zL9o5b+L9c/aum/mv5RS//V9Y9a+q+hf9TSf039o5b+r9A/aum/lv5RS/+19Y9a+q+jf9TSf139o5b+6+kftfRfX/+opf8r9Y9a+r9K/6il/wb6Ry39X61/1NL/NfpHLf1fq3/U0v91+kct/TfUP2rpv5H+UUv/jfWPWvpvon/U0n9T/aOW/q/XP2rpv5n+UUv/zfWPWvpvoX/U0v8N+kct/bfUP2rpv5X+UUv/N+oftfTfWv+opf82+kct/bfVP2rpv53+UUv/N+kftfTfXv+opf8O+kct/XfUP2rpv5P+UUv/nfWPWvrvon/U0n9X/aOW/rvpH7X0f7P+UUv/3fWPWvrvoX/U0n9P/aOW/nvpH7X031v/qKX/W/SPWvrvo3/U0n9f/aOW/vvpH7X0f6v+UUv//fWPWvofoH/U0v9A/aOW/gfpH7X0P1j/qKX/IfpHLf0P1T9q6f82/aOW/m/XP2rpf5j+UUv/w/WPWvofoX/U0v8d+kct/d+pf9TS/136Ry39361/1NL/SP2jlv7v0T9q6X+U/lFL/6P1j1r6H6N/1NL/WP2jlv7v1T9q6f8+/aOW/u/XP2rp/wH9o5b+x+kftfQ/Xv+opf8H9Y9a+p+gf9TS/0P6Ry39T9Q/aun/Yf2jlv4f0T9q6X+S/lFL/5P1j1r6f1T/qKX/KfpHLf0/pn/U0v/j+kct/T+hf9TS/5P6Ry39T9U/aul/mv5RS//T9Y9a+p+hf9TS/0z9o5b+Z+kftfQ/W/+opf85+kct/c/VP2rp/yn9o5b+5+kftfT/tP5RS//P6B+19P/sk/s/PtN/fWBPTS39P2f9Ry39P69/1NL/fP2jlv5f0D9q6f9F/aOW/hfoH7X0v1D/qKX/RfpHM2T/EeOvTtr/S/pHM2T/CVcn7f9l/aOW/l/RP2rpf7H+UUv/S/SPWvpfqn/U0v+r+kct/S/TP2rpf7n+UUv/K/SPWvpfqX/U0v9r+kct/b+uf9TS/xv6Ry39r9I/aul/tf5RS/9v6h+19L9G/6il/7f0j1r6X6t/1NL/Ov2jlv7X6x+19P+2/lFL/xv0j1r636h/1NL/O/pHLf1v0j9q6X+z/lFL/1v0j1r636p/1NL/Nv2jlv636x+19P+u/lFL/zv0j1r6f0//qKX/9/WPWvr/QP+opf+d+kct/X+of9TS/0f6Ry39f6x/1NL/Lv2jlv4/0T9q6f9T/aOW/nfrH7X0/5n+UUv/n+sftfS/R/+opf8v9I9a+v9S/6il/6/0j1r6/1r/qKX/vfpHLf1/o3/U0v+3+kct/e/TP2rp/zv9o5b+9+sftfT/vf5RS/8H9I9a+v9B/6il/4P6Ry39/6h/1NL/If2jlv5/0j9q6f+w/lFL/z/rH7X0/4v+UUv/v+oftfR/pLz/lF57S/9Hy/tPSUv/v+kftfR/TP+opf/j+kcl/ccM9I9a+g/TP2rpP1z/qKX/CP2jlv4j9Y9a+o/SP2rpP1r/qKX/TPpHLf1n1j9q6T9G/6il/yz6Ry39n6Z/1NJ/Vv2jlv6z6R+19J9d/6il/9P1j1r6z6F/1NJ/Tv2jlv5z6R+19H+G/lFL/7n1j1r6P1P/qKX/s/SPWvo/W/+opf88+kct/Z+jf9TSf179o5b+z9U/aun/PP2jlv7z6R+19J9f/6il//P1j1r6j9U/aum/gP5RS/8F9Y9a+i+kf9TSf2H9o5b+i+gftfRfVP+opf9i+kct/RfXP2rpv4T+UUv/F+gftfR/of5RS/8l9Y9a+i+lf9TSf2n9o5b+y+gfzXD9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P+xAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOSAAAAAAE/X/djkABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpgAAAP//ZMr/6g==") write$tcp_congestion(r3, &(0x7f0000000040)='cubic\x00', 0x6) 1.066862436s ago: executing program 0 (id=3777): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x12b100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0xfffffff5}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x64}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000000)="3080", 0x2, r2) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)) epoll_create1(0x80000) mkdir(0x0, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000000c0)={[{@utf8}, {@utf8}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dmask={'dmask', 0x3d, 0x7e6f}}, {@namecase}, {@fmask}, {@namecase}, {@errors_remount}, {@allow_utime}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 857.552063ms ago: executing program 5 (id=3778): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb, 0x0, 0xfffffffffffffffa}}}, 0xb8}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(&(0x7f0000000140)='./file0\x00') r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r7, r6, &(0x7f00000001c0)=0x1, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000a40)={0xa, 0x6e24, 0x7fff, @mcast1, 0x9}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 782.345755ms ago: executing program 2 (id=3779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) 515.183344ms ago: executing program 6 (id=3780): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7ef", 0x40}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408b", 0x8e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)}], 0x1}}], 0x2, 0x20000044) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d367265673000000000000000001400020073797a5f74756e00000000000000000014000200697036677265746170300000000000003000018008000100", @ANYRES8, @ANYBLOB="080003000300000008000100", @ANYRES32, @ANYBLOB="140002"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 499.425555ms ago: executing program 2 (id=3781): setresuid(0xee01, 0xee00, 0x0) shmctl$IPC_RMID(0x0, 0xe00000000000000) 331.35592ms ago: executing program 2 (id=3782): syz_mount_image$nilfs2(&(0x7f0000000480), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xeec, &(0x7f0000001e40)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgoh4Rl96D8odGMWnU0ANRIKYHRCVEkSJOFQcqLpRKKVKRQJWqqKe2p1a99YR6oVKVSkE9tJESV1m/We8+e7rrsT1r7/5+0rdv37zZ+b7xRs7MePZtAIZWrfl4+PBsFsJ7n1859trJ7NM7yx5prbGv+ZjFXiOEUG/rZ8n2vogLbt24dGKtNgsHm495Pzx/vfXayRDCYtgXroVG+Hh+4auP3n9u/ydvTtz3zsWzr2/R7rek+wEAAIPo6p8W/vbEP/741MzNq3uPhvHW8pXj9WWT8bj/QFyQL6+Fzn7WFu3GkvVGYtSS9UaS9UaTPKMF+erJduoF6411yTfStmyt/QQAAICdKD+vbYSsNtfRr9Xm5pbP++/4Ynosmzt3ZuH0hT4VCgAAAJT278vNm26FEEIIIYQQQggxwLE03e8rEAAAAMCwSecLW2Vxc2fqam2t0Vv+68/W1n49bIKq//3Lv7Pyf/iG3zgAAJQ3qEeT+X7lx9H5PAbpPIIjyevWe/xfS7Yzus46i+YV7Fiebd+3qaj+9Oe6XRXVv973sV+K6k/nw9yuiupP5+ncrorqH6+4jrKK6p+ouI6yiurfVXEdZRXVv7viOsoqqn+y4jrKKqp/quI6yiqq/66K6yirqP49FddRVlH9O+W22qL6GxXXUVZR/TMV11FWUf13V1xHWUX131NxHWUV1X9vxXX0y8OxzX8Oe5Px9vPn9Jxup5zjAQAAwLD7r/n/hBBCiFXRvA9iG9QhxGBHtg1qEEKI4YnL/b4AAQAAAPRd/rmA/APoS1E+PtJlfLR9fGJlhXy83uX1Y13Gx7uMAwAAACH89q3TD7ybrXzOf6Pz4eXzRu0Kn94OJeYxSie6W2/+jc57ttH865i3zPQJAAAAVCb73rXbTx774JWZm1f3Hm07+70dz3fzeUBH4wnrZ7Gf3xcwlfSz/Bz6aGeeWsF66fWBu4q298IGdxQAAACGWH7+3ghZba7tvLsRarW5uZXz8dlQz06fWTh1IPbz72f5w3R9/M7yZyquGwAAAOjdyvn+2uf/+ff4zoaxbO7cmYXTF5b7U63l9Vr7dYHpleVZ+3WBRrL8YMHyQ7Gff3/nD6Z3NZfPnfjhwsnN3nkAAAAYEhdevXj2xYWFUz/yxBNPPGk96fdvJgAAYLN9+eWV+o8PTf1u+fP/K/Pf5Z//3xf7jTi335/jCvl9AvnnAFZ9Xv94Z57povXOd67XSNYbiTGe1D3Rtp3QnG+w83UzRfkandsZK8g3meSbSvKl8xSMJuvn+fYky9P5CfP1ppPl6eSAo0mOLMn/aAAAAIBi86+8fH7+wqsXnz7z8osvnXrp1LlDB49898iRA89855n55n398+139wMAAAA70cpNv/2uBAAAAAAAAAAAAAAAAAAAAIZXFV8n1u99BAAAgGH3r8shhEUhhCgdS+P9r0GILjG2DWoQQgghhFiO5ne7V5+31u/rDwAAAMDwuXXj0on2dpXFbFPztbbWWG5ux7x5O/X0X2fuRL7a9WdHOl6/e1OrYdhV/e9f/p2V/8M3Njf/RP6k599/ySXjo+XyPj7/y9n2/A+O9pg/3f8XyuXfn+R/PPSWf+mDJP/xcvmfSPLv7jH/qv0/Xy7/kzH/bOzvf6zX/J3v/3hs8/3Y1WP+byf7fzL0mj/Z/0aPCRNPxfwAMIwG9QaA/CghP46ejP18f+PhZhhJXrfe4/9asp3RDVfeud38OOj+2M+Pl6aSvLn11j+ZbO+uknWm0rq2q6L6N+t93GpF9dcrrqOsovrHKq6jrKL6xyuuo6yi+icqrqOsovp7PQ/tt6L6d8p15aL6Jyuuo6yi+qcqrqOsovrX+/94vxTVv6fiOsoqqn+64jrKKqq/5GW1yhXVP1NxHWUV1X93xXWUVVT/PRXXUVZR/fdWXEe/PBTbovPh/PxzOo7l/UbSH1/jZzmo1xYAAABgp/mn+f+EEEIIIUpF836ZbVBHf6Ltbrm+1yI2I/6ztKzfdQghti6Wlvp48YG+29pPMwOwXfn9P9y8/8PN+z/cvP/8P/k9/FnSz410GR/tMl7vMj6WjKf/Xse7jN+TbHcpv64Z3dtl/Gtdxvd0Gb+/y/hsl/EHuow/2GX8oS7jAAAADIf7Yuv8EAAAAAbXa7/67O3fPH78xszNq3uPhrFV884fiP3x+Lf1t2I/nfc+V49/8/9J7P8itr+P7d+T9d1/AgAAAFsv/54Yf/8HAACAwZV/T6nzfwAAABhcM7F1/g8AAACD6+7YOv8HAACAAZZNrL04tvl1gUdj2+u8fgDA9vf12D4c272xfSS234htfhzwWGy/WVF9AMDm+fn3f3rk3Wxlvv9DyfituDxvV1lcvlKQ1Tpn8t8V292x/VaP9aTfB9Br/tyeHvNsVf7pDeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZHrfl4+PBsFsJ7n1859rOxt/9yZ9kjrTX2NR+z2GuEEOqt1+WjK/1fxxVv3bh0or29HdssHAxZyFrLw/PXW5kmQwiLYV+4Fhrh4/mFrz56/7n9n7w5cd87F8++voU/go79AwAAgEH0vwAAAP//cFQjcg==") openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x3002a8d, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x3c, r3, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r3, 0x211, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x69}}}}, [@NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x21, 0x34, @random="9fd27f387f1b50e7b5d11b016f11d3a2e86ace6fe7e14500532b9fde22"}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000340)={{0x0, 0x0, 0x40, 0xcc2c, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 235.411173ms ago: executing program 6 (id=3783): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) process_vm_writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/114, 0x72}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/18, 0x12}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/91, 0x5b}, {&(0x7f0000000a40)=""/1, 0x1}, {&(0x7f0000000a80)=""/188, 0xbc}, {&(0x7f0000000b40)=""/97, 0x61}], 0x9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000740)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r5, r1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 121.551967ms ago: executing program 6 (id=3784): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001200)='io\x00') preadv(r0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/102, 0x66}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0xc) setpgid(0x0, r1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000740)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r5, r1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rseq(0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): b_loop+0x30/0x80 [ 1289.131643][T17775] ? clear_bhb_loop+0x30/0x80 [ 1289.136327][T17775] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1289.142250][T17775] RIP: 0033:0x7f02ec80fe59 [ 1289.146676][T17775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.166308][T17775] RSP: 002b:00007f02eaa69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.174729][T17775] RAX: ffffffffffffffda RBX: 00007f02eca88fa0 RCX: 00007f02ec80fe59 [ 1289.182704][T17775] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1289.190676][T17775] RBP: 00007f02eaa69090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.198676][T17775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.206663][T17775] R13: 00007f02eca89038 R14: 00007f02eca88fa0 R15: 00007ffc597f92c8 [ 1289.214660][T17775] [ 1289.232808][T17770] syz.2.3288 (17770): drop_caches: 2 [ 1289.430513][ T1324] usb 2-1: device descriptor read/64, error -71 [ 1289.557597][T17783] netlink: 'syz.2.3294': attribute type 12 has an invalid length. [ 1289.594418][T17783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3294'. [ 1289.643007][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3294'. [ 1289.760504][ T1324] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1289.788534][T17784] loop2: detected capacity change from 0 to 1024 [ 1289.981091][T17783] device vlan2 entered promiscuous mode [ 1289.990525][ T1324] usb 2-1: device descriptor read/64, error -71 [ 1290.120658][ T1324] usb usb2-port1: attempt power cycle [ 1290.131574][T17783] device ip6gretap0 entered promiscuous mode [ 1290.212494][T17784] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 1290.300508][ T8610] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1290.337208][T17787] netlink: 'syz.5.3295': attribute type 3 has an invalid length. [ 1290.363785][T17787] netlink: 114680 bytes leftover after parsing attributes in process `syz.5.3295'. [ 1290.404117][T17784] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1290.550644][ T1324] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1290.610597][ T8610] usb 6-1: Using ep0 maxpacket: 16 [ 1291.310631][T17783] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.3294: lblock 0 mapped to illegal pblock 0 (length 1) [ 1291.334902][T17783] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1291.382785][T17783] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1291.382785][T17783] [ 1291.424004][ T1324] usb 2-1: device descriptor read/8, error -71 [ 1291.430617][ T8610] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1291.438742][ T8610] usb 6-1: config 0 has no interface number 0 [ 1291.460623][T17791] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1291.515129][ T8610] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1291.552619][ T8610] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1291.740648][ T1324] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1291.761512][ T8610] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1291.790669][ T8610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.806737][T17801] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3300'. [ 1291.834091][ T8610] usb 6-1: Product: syz [ 1291.849143][ T8610] usb 6-1: Manufacturer: syz [ 1291.864142][ T8610] usb 6-1: SerialNumber: syz [ 1291.908034][T17805] loop2: detected capacity change from 0 to 256 [ 1291.910357][ T8610] usb 6-1: config 0 descriptor?? [ 1291.939320][T17805] exfat: Deprecated parameter 'namecase' [ 1292.069022][ T1324] usb 2-1: device not accepting address 34, error -71 [ 1292.080851][ T1324] usb usb2-port1: unable to enumerate USB device [ 1292.110908][T17788] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1292.115017][T17805] exfat: Unknown parameter 'sys_tz' [ 1292.118305][T17788] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1292.393095][T17787] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1292.414231][T17787] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1292.680617][T10130] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1293.040721][T10130] usb 3-1: config 250 has an invalid descriptor of length 48, skipping remainder of the config [ 1293.093997][T10130] usb 3-1: config 250 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1293.177888][T10130] usb 3-1: config 250 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1293.344693][ T8610] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1293.375515][ T8610] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1293.386375][T10130] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1293.410803][T10130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.461907][ T8610] asix: probe of 6-1:0.34 failed with error -71 [ 1293.497281][ T8610] usb 6-1: USB disconnect, device number 7 [ 1294.365295][T17818] syz.5.3304 (17818): drop_caches: 2 [ 1294.374452][T17822] loop3: detected capacity change from 0 to 128 [ 1295.390583][T10130] usb 3-1: string descriptor 0 read error: -71 [ 1295.401347][T10130] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1295.560844][T10130] spca561: probe of 3-1:250.0 failed with error -22 [ 1295.974502][T10130] usb 3-1: MIDIStreaming interface descriptor not found [ 1296.873086][T10130] usb 3-1: USB disconnect, device number 29 [ 1296.985835][T17843] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3311'. [ 1297.009703][T17844] loop3: detected capacity change from 0 to 512 [ 1297.091292][T17835] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3308'. [ 1297.372665][T17851] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3313'. [ 1297.380971][T10130] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1297.421228][T10647] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1297.650526][T10130] usb 3-1: Using ep0 maxpacket: 32 [ 1297.770668][T10130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1297.797456][T10130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9551, setting to 1024 [ 1297.810625][T10647] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1297.834734][T10130] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1297.840106][T10647] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1297.895355][T10130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.945096][T10130] usb 3-1: config 0 descriptor?? [ 1298.030818][T17840] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1298.091196][T10647] usb 4-1: New USB device found, idVendor=0525, idProduct=b4a8, bcdDevice= 0.41 [ 1298.127241][T10647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1298.190507][T10647] usb 4-1: Product: syz [ 1298.201357][T10647] usb 4-1: Manufacturer: syz [ 1298.215511][T17860] loop5: detected capacity change from 0 to 8 [ 1298.240536][T10647] usb 4-1: SerialNumber: syz [ 1298.584833][T10130] hid-generic 0003:057E:200E.0005: hidraw0: USB HID v0.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 1298.602379][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:250.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1298.714879][T17862] syz.0.3317 (17862): drop_caches: 2 [ 1298.928249][T17871] FAULT_INJECTION: forcing a failure. [ 1298.928249][T17871] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.078871][ T1324] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1299.091423][T10647] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 38 if 0 alt 0 proto 1 vid 0x0525 pid 0xB4A8 [ 1299.134327][T10647] usb 4-1: USB disconnect, device number 38 [ 1299.221452][T17871] CPU: 1 PID: 17871 Comm: syz.5.3318 Not tainted syzkaller #0 [ 1299.228995][T17871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1299.239090][T17871] Call Trace: [ 1299.242402][T17871] [ 1299.245360][T17871] dump_stack_lvl+0x188/0x250 [ 1299.250072][T17871] ? show_regs_print_info+0x20/0x20 [ 1299.255280][T17871] ? load_image+0x400/0x400 [ 1299.259791][T17871] ? __lock_acquire+0x7d10/0x7d10 [ 1299.264822][T17871] ? vfs_write+0x8b2/0xd60 [ 1299.269247][T17871] should_fail+0x38c/0x4c0 [ 1299.273688][T17871] should_failslab+0x5/0x20 [ 1299.278321][T17871] slab_pre_alloc_hook+0x51/0xc0 [ 1299.283293][T17871] ? __se_sys_mount+0x9b/0x3d0 [ 1299.287267][T10647] usblp0: removed [ 1299.288096][T17871] __kmalloc_track_caller+0x69/0x330 [ 1299.288130][T17871] ? __se_sys_mount+0x9b/0x3d0 [ 1299.288154][T17871] ? strnlen_user+0x150/0x250 [ 1299.307109][T17871] strndup_user+0x71/0x150 [ 1299.311535][T17871] __se_sys_mount+0x9b/0x3d0 [ 1299.316145][T17871] ? __x64_sys_mount+0xc0/0xc0 [ 1299.320956][T17871] ? lockdep_hardirqs_on+0x94/0x140 [ 1299.326192][T17871] ? __x64_sys_mount+0x1c/0xc0 [ 1299.331022][T17871] do_syscall_64+0x4c/0xa0 [ 1299.335481][T17871] ? clear_bhb_loop+0x30/0x80 [ 1299.340196][T17871] ? clear_bhb_loop+0x30/0x80 [ 1299.344908][T17871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1299.350845][T17871] RIP: 0033:0x7f02ec80fe59 [ 1299.355299][T17871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.374962][T17871] RSP: 002b:00007f02eaa69028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1299.383413][T17871] RAX: ffffffffffffffda RBX: 00007f02eca88fa0 RCX: 00007f02ec80fe59 [ 1299.391400][T17871] RDX: 00002000000002c0 RSI: 00002000000001c0 RDI: 0000000000000000 [ 1299.399385][T17871] RBP: 00007f02eaa69090 R08: 0000200000000580 R09: 0000000000000000 [ 1299.407358][T17871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.415331][T17871] R13: 00007f02eca89038 R14: 00007f02eca88fa0 R15: 00007ffc597f92c8 [ 1299.423329][T17871] [ 1299.426539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1299.570682][ T1324] usb 2-1: config index 0 descriptor too short (expected 30768, got 18) [ 1299.613207][ T1324] usb 2-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1299.713102][ T1324] usb 2-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1299.824810][T17880] loop3: detected capacity change from 0 to 4096 [ 1299.877715][ T1324] usb 2-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1299.920948][T17880] /dev/loop3: Can't open blockdev [ 1299.950268][T17879] afs: Unknown parameter 'dyn°h¢‰‡˜' [ 1300.014976][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.021402][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.201522][ T1324] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1300.811342][T10130] usb 3-1: USB disconnect, device number 30 [ 1300.873565][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3325'. [ 1300.887608][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.990465][ T1324] usb 2-1: Product: syz [ 1301.001436][ T1324] usb 2-1: Manufacturer: syz [ 1301.023326][T17906] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3327'. [ 1301.041687][T17901] loop5: detected capacity change from 0 to 2048 [ 1301.048203][ T1324] usb 2-1: SerialNumber: syz [ 1301.106747][T17901] EXT4-fs (loop5): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1301.159636][ T1324] usb 2-1: can't set config #102, error -71 [ 1301.201205][ T1324] usb 2-1: USB disconnect, device number 35 [ 1301.236347][T17905] loop0: detected capacity change from 0 to 4096 [ 1301.591089][T17905] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1301.909270][T17910] syz.3.3329 (17910): drop_caches: 2 [ 1302.092490][T17919] loop2: detected capacity change from 0 to 32768 [ 1302.128883][T17905] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1302.201756][T17919] XFS (loop2): sunit and swidth options incompatible with the noalign option [ 1302.283442][T17905] ntfs3: loop0: Failed to load root. [ 1302.680576][ T1324] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1302.702632][T17915] loop5: detected capacity change from 0 to 8192 [ 1302.824108][T17915] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 1302.834359][T17915] REISERFS (device loop5): using ordered data mode [ 1302.841078][T17915] reiserfs: using flush barriers [ 1302.847826][T17915] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1302.867087][T17915] REISERFS (device loop5): checking transaction log (loop5) [ 1302.950271][T17915] REISERFS (device loop5): Using tea hash to sort names [ 1302.959135][T17915] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1303.100805][ T1324] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1303.122294][ T1324] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1303.145329][ T1324] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1303.169232][ T1324] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1303.187787][ T1324] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1303.204008][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.228500][ T1324] usb 3-1: config 0 descriptor?? [ 1303.732151][ T1324] holtek 0003:1241:5015.0006: invalid report_count -253143550 [ 1303.739672][ T1324] holtek 0003:1241:5015.0006: item 0 4 1 9 parsing failed [ 1303.800855][ T1324] holtek 0003:1241:5015.0006: parse failed [ 1303.806768][ T1324] holtek: probe of 0003:1241:5015.0006 failed with error -22 [ 1303.991021][ T26] audit: type=1326 audit(2000000222.830:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17916 comm="syz.2.3331" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb9b8593e59 code=0x0 [ 1304.105789][ T8173] usb 3-1: USB disconnect, device number 31 [ 1306.647718][T17950] loop0: detected capacity change from 0 to 128 [ 1306.908988][T17958] loop3: detected capacity change from 0 to 64 [ 1307.667356][T17956] syz.1.3342 (17956): drop_caches: 2 [ 1307.841129][T17953] loop2: detected capacity change from 0 to 2048 [ 1307.885586][T17958] netlink: 'syz.3.3343': attribute type 3 has an invalid length. [ 1307.910570][T17958] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3343'. [ 1307.920603][T17953] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1308.604399][T17973] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3348'. [ 1313.620093][T18008] syz.2.3355 (18008): drop_caches: 2 [ 1313.782977][ T8173] Bluetooth: hci1: command 0x0406 tx timeout [ 1313.987416][T18015] loop0: detected capacity change from 0 to 2048 [ 1314.054236][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3361'. [ 1314.069005][T18015] EXT4-fs (loop0): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1314.310543][ T8173] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1314.810731][ T8173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.831628][ T8173] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 1314.854399][ T8173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.877496][ T8173] usb 2-1: config 0 descriptor?? [ 1315.344207][T18014] udc-core: couldn't find an available UDC or it's busy [ 1315.968366][T18014] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1316.028453][T18034] loop5: detected capacity change from 0 to 22 [ 1316.129061][T18034] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1316.250220][T18034] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1316.320571][ T8173] usbhid 2-1:0.0: can't add hid device: -71 [ 1316.326706][ T8173] usbhid: probe of 2-1:0.0 failed with error -71 [ 1316.380763][ T8173] usb 2-1: USB disconnect, device number 36 [ 1316.494766][T18037] FAULT_INJECTION: forcing a failure. [ 1316.494766][T18037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.511707][T18040] loop0: detected capacity change from 0 to 22 [ 1316.523634][T18034] overlayfs: './file0' not a directory [ 1316.547918][T18037] CPU: 0 PID: 18037 Comm: syz.5.3366 Not tainted syzkaller #0 [ 1316.555531][T18037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1316.565630][T18037] Call Trace: [ 1316.568956][T18037] [ 1316.571913][T18037] dump_stack_lvl+0x188/0x250 [ 1316.576641][T18037] ? show_regs_print_info+0x20/0x20 [ 1316.581885][T18037] ? load_image+0x400/0x400 [ 1316.586433][T18037] ? __lock_acquire+0x7d10/0x7d10 [ 1316.591499][T18037] should_fail+0x38c/0x4c0 [ 1316.595947][T18037] _copy_to_user+0x2e/0x130 [ 1316.600486][T18037] simple_read_from_buffer+0xe3/0x150 [ 1316.605891][T18037] proc_fail_nth_read+0x1a6/0x220 [ 1316.610954][T18037] ? proc_fault_inject_write+0x310/0x310 [ 1316.616612][T18037] ? fsnotify_perm+0x254/0x560 [ 1316.621411][T18037] ? proc_fault_inject_write+0x310/0x310 [ 1316.627056][T18037] vfs_read+0x301/0xd60 [ 1316.631243][T18037] ? kernel_read+0x1e0/0x1e0 [ 1316.635843][T18037] ? __fget_files+0x40f/0x480 [ 1316.640535][T18037] ? mutex_lock_nested+0x17/0x20 [ 1316.645507][T18037] ? __fdget_pos+0x2bf/0x370 [ 1316.650102][T18037] ? ksys_read+0x71/0x260 [ 1316.654446][T18037] ksys_read+0x152/0x260 [ 1316.658702][T18037] ? vfs_write+0xd60/0xd60 [ 1316.663131][T18037] ? lockdep_hardirqs_on+0x94/0x140 [ 1316.668350][T18037] do_syscall_64+0x4c/0xa0 [ 1316.672798][T18037] ? clear_bhb_loop+0x30/0x80 [ 1316.677492][T18037] ? clear_bhb_loop+0x30/0x80 [ 1316.682190][T18037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1316.688136][T18037] RIP: 0033:0x7f02ec7d068e [ 1316.692569][T18037] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1316.712307][T18037] RSP: 002b:00007f02eaa47fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1316.720763][T18037] RAX: ffffffffffffffda RBX: 00007f02eaa486c0 RCX: 00007f02ec7d068e [ 1316.728748][T18037] RDX: 000000000000000f RSI: 00007f02eaa480a0 RDI: 0000000000000005 [ 1316.737123][T18037] RBP: 00007f02eaa48090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.745113][T18037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.753102][T18037] R13: 00007f02eca89128 R14: 00007f02eca89090 R15: 00007ffc597f92c8 [ 1316.761108][T18037] [ 1316.801184][T18040] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1316.904540][T18040] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1317.750518][ T8173] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1318.151358][ T8173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.415470][ T8173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.570769][ T8173] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1319.630872][ T8173] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1319.638947][ T8173] usb 3-1: Manufacturer: syz [ 1319.664762][T18053] loop0: detected capacity change from 0 to 2048 [ 1319.726705][T18053] EXT4-fs (loop0): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1319.732714][ T8173] usb 3-1: config 0 descriptor?? [ 1320.740932][T18061] FAULT_INJECTION: forcing a failure. [ 1320.740932][T18061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.754165][T18061] CPU: 1 PID: 18061 Comm: syz.5.3373 Not tainted syzkaller #0 [ 1320.761751][T18061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1320.772010][T18061] Call Trace: [ 1320.775320][T18061] [ 1320.778277][T18061] dump_stack_lvl+0x188/0x250 [ 1320.782998][T18061] ? show_regs_print_info+0x20/0x20 [ 1320.788231][T18061] ? load_image+0x400/0x400 [ 1320.792766][T18061] ? __lock_acquire+0x7d10/0x7d10 [ 1320.797827][T18061] should_fail+0x38c/0x4c0 [ 1320.802296][T18061] _copy_to_user+0x2e/0x130 [ 1320.806838][T18061] simple_read_from_buffer+0xe3/0x150 [ 1320.812250][T18061] proc_fail_nth_read+0x1a6/0x220 [ 1320.817310][T18061] ? proc_fault_inject_write+0x310/0x310 [ 1320.822979][T18061] ? common_file_perm+0x178/0x1c0 [ 1320.828222][T18061] ? fsnotify_perm+0x254/0x560 [ 1320.833039][T18061] ? proc_fault_inject_write+0x310/0x310 [ 1320.838720][T18061] vfs_read+0x301/0xd60 [ 1320.842925][T18061] ? kernel_read+0x1e0/0x1e0 [ 1320.847546][T18061] ? preempt_schedule_irq+0xe6/0x160 [ 1320.852881][T18061] ? __fget_files+0x40f/0x480 [ 1320.857596][T18061] ? mutex_lock_nested+0x17/0x20 [ 1320.862571][T18061] ? __fdget_pos+0x2bf/0x370 [ 1320.867191][T18061] ? ksys_read+0x71/0x260 [ 1320.871555][T18061] ksys_read+0x152/0x260 [ 1320.875839][T18061] ? vfs_write+0xd60/0xd60 [ 1320.880296][T18061] ? syscall_enter_from_user_mode+0x2a/0x70 [ 1320.886236][T18061] do_syscall_64+0x4c/0xa0 [ 1320.890690][T18061] ? clear_bhb_loop+0x30/0x80 [ 1320.895401][T18061] ? clear_bhb_loop+0x30/0x80 [ 1320.900117][T18061] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1320.906049][T18061] RIP: 0033:0x7f02ec7d068e [ 1320.910508][T18061] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1320.930155][T18061] RSP: 002b:00007f02eaa26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1320.938622][T18061] RAX: ffffffffffffffda RBX: 00007f02eaa276c0 RCX: 00007f02ec7d068e [ 1320.946626][T18061] RDX: 000000000000000f RSI: 00007f02eaa270a0 RDI: 0000000000000006 [ 1320.954633][T18061] RBP: 00007f02eaa27090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.962639][T18061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.970644][T18061] R13: 00007f02eca89218 R14: 00007f02eca89180 R15: 00007ffc597f92c8 [ 1320.978665][T18061] [ 1321.299725][T18065] loop0: detected capacity change from 0 to 256 [ 1321.541971][ T8173] uclogic 0003:256C:006D.0007: v1 buttonpad probing failed: -71 [ 1321.550738][ T8173] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 1321.558270][ T8173] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 1322.334849][ T8173] usb 3-1: USB disconnect, device number 32 [ 1323.230520][ T8610] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1325.260113][T18090] syz.5.3382 (18090): drop_caches: 2 [ 1325.280476][ T8610] usb 3-1: Using ep0 maxpacket: 32 [ 1325.410774][ T8610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 1325.451371][T18093] xt_hashlimit: max too large, truncated to 1048576 [ 1325.657706][ T8610] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1325.723946][T18098] loop5: detected capacity change from 0 to 2048 [ 1325.750586][ T8610] usb 3-1: string descriptor 0 read error: -71 [ 1325.787410][ T8610] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1325.871439][ T8610] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1327.117580][T18107] loop2: detected capacity change from 0 to 1024 [ 1327.361698][ T8610] usb 3-1: config 0 descriptor?? [ 1327.391218][ T8610] usb 3-1: can't set config #0, error -71 [ 1327.402144][T18107] EXT4-fs (loop2): invalid inodes per group: 2 [ 1327.402144][T18107] [ 1327.417362][T18098] EXT4-fs (loop5): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1327.477351][ T8610] usb 3-1: USB disconnect, device number 33 [ 1329.048781][T18133] syz.5.3393 (18133): drop_caches: 2 [ 1329.882004][T10647] Bluetooth: hci2: command 0x0409 tx timeout [ 1329.889768][T18137] trusted_key: encrypted_key: insufficient parameters specified [ 1330.064578][T18139] loop5: detected capacity change from 0 to 1024 [ 1330.101065][T18141] FAULT_INJECTION: forcing a failure. [ 1330.101065][T18141] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.153261][T18139] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1330.153261][T18139] [ 1330.196766][T18141] CPU: 1 PID: 18141 Comm: syz.0.3396 Not tainted syzkaller #0 [ 1330.204277][T18141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1330.214346][T18141] Call Trace: [ 1330.217636][T18141] [ 1330.220581][T18141] dump_stack_lvl+0x188/0x250 [ 1330.225268][T18141] ? show_regs_print_info+0x20/0x20 [ 1330.230497][T18141] ? load_image+0x400/0x400 [ 1330.235012][T18141] ? __might_sleep+0xf0/0xf0 [ 1330.239639][T18141] ? __lock_acquire+0x7d10/0x7d10 [ 1330.244680][T18141] ? __local_bh_enable_ip+0x136/0x1c0 [ 1330.250143][T18141] should_fail+0x38c/0x4c0 [ 1330.254580][T18141] should_failslab+0x5/0x20 [ 1330.259096][T18141] slab_pre_alloc_hook+0x51/0xc0 [ 1330.264046][T18141] kmem_cache_alloc_node_trace+0x4a/0x300 [ 1330.269782][T18141] ? __get_vm_area_node+0x119/0x2d0 [ 1330.275009][T18141] __get_vm_area_node+0x119/0x2d0 [ 1330.280051][T18141] __vmalloc_node_range+0xef/0x8b0 [ 1330.285190][T18141] ? netlink_sendmsg+0x5ec/0xbe0 [ 1330.290171][T18141] ? netlink_data_ready+0x10/0x10 [ 1330.295261][T18141] ? netlink_sendmsg+0x5ec/0xbe0 [ 1330.300224][T18141] vmalloc+0x75/0x80 [ 1330.304159][T18141] ? netlink_sendmsg+0x5ec/0xbe0 [ 1330.309111][T18141] netlink_sendmsg+0x5ec/0xbe0 [ 1330.313893][T18141] ? netlink_getsockopt+0x570/0x570 [ 1330.319101][T18141] ? mark_lock+0x94/0x320 [ 1330.323441][T18141] ? aa_sock_msg_perm+0x94/0x150 [ 1330.328412][T18141] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1330.333748][T18141] ? security_socket_sendmsg+0x7c/0xa0 [ 1330.339216][T18141] ? netlink_getsockopt+0x570/0x570 [ 1330.344423][T18141] kernel_sendmsg+0x234/0x350 [ 1330.349127][T18141] ? sock_sendmsg+0x330/0x330 [ 1330.353813][T18141] ? __lock_acquire+0x12e8/0x7d10 [ 1330.358874][T18141] sock_no_sendpage+0x12a/0x1a0 [ 1330.363742][T18141] ? __receive_sock+0x90/0x90 [ 1330.368447][T18141] kernel_sendpage+0x2cb/0x380 [ 1330.373229][T18141] sock_sendpage+0x7a/0xb0 [ 1330.377655][T18141] pipe_to_sendpage+0x22f/0x320 [ 1330.382584][T18141] ? sock_fasync+0xf0/0xf0 [ 1330.387015][T18141] ? generic_splice_sendpage+0x180/0x180 [ 1330.392697][T18141] __splice_from_pipe+0x302/0x820 [ 1330.397750][T18141] ? generic_splice_sendpage+0x180/0x180 [ 1330.403399][T18141] generic_splice_sendpage+0x111/0x180 [ 1330.408983][T18141] ? iter_file_splice_write+0xcc0/0xcc0 [ 1330.414557][T18141] ? common_file_perm+0x171/0x1c0 [ 1330.419617][T18141] ? fsnotify_perm+0x5d/0x560 [ 1330.424311][T18141] ? security_file_permission+0x75/0xa0 [ 1330.429870][T18141] ? iter_file_splice_write+0xcc0/0xcc0 [ 1330.435434][T18141] do_splice+0xe5a/0x1640 [ 1330.439794][T18141] ? __lock_acquire+0x7d10/0x7d10 [ 1330.444854][T18141] ? __fget_files+0x40f/0x480 [ 1330.449586][T18141] ? wait_for_space+0x2c0/0x2c0 [ 1330.454486][T18141] ? __fdget+0x18b/0x210 [ 1330.458772][T18141] __se_sys_splice+0x34d/0x440 [ 1330.463578][T18141] ? __x64_sys_splice+0xf0/0xf0 [ 1330.468447][T18141] ? __x64_sys_splice+0x1d/0xf0 [ 1330.473319][T18141] do_syscall_64+0x4c/0xa0 [ 1330.477745][T18141] ? clear_bhb_loop+0x30/0x80 [ 1330.482482][T18141] ? clear_bhb_loop+0x30/0x80 [ 1330.487180][T18141] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1330.493110][T18141] RIP: 0033:0x7f214b092e59 [ 1330.497537][T18141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.517183][T18141] RSP: 002b:00007f21492cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1330.525613][T18141] RAX: ffffffffffffffda RBX: 00007f214b30c090 RCX: 00007f214b092e59 [ 1330.533601][T18141] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1330.541579][T18141] RBP: 00007f21492cb090 R08: 0000000000008001 R09: 000000000000000d [ 1330.549580][T18141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1330.557575][T18141] R13: 00007f214b30c128 R14: 00007f214b30c090 R15: 00007ffedf629e78 [ 1330.565567][T18141] [ 1330.646314][T18135] netlink: 'syz.5.3395': attribute type 1 has an invalid length. [ 1330.664522][T18135] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3395'. [ 1330.696769][T18137] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 1331.746262][T18141] syz.0.3396: vmalloc error: size 4416, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1331.761373][T18141] CPU: 1 PID: 18141 Comm: syz.0.3396 Not tainted syzkaller #0 [ 1331.768880][T18141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1331.778985][T18141] Call Trace: [ 1331.782309][T18141] [ 1331.785274][T18141] dump_stack_lvl+0x188/0x250 [ 1331.789997][T18141] ? rcu_lock_release+0x5/0x20 [ 1331.794899][T18141] ? show_regs_print_info+0x20/0x20 [ 1331.800146][T18141] ? load_image+0x400/0x400 [ 1331.804702][T18141] warn_alloc+0x243/0x320 [ 1331.809079][T18141] ? zone_watermark_ok_safe+0x240/0x240 [ 1331.814664][T18141] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 1331.820680][T18141] ? __get_vm_area_node+0x119/0x2d0 [ 1331.825940][T18141] __vmalloc_node_range+0x2b1/0x8b0 [ 1331.831183][T18141] ? netlink_data_ready+0x10/0x10 [ 1331.836263][T18141] ? netlink_sendmsg+0x5ec/0xbe0 [ 1331.841260][T18141] vmalloc+0x75/0x80 [ 1331.845212][T18141] ? netlink_sendmsg+0x5ec/0xbe0 [ 1331.850197][T18141] netlink_sendmsg+0x5ec/0xbe0 [ 1331.855015][T18141] ? netlink_getsockopt+0x570/0x570 [ 1331.860244][T18141] ? mark_lock+0x94/0x320 [ 1331.864611][T18141] ? aa_sock_msg_perm+0x94/0x150 [ 1331.869586][T18141] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1331.874905][T18141] ? security_socket_sendmsg+0x7c/0xa0 [ 1331.880409][T18141] ? netlink_getsockopt+0x570/0x570 [ 1331.885685][T18141] kernel_sendmsg+0x234/0x350 [ 1331.890412][T18141] ? sock_sendmsg+0x330/0x330 [ 1331.895141][T18141] ? __lock_acquire+0x12e8/0x7d10 [ 1331.900234][T18141] sock_no_sendpage+0x12a/0x1a0 [ 1331.905135][T18141] ? __receive_sock+0x90/0x90 [ 1331.909879][T18141] kernel_sendpage+0x2cb/0x380 [ 1331.914721][T18141] sock_sendpage+0x7a/0xb0 [ 1331.919272][T18141] pipe_to_sendpage+0x22f/0x320 [ 1331.924168][T18141] ? sock_fasync+0xf0/0xf0 [ 1331.928636][T18141] ? generic_splice_sendpage+0x180/0x180 [ 1331.934333][T18141] __splice_from_pipe+0x302/0x820 [ 1331.939423][T18141] ? generic_splice_sendpage+0x180/0x180 [ 1331.945191][T18141] generic_splice_sendpage+0x111/0x180 [ 1331.950688][T18141] ? iter_file_splice_write+0xcc0/0xcc0 [ 1331.956285][T18141] ? common_file_perm+0x171/0x1c0 [ 1331.961349][T18141] ? fsnotify_perm+0x5d/0x560 [ 1331.966068][T18141] ? security_file_permission+0x75/0xa0 [ 1331.971657][T18141] ? iter_file_splice_write+0xcc0/0xcc0 [ 1331.977247][T18141] do_splice+0xe5a/0x1640 [ 1331.981633][T18141] ? __lock_acquire+0x7d10/0x7d10 [ 1331.986714][T18141] ? __fget_files+0x40f/0x480 [ 1331.991422][T18141] ? wait_for_space+0x2c0/0x2c0 [ 1331.996283][T18141] ? __fdget+0x18b/0x210 [ 1332.000536][T18141] __se_sys_splice+0x34d/0x440 [ 1332.005331][T18141] ? __x64_sys_splice+0xf0/0xf0 [ 1332.010191][T18141] ? __x64_sys_splice+0x1d/0xf0 [ 1332.015060][T18141] do_syscall_64+0x4c/0xa0 [ 1332.019494][T18141] ? clear_bhb_loop+0x30/0x80 [ 1332.024180][T18141] ? clear_bhb_loop+0x30/0x80 [ 1332.028891][T18141] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1332.034795][T18141] RIP: 0033:0x7f214b092e59 [ 1332.039230][T18141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.058869][T18141] RSP: 002b:00007f21492cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1332.067300][T18141] RAX: ffffffffffffffda RBX: 00007f214b30c090 RCX: 00007f214b092e59 [ 1332.075280][T18141] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1332.083261][T18141] RBP: 00007f21492cb090 R08: 0000000000008001 R09: 000000000000000d [ 1332.091276][T18141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.099268][T18141] R13: 00007f214b30c128 R14: 00007f214b30c090 R15: 00007ffedf629e78 [ 1332.107287][T18141] [ 1332.115548][ T4762] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1332.134023][ T8175] Bluetooth: hci2: command 0x041b tx timeout [ 1332.201703][T18104] chnl_net:caif_netlink_parms(): no params data found [ 1332.320569][ T4762] usb 2-1: device descriptor read/64, error -71 [ 1332.513104][T18157] loop2: detected capacity change from 0 to 4096 [ 1332.590340][T18157] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1332.604769][ T4762] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1332.669568][T18104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.760987][T18104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.769575][T18104] device bridge_slave_0 entered promiscuous mode [ 1332.831318][T18157] ntfs: volume version 3.1. [ 1332.840548][ T4762] usb 2-1: device descriptor read/64, error -71 [ 1332.931785][T18104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.941761][T18157] ntfs: (device loop2): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 1332.970948][ T4762] usb usb2-port1: attempt power cycle [ 1332.985985][T18141] Mem-Info: [ 1332.999437][T18104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.019896][T18141] active_anon:5716 inactive_anon:45919 isolated_anon:0 [ 1333.019896][T18141] active_file:26393 inactive_file:37484 isolated_file:0 [ 1333.019896][T18141] unevictable:771 dirty:161 writeback:0 [ 1333.019896][T18141] slab_reclaimable:17051 slab_unreclaimable:96504 [ 1333.019896][T18141] mapped:38693 shmem:45312 pagetables:896 bounce:0 [ 1333.019896][T18141] kernel_misc_reclaimable:0 [ 1333.019896][T18141] free:1312235 free_pcp:3135 free_cma:0 [ 1333.094161][T18104] device bridge_slave_1 entered promiscuous mode [ 1333.279959][T18104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.321781][T18166] loop5: detected capacity change from 0 to 2048 [ 1333.350070][T18141] Node 0 active_anon:24632kB inactive_anon:172868kB active_file:105348kB inactive_file:149936kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:149872kB dirty:640kB writeback:0kB shmem:170672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:12028kB pagetables:3484kB all_unreclaimable? no [ 1333.381857][ T4762] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1333.440571][T18166] EXT4-fs (loop5): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1333.442141][T18104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.470594][ T4762] usb 2-1: device descriptor read/8, error -71 [ 1333.548059][T18141] Node 1 active_anon:32kB inactive_anon:508kB active_file:224kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 1333.797532][T18141] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1333.833683][T18141] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 1333.839528][T18141] Node 0 DMA32 free:1303940kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:24616kB inactive_anon:174232kB active_file:105488kB inactive_file:149820kB unevictable:1536kB writepending:652kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:18200kB local_pcp:912kB free_cma:0kB [ 1334.197216][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 1334.265658][T18141] lowmem_reserve[]: 0 0 0 0 0 [ 1334.270950][T18141] Node 0 Normal free:8kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1334.298362][T18141] lowmem_reserve[]: 0 0 0 0 0 [ 1334.305248][T18141] Node 1 Normal free:3926468kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:224kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1334.334170][T18141] lowmem_reserve[]: 0 0 0 0 0 [ 1334.338950][T18141] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1334.354732][T18141] Node 0 DMA32: 14*4kB (ME) 144*8kB (UE) 1529*16kB (ME) 853*32kB (ME) 172*64kB (ME) 184*128kB (ME) 106*256kB (ME) 25*512kB (UME) 6*1024kB (UME) 3*2048kB (UE) 284*4096kB (UM) = 1303016kB [ 1334.406816][T18104] team0: Port device team_slave_0 added [ 1334.451846][T18141] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1334.613065][T18180] syz.1.3404 (18180): drop_caches: 2 [ 1335.295910][T18178] loop5: detected capacity change from 0 to 128 [ 1335.304311][T18141] Node 1 Normal: 253*4kB (UME) 52*8kB (UE) 37*16kB (UME) 189*32kB (UME) 73*64kB (UME) 38*128kB (UME) 13*256kB (UM) 10*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 951*4096kB (M) = 3926468kB [ 1335.323860][T18141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1335.344946][T18141] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1335.354371][T18141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1335.364097][T18141] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1335.373696][T18141] 103288 total pagecache pages [ 1335.378522][T18141] 0 pages in swap cache [ 1335.384105][T18141] Swap cache stats: add 960, delete 960, find 21/32 [ 1335.391454][T18141] Free swap = 124464kB [ 1335.395640][T18141] Total swap = 124996kB [ 1335.399816][T18141] 2097051 pages RAM [ 1335.403729][T18141] 0 pages HighMem/MovableOnly [ 1335.408432][T18141] 411492 pages reserved [ 1335.412646][T18141] 0 pages cma reserved [ 1336.128926][T18104] team0: Port device team_slave_1 added [ 1336.250791][ T4762] Bluetooth: hci2: command 0x0419 tx timeout [ 1336.416573][T18104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.424292][T18190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3407'. [ 1336.486993][T18104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.824003][T18104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.651670][T18104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.658686][T18104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1337.756991][T18214] loop2: detected capacity change from 0 to 40427 [ 1337.825871][T18104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.847893][T18214] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1337.855841][T18214] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1337.869642][T18214] F2FS-fs (loop2): invalid crc value [ 1337.887531][ T4509] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.948550][T18214] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1338.104343][T18221] loop5: detected capacity change from 0 to 64 [ 1338.117335][T18214] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1338.124867][T18214] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1338.281334][T18221] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 1340.397519][T18104] device hsr_slave_0 entered promiscuous mode [ 1340.552374][T18104] device hsr_slave_1 entered promiscuous mode [ 1340.564205][T18104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1340.612732][T18104] Cannot create hsr debugfs directory [ 1340.644428][ T4509] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.873309][ T4509] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.987963][T18230] could not allocate digest TFM handle blake2s-224-x86 [ 1341.018551][ T4509] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.937375][ T8175] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1343.052239][T18263] FAULT_INJECTION: forcing a failure. [ 1343.052239][T18263] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.074200][T18104] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1343.124896][T18263] CPU: 1 PID: 18263 Comm: syz.0.3426 Not tainted syzkaller #0 [ 1343.132441][T18263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1343.142537][T18263] Call Trace: [ 1343.145856][T18263] [ 1343.148820][T18263] dump_stack_lvl+0x188/0x250 [ 1343.153549][T18263] ? show_regs_print_info+0x20/0x20 [ 1343.158793][T18263] ? load_image+0x400/0x400 [ 1343.163329][T18263] ? __might_sleep+0xf0/0xf0 [ 1343.167956][T18263] ? __lock_acquire+0x7d10/0x7d10 [ 1343.173034][T18263] should_fail+0x38c/0x4c0 [ 1343.177512][T18263] should_failslab+0x5/0x20 [ 1343.182055][T18263] slab_pre_alloc_hook+0x51/0xc0 [ 1343.187040][T18263] kmem_cache_alloc_trace+0x47/0x2a0 [ 1343.192365][T18263] ? hci_bdaddr_list_add+0x1da/0x350 [ 1343.197819][T18263] hci_bdaddr_list_add+0x1da/0x350 [ 1343.202973][T18263] ? lock_chain_count+0x20/0x20 [ 1343.207867][T18263] ? hci_bdaddr_list_clear+0x180/0x180 [ 1343.213384][T18263] ? __might_fault+0xb3/0x110 [ 1343.218108][T18263] hci_sock_reject_list_add+0xd6/0x120 [ 1343.223730][T18263] ? hci_mgmt_chan_find+0xb0/0xb0 [ 1343.228800][T18263] ? security_capable+0x85/0xb0 [ 1343.233701][T18263] hci_sock_ioctl+0x758/0x840 [ 1343.238423][T18263] sock_do_ioctl+0xfb/0x320 [ 1343.242970][T18263] ? sock_show_fdinfo+0xb0/0xb0 [ 1343.247875][T18263] sock_ioctl+0x4d2/0x710 [ 1343.252246][T18263] ? sock_poll+0x410/0x410 [ 1343.256711][T18263] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1343.261688][T18263] ? security_file_ioctl+0x7c/0xa0 [ 1343.266844][T18263] ? sock_poll+0x410/0x410 [ 1343.271296][T18263] __se_sys_ioctl+0xfa/0x170 [ 1343.276033][T18263] do_syscall_64+0x4c/0xa0 [ 1343.280488][T18263] ? clear_bhb_loop+0x30/0x80 [ 1343.285261][T18263] ? clear_bhb_loop+0x30/0x80 [ 1343.289998][T18263] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1343.295948][T18263] RIP: 0033:0x7f214b092e59 [ 1343.300494][T18263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.320142][T18263] RSP: 002b:00007f21492ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1343.328616][T18263] RAX: ffffffffffffffda RBX: 00007f214b30bfa0 RCX: 00007f214b092e59 [ 1343.336625][T18263] RDX: 0000200000000080 RSI: 00000000400448e6 RDI: 0000000000000005 [ 1343.344617][T18263] RBP: 00007f21492ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1343.352637][T18263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1343.360649][T18263] R13: 00007f214b30c038 R14: 00007f214b30bfa0 R15: 00007ffedf629e78 [ 1343.368690][T18263] [ 1343.379826][T18104] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1343.404292][T18104] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1343.572567][T18268] syz.2.3416 (18268): drop_caches: 2 [ 1343.600610][ T8175] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1344.290707][ T8175] usb 6-1: not running at top speed; connect to a high speed hub [ 1344.341664][T18104] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1344.370765][ T8175] usb 6-1: config 9 has an invalid interface number: 124 but max is 0 [ 1344.419893][ T8175] usb 6-1: config 9 has no interface number 0 [ 1344.443857][ T8175] usb 6-1: config 9 interface 124 altsetting 195 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1344.490743][ T8175] usb 6-1: config 9 interface 124 altsetting 195 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 1344.566058][ T8175] usb 6-1: config 9 interface 124 altsetting 195 endpoint 0xB has invalid wMaxPacketSize 0 [ 1344.647591][ T8175] usb 6-1: config 9 interface 124 has no altsetting 0 [ 1344.696651][T18104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1344.791778][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1344.842509][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1344.860726][ T8175] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=42.b4 [ 1344.878578][T18104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1344.900620][ T8175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.939232][ T8175] usb 6-1: Product: syz [ 1344.979383][ T8175] usb 6-1: Manufacturer: syz [ 1344.999658][ T8175] usb 6-1: SerialNumber: syz [ 1345.004560][ T4235] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1345.084554][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1345.100697][ T8175] usb 6-1: can't set config #9, error -71 [ 1345.147710][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1345.165146][ T8175] usb 6-1: USB disconnect, device number 8 [ 1345.220985][T16421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.228135][T16421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.376893][ T4235] usb 3-1: Using ep0 maxpacket: 8 [ 1345.921565][T18290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'. [ 1345.971432][ T4235] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1346.281674][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.303076][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1346.315928][ T4235] usb 3-1: Product: syz [ 1346.320185][ T4235] usb 3-1: Manufacturer: syz [ 1346.331315][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1346.472018][ T4235] usb 3-1: SerialNumber: syz [ 1346.487299][ T4235] usb 3-1: config 0 descriptor?? [ 1346.532286][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1346.606413][ T4235] gspca_main: se401-2.14.0 probing 047d:5003 [ 1347.044845][T16421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.052064][T16421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.121011][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1347.175865][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1347.220701][ T4235] gspca_se401: Wrong descriptor type [ 1347.223181][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1347.424607][ T4235] usb 3-1: USB disconnect, device number 34 [ 1347.435130][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1347.487132][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1347.531293][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1347.617684][T18104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1347.697681][T18104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1347.879548][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1348.024416][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1348.220069][T18319] syz.1.3439 (18319): drop_caches: 2 [ 1348.926818][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1348.949017][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1348.990681][T18314] loop5: detected capacity change from 0 to 1024 [ 1349.002191][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1349.021300][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1349.029348][T18314] hfsplus: unable to parse mount options [ 1350.617329][T18352] loop2: detected capacity change from 0 to 2048 [ 1350.660922][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1350.668466][T16421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1350.732741][T18352] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1350.776617][T18104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.890528][ T8610] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1351.360627][ T8610] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1351.421108][ T8610] usb 2-1: not running at top speed; connect to a high speed hub [ 1351.619467][T18368] syz.2.3450 (18368): drop_caches: 2 [ 1352.271219][ T4509] device hsr_slave_0 left promiscuous mode [ 1352.293201][ T4509] device hsr_slave_1 left promiscuous mode [ 1352.341871][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1352.388756][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1352.462082][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1352.522496][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.530768][ T8610] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f [ 1352.539955][ T8610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.607269][ T4509] device bridge_slave_1 left promiscuous mode [ 1352.638197][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.658543][ T8610] usb 2-1: Product: syz [ 1352.679057][ T8610] usb 2-1: Manufacturer: syz [ 1352.735138][ T8610] usb 2-1: SerialNumber: syz [ 1352.796964][ T4509] device bridge_slave_0 left promiscuous mode [ 1352.809174][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.884372][T18380] loop5: detected capacity change from 0 to 1024 [ 1352.944973][T18380] EXT4-fs (loop5): Unrecognized mount option "smackfshat=init_itable" or missing value [ 1353.032735][ T8610] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1353.078723][ T4509] device veth1_macvtap left promiscuous mode [ 1353.090107][ T4509] device veth0_macvtap left promiscuous mode [ 1353.114392][ T4509] device veth1_vlan left promiscuous mode [ 1353.153456][ T4509] device veth0_vlan left promiscuous mode [ 1353.680579][ T8610] gp8psk: usb out operation failed. [ 1353.685877][ T8610] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1353.740568][ T8610] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19) [ 1353.808721][ T8610] usb 2-1: USB disconnect, device number 41 [ 1354.008198][ T4509] team0 (unregistering): Port device team_slave_1 removed [ 1354.058737][ T4509] team0 (unregistering): Port device team_slave_0 removed [ 1354.099785][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.149769][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1354.264582][T18384] netlink: 'syz.1.3454': attribute type 3 has an invalid length. [ 1354.536201][ T4509] bond0 (unregistering): Released all slaves [ 1357.425253][T18419] loop2: detected capacity change from 0 to 2048 [ 1357.555071][T18419] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1357.940102][T18437] syz.1.3465 (18437): drop_caches: 2 [ 1358.661093][T18181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1358.670240][T18181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1359.291501][T18181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1359.301153][T18181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1359.310160][T18181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1359.318736][T18181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1359.846144][T18104] device veth0_vlan entered promiscuous mode [ 1360.060948][T18104] device veth1_vlan entered promiscuous mode [ 1360.246538][T18467] sctp: [Deprecated]: syz.1.3473 (pid 18467) Use of int in max_burst socket option. [ 1360.246538][T18467] Use struct sctp_assoc_value instead [ 1360.458518][T18104] device veth0_macvtap entered promiscuous mode [ 1360.519047][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1360.544309][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1360.705822][T18478] syz.1.3476 (18478): drop_caches: 2 [ 1361.414528][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1361.464028][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.470506][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.533304][T18104] device veth1_macvtap entered promiscuous mode [ 1361.570927][T18472] loop0: detected capacity change from 0 to 2048 [ 1361.635977][T18472] EXT4-fs (loop0): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1361.713673][T18104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1361.802411][T18484] loop2: detected capacity change from 0 to 4096 [ 1361.816347][T18484] ntfs: (device loop2): parse_options(): Unrecognized mount option show_s. [ 1361.911065][T18104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.024798][T18104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.170063][T18104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.180852][T18104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.191616][T18104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.202943][T18104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1362.214681][T18104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.227540][T18104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.239500][T18487] tap0: tun_chr_ioctl cmd 1074025692 [ 1362.246897][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1362.325453][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1362.383157][T18104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.416199][T18104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.426351][T18104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.440501][T18104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.450561][T18104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.474682][T18104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.487411][T18104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1362.513960][T18104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1362.532605][T18104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.598800][T18488] loop2: detected capacity change from 0 to 8192 [ 1362.670562][T18488] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1362.847128][T18488] REISERFS (device loop2): using ordered data mode [ 1362.853811][T18488] reiserfs: using flush barriers [ 1362.860173][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1362.870220][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1362.879963][T18488] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1362.903903][T18104] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.470222][T18488] REISERFS (device loop2): checking transaction log (loop2) [ 1363.640099][T18104] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.674745][T18488] REISERFS (device loop2): Using tea hash to sort names [ 1363.703987][T18104] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.751808][T18104] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.010920][ T4201] Bluetooth: hci5: ACL packet for unknown connection handle 3584 [ 1364.094518][ T8175] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1364.117625][ T8175] Bluetooth: hci5: Injecting HCI hardware error event [ 1364.198013][ T4201] Bluetooth: hci5: hardware error 0x00 [ 1364.314707][T18516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.402286][T16421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.410182][T16421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.439921][T18181] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1364.552939][T18521] syz.1.3488 (18521): drop_caches: 2 [ 1366.367168][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.395990][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.466926][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1367.843875][T18555] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1367.901038][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3497'. [ 1369.098103][T18572] syz.0.3498 (18572): drop_caches: 2 [ 1370.044852][T18576] loop5: detected capacity change from 0 to 2048 [ 1370.057550][T18578] loop0: detected capacity change from 0 to 2048 [ 1370.143531][T18576] EXT4-fs (loop5): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1370.227995][T18578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1370.245144][T18585] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 35448 - 0 [ 1370.423577][T18585] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 35448 - 0 [ 1370.433072][T18585] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 35448 - 0 [ 1370.444694][T18585] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 35448 - 0 [ 1370.461721][T18585] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 43377 - 0 [ 1370.698700][T18585] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 43377 - 0 [ 1372.580572][T18585] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 43377 - 0 [ 1372.620149][T18585] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 43377 - 0 [ 1372.670504][T18585] device geneve2 entered promiscuous mode [ 1372.754190][T18599] loop2: detected capacity change from 0 to 1024 [ 1373.700898][T18599] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1373.751493][T18599] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1373.866963][T18599] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 1374.097719][T18599] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1374.960487][T18621] syz.5.3511 (18621): drop_caches: 2 [ 1375.227242][T18599] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 1375.346909][T18599] EXT4-fs (loop2): 1 truncate cleaned up [ 1375.353141][T18627] loop5: detected capacity change from 0 to 2048 [ 1375.383445][T18599] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,resgid=0x0000000000000000,init_itable,,errors=continue. Quota mode: writeback. [ 1375.566163][T18627] EXT4-fs (loop5): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1378.331113][T18666] loop0: detected capacity change from 0 to 512 [ 1378.405407][T18669] netlink: 'syz.6.3525': attribute type 1 has an invalid length. [ 1378.463373][T18666] EXT4-fs (loop0): Ignoring removed oldalloc option [ 1378.488236][T18672] syz.2.3524 (18672): drop_caches: 2 [ 1378.615556][T18666] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1379.286432][T18666] EXT4-fs (loop0): 1 truncate cleaned up [ 1379.302897][T18666] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,oldalloc,grpid,data_err=ignore,nodiscard,,errors=continue. Quota mode: none. [ 1380.232297][T18666] device bridge1 entered promiscuous mode [ 1380.350246][T18691] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3529'. [ 1380.700469][ T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1381.570492][ T23] usb 6-1: device descriptor read/64, error -71 [ 1381.851014][ T23] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1381.882704][T18712] loop0: detected capacity change from 0 to 2048 [ 1381.950596][ T8173] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1381.970504][T18712] EXT4-fs (loop0): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1382.061437][ T23] usb 6-1: device descriptor read/64, error -71 [ 1382.200708][ T23] usb usb6-port1: attempt power cycle [ 1382.213869][ T8173] usb 7-1: Using ep0 maxpacket: 32 [ 1382.298356][T18707] loop2: detected capacity change from 0 to 32768 [ 1382.920575][ T8173] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1383.000548][ T8173] usb 7-1: config 12 has an invalid interface number: 184 but max is 0 [ 1383.037003][ T8173] usb 7-1: config 12 has no interface number 0 [ 1383.038426][T18719] loop0: detected capacity change from 0 to 128 [ 1383.073071][ T8173] usb 7-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1383.191347][ T23] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1383.270722][ T8173] usb 7-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 1383.279855][ T8173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.360544][ T23] usb 6-1: device descriptor read/8, error -71 [ 1383.421163][T18725] syz.2.3537 (18725): drop_caches: 2 [ 1383.469623][ T8173] usb 7-1: Product: syz [ 1383.563442][ T8173] usb 7-1: Manufacturer: syz [ 1383.651691][ T8173] usb 7-1: SerialNumber: syz [ 1384.044436][T18709] udc-core: couldn't find an available UDC or it's busy [ 1384.146243][T18709] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1384.407187][T18737] netlink: 'syz.1.3541': attribute type 1 has an invalid length. [ 1384.794041][ T8173] usb 7-1: USB disconnect, device number 2 [ 1384.865375][T18741] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1384.977411][T18741] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 1385.197090][T18737] bond1: (slave gretap1): making interface the new active one [ 1385.286687][T18752] loop2: detected capacity change from 0 to 136 [ 1385.298387][T18737] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1386.354170][T18763] loop5: detected capacity change from 0 to 256 [ 1386.466605][T18762] loop2: detected capacity change from 0 to 2048 [ 1386.492153][T18763] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 1386.560239][T18762] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1386.612904][T18763] attempt to access beyond end of device [ 1386.612904][T18763] loop5: rw=2049, want=34225520826, limit=256 [ 1386.640443][ T8175] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1386.679398][T18763] buffer_io_error: 5 callbacks suppressed [ 1386.679418][T18763] Buffer I/O error on dev loop5, logical block 34225520825, lost async page write [ 1386.834953][T18763] attempt to access beyond end of device [ 1386.834953][T18763] loop5: rw=2049, want=34225520827, limit=256 [ 1387.545488][T18763] Buffer I/O error on dev loop5, logical block 34225520826, lost async page write [ 1387.580704][ T8175] usb 2-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1387.592363][T18779] loop2: detected capacity change from 0 to 128 [ 1387.620603][ T8175] usb 2-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1387.634286][T18763] attempt to access beyond end of device [ 1387.634286][T18763] loop5: rw=2049, want=34225520828, limit=256 [ 1387.714756][T18783] syz.0.3550 (18783): drop_caches: 2 [ 1387.733079][T18763] Buffer I/O error on dev loop5, logical block 34225520827, lost async page write [ 1387.750205][ T8175] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1387.842015][T18779] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 1387.898146][ T8175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.996381][T18779] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1388.421135][ T8173] usb 2-1: USB disconnect, device number 42 [ 1388.565579][T18779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1388.584713][T18789] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3551'. [ 1388.809887][T18796] loop5: detected capacity change from 0 to 1024 [ 1388.914268][T18796] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1388.980552][T18796] EXT4-fs (loop5): group descriptors corrupted! [ 1389.231181][T18803] FAULT_INJECTION: forcing a failure. [ 1389.231181][T18803] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.842234][T18803] CPU: 1 PID: 18803 Comm: syz.6.3554 Not tainted syzkaller #0 [ 1389.849760][T18803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1389.859825][T18803] Call Trace: [ 1389.863113][T18803] [ 1389.866048][T18803] dump_stack_lvl+0x188/0x250 [ 1389.870746][T18803] ? show_regs_print_info+0x20/0x20 [ 1389.875957][T18803] ? load_image+0x400/0x400 [ 1389.880478][T18803] should_fail+0x38c/0x4c0 [ 1389.884945][T18803] should_failslab+0x5/0x20 [ 1389.889468][T18803] slab_pre_alloc_hook+0x51/0xc0 [ 1389.894434][T18803] ? __build_skb+0x26/0x2e0 [ 1389.898985][T18803] kmem_cache_alloc+0x3d/0x290 [ 1389.903772][T18803] __build_skb+0x26/0x2e0 [ 1389.908117][T18803] build_skb+0x1e/0x170 [ 1389.912282][T18803] __tun_build_skb+0x32/0x240 [ 1389.916976][T18803] tun_get_user+0x19f7/0x3a70 [ 1389.921669][T18803] ? tun_ring_recv+0xc40/0xc40 [ 1389.926484][T18803] ? rcu_lock_release+0x5/0x20 [ 1389.931272][T18803] ? __lock_acquire+0x7d10/0x7d10 [ 1389.936343][T18803] tun_chr_write_iter+0x112/0x1e0 [ 1389.941406][T18803] vfs_write+0x745/0xd60 [ 1389.945686][T18803] ? file_end_write+0x250/0x250 [ 1389.950565][T18803] ? __fget_files+0x40f/0x480 [ 1389.955343][T18803] ? __fdget_pos+0x1e2/0x370 [ 1389.959966][T18803] ? ksys_write+0x71/0x260 [ 1389.964391][T18803] ksys_write+0x152/0x260 [ 1389.968762][T18803] ? __ia32_sys_read+0x80/0x80 [ 1389.973548][T18803] ? lockdep_hardirqs_on+0x94/0x140 [ 1389.978771][T18803] do_syscall_64+0x4c/0xa0 [ 1389.983194][T18803] ? clear_bhb_loop+0x30/0x80 [ 1389.988310][T18803] ? clear_bhb_loop+0x30/0x80 [ 1389.992994][T18803] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1389.998898][T18803] RIP: 0033:0x7f0ca738a68e [ 1390.003321][T18803] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1390.022967][T18803] RSP: 002b:00007f0ca5622fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1390.031416][T18803] RAX: ffffffffffffffda RBX: 00007f0ca56236c0 RCX: 00007f0ca738a68e [ 1390.039397][T18803] RDX: 0000000000000056 RSI: 0000200000004180 RDI: 00000000000000c8 [ 1390.047383][T18803] RBP: 00007f0ca5623090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.055362][T18803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.063347][T18803] R13: 00007f0ca7643038 R14: 00007f0ca7642fa0 R15: 00007ffc190a19c8 [ 1390.071447][T18803] [ 1390.232302][ T8173] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1390.440477][ T8173] usb 2-1: device descriptor read/64, error -71 [ 1391.430331][T18825] loop5: detected capacity change from 0 to 2048 [ 1391.430586][ T8173] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1391.505620][T18825] EXT4-fs (loop5): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1391.618794][T18838] syz.2.3561 (18838): drop_caches: 2 [ 1392.595035][T18845] binder: 18843:18845 ioctl c0306201 200000000080 returned -14 [ 1392.626887][T18845] binder: 18843:18845 ioctl c0306201 2000000003c0 returned -14 [ 1393.188288][ T23] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1393.236740][T18849] binder: 18848:18849 ioctl c0306201 200000000080 returned -14 [ 1393.265980][T18849] binder: 18848:18849 ioctl c0306201 2000000003c0 returned -14 [ 1393.306585][T18849] FAULT_INJECTION: forcing a failure. [ 1393.306585][T18849] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.332488][T18854] binder: BINDER_SET_CONTEXT_MGR already set [ 1393.339212][T18854] binder: 18853:18854 ioctl 4018620d 200000000040 returned -16 [ 1393.399931][T18849] CPU: 0 PID: 18849 Comm: syz.0.3564 Not tainted syzkaller #0 [ 1393.407480][T18849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1393.417579][T18849] Call Trace: [ 1393.420906][T18849] [ 1393.423864][T18849] dump_stack_lvl+0x188/0x250 [ 1393.428577][T18849] ? show_regs_print_info+0x20/0x20 [ 1393.433896][T18849] ? load_image+0x400/0x400 [ 1393.438444][T18849] ? __might_sleep+0xf0/0xf0 [ 1393.440691][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1393.443066][T18849] ? __lock_acquire+0x7d10/0x7d10 [ 1393.453152][T18849] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 1393.459529][T18849] should_fail+0x38c/0x4c0 [ 1393.464000][T18849] should_failslab+0x5/0x20 [ 1393.468552][T18849] slab_pre_alloc_hook+0x51/0xc0 [ 1393.473530][T18849] __kmalloc+0x6b/0x330 [ 1393.477724][T18849] ? tomoyo_encode+0x27e/0x540 [ 1393.482536][T18849] tomoyo_encode+0x27e/0x540 [ 1393.487174][T18849] tomoyo_realpath_from_path+0x5cd/0x610 [ 1393.492872][T18849] tomoyo_path_number_perm+0x242/0x660 [ 1393.498381][T18849] ? verify_lock_unused+0x140/0x140 [ 1393.503623][T18849] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1393.509119][T18849] ? ksys_write+0x1c6/0x260 [ 1393.513705][T18849] security_file_ioctl+0x6c/0xa0 [ 1393.518691][T18849] __se_sys_ioctl+0x48/0x170 [ 1393.523331][T18849] do_syscall_64+0x4c/0xa0 [ 1393.527780][T18849] ? clear_bhb_loop+0x30/0x80 [ 1393.532495][T18849] ? clear_bhb_loop+0x30/0x80 [ 1393.537211][T18849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1393.543145][T18849] RIP: 0033:0x7f214b092e59 [ 1393.547596][T18849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.567252][T18849] RSP: 002b:00007f21492ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1393.571385][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.575702][T18849] RAX: ffffffffffffffda RBX: 00007f214b30bfa0 RCX: 00007f214b092e59 [ 1393.593788][T18849] RDX: 0000200000000000 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1393.601802][T18849] RBP: 00007f21492ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.609816][T18849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.617840][T18849] R13: 00007f214b30c038 R14: 00007f214b30bfa0 R15: 00007ffedf629e78 [ 1393.623536][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1393.625866][T18849] [ 1393.716574][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 108, changing to 10 [ 1393.747904][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25966, setting to 1024 [ 1393.789907][ T23] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1393.809688][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.852114][T18842] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1393.881596][ T23] hub 3-1:1.0: bad descriptor, ignoring hub [ 1393.918423][ T23] hub: probe of 3-1:1.0 failed with error -5 [ 1393.967533][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 1393.997410][ T23] cdc_wdm 3-1:1.0: skipping garbage [ 1394.738850][ T23] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1394.744966][ T23] cdc_wdm 3-1:1.0: Unknown control protocol [ 1394.801262][ T23] usb 3-1: USB disconnect, device number 35 [ 1395.183105][T18874] syz.1.3572 (18874): drop_caches: 2 [ 1395.974726][T18868] loop6: detected capacity change from 0 to 512 [ 1395.981389][T18849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1396.108215][T18868] EXT4-fs (loop6): inline encryption not supported [ 1396.129966][T18881] device bridge1 entered promiscuous mode [ 1396.142872][T18885] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3574'. [ 1396.158263][T18856] loop5: detected capacity change from 0 to 32768 [ 1396.190995][T18868] EXT4-fs (loop6): mounted filesystem without journal. Opts: inlinecrypt,errors=remount-ro,abort,. Quota mode: writeback. [ 1396.348256][T18868] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1396.408378][T18884] loop2: detected capacity change from 0 to 2048 [ 1396.516878][T18868] EXT4-fs error (device loop6): ext4_empty_dir:3136: inode #12: comm syz.6.3569: invalid size [ 1396.558307][T18895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3576'. [ 1396.580936][T18884] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1396.775222][T18868] EXT4-fs (loop6): Remounting filesystem read-only [ 1399.839131][T18917] trusted_key: encrypted_key: insufficient parameters specified [ 1399.921403][T18918] sctp: [Deprecated]: syz.2.3579 (pid 18918) Use of int in max_burst socket option. [ 1399.921403][T18918] Use struct sctp_assoc_value instead [ 1400.336320][T18917] netlink: 'syz.1.3583': attribute type 1 has an invalid length. [ 1400.395931][T18917] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3583'. [ 1400.413994][T18924] syz.5.3584 (18924): drop_caches: 2 [ 1400.446730][T18922] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 1400.533242][T18931] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1401.533372][T18935] loop5: detected capacity change from 0 to 512 [ 1401.540298][T18934] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3596'. [ 1401.575213][T18935] EXT4-fs (loop5): Ignoring removed oldalloc option [ 1401.610459][T18935] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1401.837911][T18935] EXT4-fs (loop5): 1 truncate cleaned up [ 1401.852951][T18935] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,oldalloc,grpid,data_err=ignore,nodiscard,,errors=continue. Quota mode: none. [ 1401.882326][T18946] loop2: detected capacity change from 0 to 2048 [ 1401.997730][T18946] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1402.213246][T18935] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3586: invalid indirect mapped block 4294901760 (level 0) [ 1402.257148][T18935] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3586: invalid indirect mapped block 4294967295 (level 1) [ 1404.524525][T18965] loop6: detected capacity change from 0 to 8192 [ 1404.562192][T18977] loop5: detected capacity change from 0 to 22 [ 1404.986014][T18977] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1405.421063][T18965] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 1405.482789][T18977] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1405.546786][T18965] REISERFS (device loop6): using ordered data mode [ 1405.555070][T18965] reiserfs: using flush barriers [ 1405.566507][T18965] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1405.692385][T18965] REISERFS (device loop6): checking transaction log (loop6) [ 1405.950319][T18997] trusted_key: encrypted_key: insufficient parameters specified [ 1405.973032][T18997] loop0: detected capacity change from 0 to 1024 [ 1406.231603][T18997] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1406.231603][T18997] [ 1406.280475][ T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1406.340246][T18997] netlink: 'syz.0.3599': attribute type 1 has an invalid length. [ 1406.386392][T18997] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3599'. [ 1406.439281][T18997] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 1406.493522][T18965] REISERFS (device loop6): Using tea hash to sort names [ 1406.503197][T18965] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1406.530466][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 1406.795153][T19011] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1407.551072][ T23] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1407.569819][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.688889][ T23] usb 6-1: Product: syz [ 1407.693562][ T23] usb 6-1: Manufacturer: syz [ 1407.698294][ T23] usb 6-1: SerialNumber: syz [ 1407.705914][ T23] usb 6-1: config 0 descriptor?? [ 1407.754844][ T23] gspca_main: se401-2.14.0 probing 047d:5003 [ 1408.045369][T19029] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3607'. [ 1408.132453][T19030] loop2: detected capacity change from 0 to 128 [ 1408.282049][ T23] gspca_se401: Wrong descriptor type [ 1408.744911][T19030] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1408.807827][T19030] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1409.392321][ T8610] usb 6-1: USB disconnect, device number 13 [ 1411.169666][T19057] loop6: detected capacity change from 0 to 128 [ 1411.186556][T19075] loop5: detected capacity change from 0 to 128 [ 1411.201114][T19060] syz.2.3612 (19060): drop_caches: 2 [ 1411.334787][T19057] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1411.417872][T19075] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 1411.423976][T19057] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1411.490118][T19075] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1411.577205][T19081] loop2: detected capacity change from 0 to 2048 [ 1411.604947][T19075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1411.636659][T19081] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1411.652458][T19073] loop0: detected capacity change from 0 to 8192 [ 1411.792945][T19073] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1411.849953][T19073] REISERFS (device loop0): using ordered data mode [ 1411.860077][T19073] reiserfs: using flush barriers [ 1411.890428][T19073] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1411.927723][T19073] REISERFS (device loop0): checking transaction log (loop0) [ 1412.565414][T19073] REISERFS (device loop0): Using tea hash to sort names [ 1412.623723][T19073] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1413.157466][T19111] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 1413.200773][ T23] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 1413.210570][ T8175] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1414.490698][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1414.498643][ T8175] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1414.507155][ T8175] usb 2-1: config 0 has no interface number 0 [ 1414.513406][ T8175] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x85 has an invalid bInterval 33, changing to 7 [ 1414.525044][ T8175] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x85 has invalid maxpacket 1846, setting to 1024 [ 1414.536670][ T8175] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1414.545992][ T8175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.562887][ T8175] usb 2-1: config 0 descriptor?? [ 1414.585853][ T23] usb 7-1: config 8 has an invalid interface number: 11 but max is 0 [ 1414.594222][ T23] usb 7-1: config 8 has no interface number 0 [ 1414.608681][ T8175] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input90 [ 1414.619845][ T23] usb 7-1: config 8 interface 11 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1414.855103][ T8175] usb 2-1: USB disconnect, device number 45 [ 1414.882580][ T23] usb 7-1: string descriptor 0 read error: -22 [ 1414.889054][ T23] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=c3.96 [ 1414.910847][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.790157][T19134] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3627'. [ 1415.989177][T19135] loop0: detected capacity change from 0 to 32768 [ 1416.541861][T19136] syz.5.3628 (19136): drop_caches: 2 [ 1416.750890][T19135] XFS (loop0): Mounting V5 Filesystem [ 1416.788756][ T1324] usb 7-1: USB disconnect, device number 3 [ 1416.895434][T19160] loop6: detected capacity change from 0 to 64 [ 1416.958486][T19160] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount. [ 1416.980588][T19135] XFS (loop0): Ending clean mount [ 1416.994887][T19135] XFS (loop0): Quotacheck needed: Please wait. [ 1417.063699][T19160] MINIX-fs: bad superblock [ 1417.234078][T19135] XFS (loop0): Quotacheck: Done. [ 1417.690857][ T26] audit: type=1800 audit(2000000336.460:67): pid=19166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3637" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 1418.037701][T19174] loop6: detected capacity change from 0 to 128 [ 1418.078209][T19172] loop5: detected capacity change from 0 to 2048 [ 1418.086592][T16348] XFS (loop0): Unmounting Filesystem [ 1418.244826][T19172] EXT4-fs (loop5): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1418.285252][T19174] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 1418.296546][ T1324] usb 3-1: new low-speed USB device number 36 using dummy_hcd [ 1418.317200][T19174] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1418.356071][T19174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1419.397071][ T1324] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1419.490911][ T1324] usb 3-1: config 8 has an invalid interface number: 11 but max is 0 [ 1419.499084][ T1324] usb 3-1: config 8 has no interface number 0 [ 1419.526490][ T1324] usb 3-1: config 8 interface 11 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1419.673156][T19204] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3642'. [ 1419.763435][T19210] netlink: 'syz.0.3645': attribute type 1 has an invalid length. [ 1419.840502][T10081] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1419.858907][T19210] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1419.870648][ T1324] usb 3-1: string descriptor 0 read error: -22 [ 1419.876939][ T1324] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=c3.96 [ 1419.906648][ T1324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.915046][T19210] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 1419.932297][ T26] audit: type=1326 audit(2000000338.770:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.1.3646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1419.964505][ T26] audit: type=1326 audit(2000000338.770:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.1.3646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1419.990484][ T26] audit: type=1326 audit(2000000338.770:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.1.3646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1420.060409][T10081] usb 6-1: device descriptor read/64, error -71 [ 1420.086337][T19213] bond1: (slave gretap1): making interface the new active one [ 1420.123768][ T26] audit: type=1326 audit(2000000338.770:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.1.3646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1420.160818][T19213] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1420.172264][ T26] audit: type=1326 audit(2000000338.800:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.1.3646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3464e082ac code=0x7ffc0000 [ 1420.278034][ T26] audit: type=1326 audit(2000000338.800:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.1.3646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3464e0830e code=0x7ffc0000 [ 1420.340666][T10081] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1421.450549][ T26] audit: type=1326 audit(2000000338.800:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.1.3646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1421.475172][ T26] audit: type=1326 audit(2000000338.800:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.1.3646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3464e4bbc2 code=0x7ffc0000 [ 1421.500271][ T26] audit: type=1326 audit(2000000338.810:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19215 comm="syz.1.3646" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1421.550434][T10081] usb 6-1: device descriptor read/64, error -71 [ 1421.600406][T10647] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1421.692546][T10081] usb usb6-port1: attempt power cycle [ 1421.702619][ T9918] usb 3-1: USB disconnect, device number 36 [ 1421.930041][T19242] loop2: detected capacity change from 0 to 2048 [ 1421.985275][T19242] EXT4-fs (loop2): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1422.020805][T10647] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 1422.039342][T10647] usb 2-1: config 0 has no interface number 0 [ 1422.067969][T10647] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x85 has an invalid bInterval 33, changing to 7 [ 1422.093216][T19247] netlink: 576 bytes leftover after parsing attributes in process `syz.6.3650'. [ 1422.132916][T10647] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x85 has invalid maxpacket 1846, setting to 1024 [ 1422.150018][T10081] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1422.168545][T10647] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1422.196918][T10647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.259538][T10647] usb 2-1: config 0 descriptor?? [ 1422.286351][T10081] usb 6-1: device descriptor read/8, error -71 [ 1422.315435][T10647] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input91 [ 1423.025135][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.031714][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.047373][T19247] [U]  [ 1423.101852][T10081] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1423.148151][T10647] input: failed to attach handler mousedev to device input91, error: -5 [ 1423.190135][T10647] usb 2-1: USB disconnect, device number 46 [ 1423.350445][T10081] usb 6-1: device not accepting address 17, error -71 [ 1424.068269][T10081] usb usb6-port1: unable to enumerate USB device [ 1424.235187][T19266] x_tables: duplicate underflow at hook 2 [ 1424.251967][T19266] x_tables: duplicate underflow at hook 2 [ 1424.389606][T19271] loop5: detected capacity change from 0 to 512 [ 1424.419082][T19273] loop2: detected capacity change from 0 to 22 [ 1424.490941][T19273] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1424.512934][T19271] EXT4-fs (loop5): Ignoring removed orlov option [ 1424.520201][T19273] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1424.528093][T19271] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1424.549969][T19275] input: syz1 as /devices/virtual/input/input92 [ 1424.570464][T19271] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1424.626945][T19275] loop6: detected capacity change from 0 to 256 [ 1424.721639][T19271] EXT4-fs (loop5): 1 truncate cleaned up [ 1424.727360][T19271] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 1424.749603][T19275] exFAT-fs (loop6): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1424.898248][T19291] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3660'. [ 1424.975397][T19289] loop0: detected capacity change from 0 to 2048 [ 1425.104539][T19289] EXT4-fs (loop0): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1425.537633][ T26] kauditd_printk_skb: 44 callbacks suppressed [ 1425.537646][ T26] audit: type=1800 audit(2000000344.370:121): pid=19275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3657" name="file1" dev="loop6" ino=1048664 res=0 errno=0 [ 1425.575879][T19275] attempt to access beyond end of device [ 1425.575879][T19275] loop6: rw=0, want=4288, limit=256 [ 1425.643646][ T8175] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 1426.140596][ T8175] usb 6-1: Invalid ep0 maxpacket: 16 [ 1426.212387][T19309] FAULT_INJECTION: forcing a failure. [ 1426.212387][T19309] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.300523][ T8175] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 1426.315631][T19309] CPU: 1 PID: 19309 Comm: syz.0.3665 Not tainted syzkaller #0 [ 1426.323174][T19309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1426.333465][T19309] Call Trace: [ 1426.336792][T19309] [ 1426.339767][T19309] dump_stack_lvl+0x188/0x250 [ 1426.344503][T19309] ? show_regs_print_info+0x20/0x20 [ 1426.349756][T19309] ? load_image+0x400/0x400 [ 1426.354311][T19309] ? __might_sleep+0xf0/0xf0 [ 1426.358969][T19309] ? __lock_acquire+0x7d10/0x7d10 [ 1426.364066][T19309] should_fail+0x38c/0x4c0 [ 1426.368555][T19309] should_failslab+0x5/0x20 [ 1426.373116][T19309] slab_pre_alloc_hook+0x51/0xc0 [ 1426.378125][T19309] kmem_cache_alloc_node+0x47/0x2d0 [ 1426.383375][T19309] ? __alloc_skb+0xf4/0x750 [ 1426.387951][T19309] __alloc_skb+0xf4/0x750 [ 1426.392345][T19309] sock_wmalloc+0xa6/0x120 [ 1426.396835][T19309] ip_append_page+0x9f3/0x12c0 [ 1426.401710][T19309] udp_sendpage+0x1cd/0x600 [ 1426.406304][T19309] ? dst_clone+0xc0/0xc0 [ 1426.410602][T19309] ? mark_lock+0x94/0x320 [ 1426.414998][T19309] ? dst_clone+0xc0/0xc0 [ 1426.419287][T19309] inet_sendpage+0x1b5/0x340 [ 1426.423984][T19309] kernel_sendpage+0x2cb/0x380 [ 1426.428810][T19309] sock_sendpage+0x7a/0xb0 [ 1426.433283][T19309] pipe_to_sendpage+0x22f/0x320 [ 1426.438202][T19309] ? sock_fasync+0xf0/0xf0 [ 1426.442664][T19309] ? generic_splice_sendpage+0x180/0x180 [ 1426.448360][T19309] ? page_cache_pipe_buf_release+0xfa/0x240 [ 1426.454317][T19309] __splice_from_pipe+0x302/0x820 [ 1426.459449][T19309] ? generic_splice_sendpage+0x180/0x180 [ 1426.465146][T19309] generic_splice_sendpage+0x111/0x180 [ 1426.470670][T19309] ? iter_file_splice_write+0xcc0/0xcc0 [ 1426.476447][T19309] ? common_file_perm+0x171/0x1c0 [ 1426.481695][T19309] ? fsnotify_perm+0x5d/0x560 [ 1426.486428][T19309] ? security_file_permission+0x75/0xa0 [ 1426.492034][T19309] ? iter_file_splice_write+0xcc0/0xcc0 [ 1426.497638][T19309] do_splice+0xe5a/0x1640 [ 1426.502043][T19309] ? __lock_acquire+0x7d10/0x7d10 [ 1426.507133][T19309] ? __fget_files+0x40f/0x480 [ 1426.511859][T19309] ? wait_for_space+0x2c0/0x2c0 [ 1426.516764][T19309] ? __fdget+0x18b/0x210 [ 1426.521059][T19309] __se_sys_splice+0x34d/0x440 [ 1426.525877][T19309] ? __x64_sys_splice+0xf0/0xf0 [ 1426.530786][T19309] ? __x64_sys_splice+0x1d/0xf0 [ 1426.535672][T19309] do_syscall_64+0x4c/0xa0 [ 1426.540142][T19309] ? clear_bhb_loop+0x30/0x80 [ 1426.544999][T19309] ? clear_bhb_loop+0x30/0x80 [ 1426.549739][T19309] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1426.555682][T19309] RIP: 0033:0x7f214b092e59 [ 1426.560141][T19309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.570952][T10647] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1426.579793][T19309] RSP: 002b:00007f21492ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1426.595756][T19309] RAX: ffffffffffffffda RBX: 00007f214b30bfa0 RCX: 00007f214b092e59 [ 1426.603781][T19309] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1426.611795][T19309] RBP: 00007f21492ec090 R08: 002000000002ffff R09: 0000000000000000 [ 1426.619990][T19309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.628008][T19309] R13: 00007f214b30c038 R14: 00007f214b30bfa0 R15: 00007ffedf629e78 [ 1426.636032][T19309] [ 1426.639091][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.900437][ T8175] usb 6-1: Invalid ep0 maxpacket: 16 [ 1426.906152][ T8175] usb usb6-port1: attempt power cycle [ 1427.060607][T10647] usb 7-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1427.090520][T10647] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1427.831041][T10647] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.916133][T10647] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1427.941224][T19329] loop0: detected capacity change from 0 to 22 [ 1427.986799][T19329] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1428.000549][T10647] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1428.007242][T10647] usb 7-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1428.082885][ T8175] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 1428.106750][T19329] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1428.117984][T19334] loop2: detected capacity change from 0 to 512 [ 1428.124412][T10647] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.170541][ T8175] usb 6-1: device descriptor read/8, error -71 [ 1428.190685][T10647] usb 7-1: config 0 descriptor?? [ 1428.264266][T19334] EXT4-fs (loop2): Ignoring removed orlov option [ 1428.271409][T10647] usb 7-1: can't set config #0, error -71 [ 1428.278425][T19334] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1428.332256][T10647] usb 7-1: USB disconnect, device number 4 [ 1428.354267][T19334] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1428.436602][T19341] device syzkaller0 entered promiscuous mode [ 1428.461792][T19334] EXT4-fs (loop2): 1 truncate cleaned up [ 1428.489118][T19334] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 1428.538981][T19350] loop5: detected capacity change from 0 to 2048 [ 1428.607697][T19350] EXT4-fs (loop5): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1428.620496][ T8610] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1429.070751][T10647] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1429.210634][ T8610] usb 2-1: config 2 has an invalid interface number: 3 but max is 0 [ 1429.660390][ T8610] usb 2-1: config 2 has no interface number 0 [ 1429.707465][ T8610] usb 2-1: config 2 interface 3 has no altsetting 0 [ 1429.720762][T19361] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3678'. [ 1429.930762][ T8610] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.a2 [ 1430.030533][T10647] usb 7-1: config 0 has an invalid interface number: 120 but max is 0 [ 1430.133845][T19364] syz.5.3677 (19364): drop_caches: 2 [ 1430.150482][T10647] usb 7-1: config 0 has no interface number 0 [ 1430.180407][ T8610] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.214341][T10647] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x85 has an invalid bInterval 33, changing to 7 [ 1430.242388][ T8610] usb 2-1: Product: syz [ 1430.294939][ T8610] usb 2-1: Manufacturer: syz [ 1430.320214][T10647] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x85 has invalid maxpacket 1846, setting to 1024 [ 1430.333734][ T8610] usb 2-1: SerialNumber: syz [ 1430.543292][T10647] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1430.585976][T19379] loop2: detected capacity change from 0 to 256 [ 1430.602265][T10647] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.633937][T10647] usb 7-1: config 0 descriptor?? [ 1430.693691][T10647] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input93 [ 1430.763081][T19379] FAT-fs (loop2): Directory bread(block 64) failed [ 1430.769752][T19379] FAT-fs (loop2): Directory bread(block 65) failed [ 1430.776429][T19379] FAT-fs (loop2): Directory bread(block 66) failed [ 1430.783164][T19379] FAT-fs (loop2): Directory bread(block 67) failed [ 1430.789884][T19379] FAT-fs (loop2): Directory bread(block 68) failed [ 1430.796464][T19379] FAT-fs (loop2): Directory bread(block 69) failed [ 1430.803142][T19379] FAT-fs (loop2): Directory bread(block 70) failed [ 1430.809717][T19379] FAT-fs (loop2): Directory bread(block 71) failed [ 1430.816643][T19379] FAT-fs (loop2): Directory bread(block 72) failed [ 1430.823240][T19379] FAT-fs (loop2): Directory bread(block 73) failed [ 1430.901306][ T8610] usb 2-1: bad CDC descriptors [ 1430.923393][ T8610] usb 2-1: USB disconnect, device number 47 [ 1431.127459][T10647] usb 7-1: USB disconnect, device number 5 [ 1432.008145][T19430] loop5: detected capacity change from 0 to 1024 [ 1432.128640][T19430] EXT4-fs (loop5): inline encryption not supported [ 1432.168791][T19434] loop6: detected capacity change from 0 to 2048 [ 1432.194762][T19430] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1432.294926][T19434] EXT4-fs (loop6): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 1432.357973][T19430] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1432.357973][T19430] [ 1432.563903][T19430] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3686'. [ 1433.352699][ C1] vkms_vblank_simulate: vblank timer overrun [ 1433.518232][T19452] program syz.1.3689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1434.889330][T19468] loop5: detected capacity change from 0 to 1024 [ 1434.952696][T19468] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3695'. [ 1435.031664][T19473] overlayfs: failed to clone upperpath [ 1435.067137][T19475] x_tables: duplicate underflow at hook 3 [ 1435.260532][ T1324] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1435.530790][T19480] loop6: detected capacity change from 0 to 1024 [ 1435.540618][ T1324] usb 2-1: Using ep0 maxpacket: 16 [ 1435.651142][T19480] hfsplus: unable to parse mount options [ 1435.680767][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.708557][ T1324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.753262][ T1324] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1435.770979][ T23] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 1435.796192][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.836032][ T1324] usb 2-1: config 0 descriptor?? [ 1435.921733][T19480] loop6: detected capacity change from 0 to 4096 [ 1435.948266][T19480] EXT4-fs warning (device loop6): ext4_fill_super:4027: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 1435.999609][T19480] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 1436.034144][ T4312] udevd[4312]: incorrect ext4 checksum on /dev/loop6 [ 1436.200689][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1436.290608][ T23] usb 3-1: config 8 has an invalid interface number: 11 but max is 0 [ 1436.327722][ T23] usb 3-1: config 8 has no interface number 0 [ 1436.362292][ T1324] apple 0003:05AC:024B.0008: unknown global tag 0xe [ 1436.379283][ T1324] apple 0003:05AC:024B.0008: item 0 1 1 14 parsing failed [ 1436.386920][ T23] usb 3-1: config 8 interface 11 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1436.416936][T19494] loop6: detected capacity change from 0 to 1024 [ 1436.448489][ T1324] apple 0003:05AC:024B.0008: parse failed [ 1436.475008][ T1324] apple: probe of 0003:05AC:024B.0008 failed with error -22 [ 1436.531462][T19494] EXT4-fs (loop6): inline encryption not supported [ 1436.600618][T19494] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1436.660621][ T23] usb 3-1: string descriptor 0 read error: -22 [ 1436.669307][ T23] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=c3.96 [ 1436.679673][T19494] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1436.679673][T19494] [ 1436.702835][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.912368][T19494] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3702'. [ 1436.994811][ T4762] usb 2-1: USB disconnect, device number 48 [ 1438.765939][T19513] syz.0.3717 (19513): drop_caches: 2 [ 1438.845262][T10647] usb 3-1: USB disconnect, device number 37 [ 1439.070466][ T4762] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1439.070671][ T1324] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 1439.500796][ T4762] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 1439.510367][ T4762] usb 6-1: config 0 has no interface number 0 [ 1439.516517][ T4762] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x85 has an invalid bInterval 33, changing to 7 [ 1439.540749][ T1324] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1439.587728][T19544] loop2: detected capacity change from 0 to 1024 [ 1439.610716][ T4762] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x85 has invalid maxpacket 1846, setting to 1024 [ 1439.627754][T19543] loop0: detected capacity change from 0 to 2048 [ 1439.631204][ T1324] usb 7-1: config 8 has an invalid interface number: 11 but max is 0 [ 1439.677497][ T1324] usb 7-1: config 8 has no interface number 0 [ 1439.684615][T19544] EXT4-fs (loop2): inline encryption not supported [ 1439.697494][T19543] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1439.707359][ T4762] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1439.735888][T19544] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1439.748277][ T1324] usb 7-1: config 8 interface 11 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1439.755772][ T4762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.840432][T19544] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 1439.840432][T19544] [ 1439.899459][ T4762] usb 6-1: config 0 descriptor?? [ 1439.962713][ T4762] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.120/input/input94 [ 1440.090033][ T1324] usb 7-1: string descriptor 0 read error: -22 [ 1440.117651][ T1324] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=c3.96 [ 1440.127988][T19544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3718'. [ 1440.157330][ T1324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.166280][ T26] audit: type=1326 audit(2000000359.000:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.0.3719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b092e59 code=0x7ffc0000 [ 1440.422124][T19550] loop0: detected capacity change from 0 to 40427 [ 1440.431127][ T26] audit: type=1326 audit(2000000359.000:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.0.3719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b092e59 code=0x7ffc0000 [ 1440.455818][ T26] audit: type=1326 audit(2000000359.030:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.0.3719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f214b092e59 code=0x7ffc0000 [ 1440.509701][T19550] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1440.517782][T19550] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1440.529315][T19550] F2FS-fs (loop0): invalid crc value [ 1440.537042][ T26] audit: type=1326 audit(2000000359.030:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.0.3719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b092e59 code=0x7ffc0000 [ 1440.568335][ T26] audit: type=1326 audit(2000000359.030:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.0.3719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b092e59 code=0x7ffc0000 [ 1440.616815][T19550] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1440.657182][T19550] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1440.664455][T19550] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1440.828941][ T26] audit: type=1326 audit(2000000359.050:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.0.3719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f214b092e59 code=0x7ffc0000 [ 1440.863585][ T26] audit: type=1326 audit(2000000359.050:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.0.3719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b092e59 code=0x7ffc0000 [ 1441.842584][T19562] syz.1.3720 (19562): drop_caches: 2 [ 1441.873609][ T26] audit: type=1326 audit(2000000359.050:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.0.3719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b092e59 code=0x7ffc0000 [ 1441.924385][ T4762] usb 7-1: USB disconnect, device number 6 [ 1441.961056][ T23] usb 6-1: USB disconnect, device number 22 [ 1442.141660][ T26] audit: type=1326 audit(2000000359.050:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.0.3719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f214b092e59 code=0x7ffc0000 [ 1442.300452][ T4235] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 1442.316857][T19574] loop5: detected capacity change from 0 to 1024 [ 1442.369455][ T26] audit: type=1326 audit(2000000359.050:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19549 comm="syz.0.3719" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b092e59 code=0x7ffc0000 [ 1442.642535][T19580] loop2: detected capacity change from 0 to 256 [ 1442.720870][ T4235] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1442.779849][T19580] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1442.811091][ T4235] usb 2-1: config 8 has an invalid interface number: 11 but max is 0 [ 1442.844267][ T4235] usb 2-1: config 8 has no interface number 0 [ 1442.873902][ T4235] usb 2-1: config 8 interface 11 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1442.876673][T19580] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1443.066360][T19586] FAULT_INJECTION: forcing a failure. [ 1443.066360][T19586] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.086185][T19580] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1443.150886][ T4235] usb 2-1: string descriptor 0 read error: -22 [ 1443.158285][T19586] CPU: 0 PID: 19586 Comm: syz.5.3729 Not tainted syzkaller #0 [ 1443.158441][ T4235] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=c3.96 [ 1443.165794][T19586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1443.165811][T19586] Call Trace: [ 1443.165819][T19586] [ 1443.165829][T19586] dump_stack_lvl+0x188/0x250 [ 1443.165860][T19586] ? show_regs_print_info+0x20/0x20 [ 1443.165882][T19586] ? load_image+0x400/0x400 [ 1443.165905][T19586] ? __might_sleep+0xf0/0xf0 [ 1443.165927][T19586] ? __lock_acquire+0x7d10/0x7d10 [ 1443.165955][T19586] ? tomoyo_get_local_path+0x667/0x7b0 [ 1443.165980][T19586] should_fail+0x38c/0x4c0 [ 1443.166010][T19586] should_failslab+0x5/0x20 [ 1443.209539][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.210387][T19586] slab_pre_alloc_hook+0x51/0xc0 [ 1443.210422][T19586] __kmalloc+0x6b/0x330 [ 1443.210442][T19586] ? tomoyo_encode+0x27e/0x540 [ 1443.210470][T19586] tomoyo_encode+0x27e/0x540 [ 1443.210511][T19586] tomoyo_realpath_from_path+0x5cd/0x610 [ 1443.210547][T19586] tomoyo_path_number_perm+0x242/0x660 [ 1443.210574][T19586] ? verify_lock_unused+0x140/0x140 [ 1443.273075][T19586] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1443.278580][T19586] ? ksys_write+0x1c6/0x260 [ 1443.283185][T19586] security_file_ioctl+0x6c/0xa0 [ 1443.288265][T19586] __se_sys_ioctl+0x48/0x170 [ 1443.292983][T19586] do_syscall_64+0x4c/0xa0 [ 1443.297437][T19586] ? clear_bhb_loop+0x30/0x80 [ 1443.302154][T19586] ? clear_bhb_loop+0x30/0x80 [ 1443.306881][T19586] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1443.312905][T19586] RIP: 0033:0x7f02ec80fe59 [ 1443.317380][T19586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.337201][T19586] RSP: 002b:00007f02eaa48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1443.345665][T19586] RAX: ffffffffffffffda RBX: 00007f02eca89090 RCX: 00007f02ec80fe59 [ 1443.353686][T19586] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1443.361700][T19586] RBP: 00007f02eaa48090 R08: 0000000000000000 R09: 0000000000000000 [ 1443.369716][T19586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1443.377726][T19586] R13: 00007f02eca89128 R14: 00007f02eca89090 R15: 00007ffc597f92c8 [ 1443.385759][T19586] [ 1443.653231][T19589] xt_ecn: cannot match TCP bits for non-tcp packets [ 1445.099615][T19591] binder: 19587:19591 ioctl c0306201 200000000380 returned -14 [ 1445.196597][T19586] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1445.212279][ T4762] usb 2-1: USB disconnect, device number 49 [ 1445.230930][ T4312] udevd[4312]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.11/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1445.276860][T19594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3731'. [ 1445.356028][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 1445.356048][ T26] audit: type=1326 audit(2000000364.190:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.1.3732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1445.460464][ T1324] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1445.661482][ T26] audit: type=1326 audit(2000000364.190:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.1.3732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1445.686288][ T26] audit: type=1326 audit(2000000364.190:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.1.3732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1445.886739][ T26] audit: type=1326 audit(2000000364.190:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.1.3732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1445.933216][ T26] audit: type=1326 audit(2000000364.190:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.1.3732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1446.815304][T19608] syz.5.3734 (19608): drop_caches: 2 [ 1446.832911][ T1324] usb 7-1: device descriptor read/all, error -71 [ 1446.848127][ T26] audit: type=1326 audit(2000000364.210:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.1.3732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1446.872711][ T26] audit: type=1326 audit(2000000364.210:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.1.3732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1446.897193][ T26] audit: type=1326 audit(2000000364.210:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.1.3732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1446.924958][ T26] audit: type=1326 audit(2000000364.220:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.1.3732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1446.994579][ T26] audit: type=1326 audit(2000000364.220:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19596 comm="syz.1.3732" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3464e4be59 code=0x7ffc0000 [ 1447.025649][T19607] loop2: detected capacity change from 0 to 4096 [ 1447.076248][T19610] loop6: detected capacity change from 0 to 1024 [ 1447.249655][T19610] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3736'. [ 1447.274607][T19610] overlayfs: failed to clone upperpath [ 1447.280763][T19393] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 1447.540634][T19616] loop5: detected capacity change from 0 to 32768 [ 1447.554336][T19616] XFS (loop5): sunit and swidth must be specified together [ 1447.770576][T19393] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1447.870504][T19393] usb 2-1: config 8 has an invalid interface number: 11 but max is 0 [ 1447.878656][T19393] usb 2-1: config 8 has no interface number 0 [ 1447.889150][T19393] usb 2-1: config 8 interface 11 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1447.937343][T19629] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3743'. [ 1448.070438][ T4235] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 1448.150552][T19393] usb 2-1: string descriptor 0 read error: -22 [ 1448.158205][T19393] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=c3.96 [ 1448.173448][T19393] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.224099][T19631] loop2: detected capacity change from 0 to 40427 [ 1448.275025][T19631] F2FS-fs (loop2): invalid crc value [ 1448.333073][T19631] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1448.369486][T19636] loop6: detected capacity change from 0 to 64 [ 1448.470703][ T4235] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1448.515206][T19631] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1448.550511][ T4235] usb 6-1: config 8 has an invalid interface number: 11 but max is 0 [ 1448.939422][T19631] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 1449.065175][T19642] device gtp0 entered promiscuous mode [ 1449.656067][T19644] loop6: detected capacity change from 0 to 40427 [ 1449.669485][T19644] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1449.677488][T19644] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1449.720882][T19644] F2FS-fs (loop6): invalid crc value [ 1449.803131][T19644] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1449.861769][T19644] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1449.868901][T19644] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1450.153314][ T4235] usb 6-1: config 8 has no interface number 0 [ 1450.168467][ T4235] usb 6-1: config 8 interface 11 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1451.110608][ T4235] usb 6-1: string descriptor 0 read error: -71 [ 1451.123661][ T4235] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=c3.96 [ 1451.213695][T19654] loop0: detected capacity change from 0 to 4096 [ 1451.410396][ T4235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.439667][T19393] usb 2-1: USB disconnect, device number 50 [ 1451.450509][ T4235] usb 6-1: can't set config #8, error -71 [ 1451.481296][ T4235] usb 6-1: USB disconnect, device number 23 [ 1451.531406][T19654] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1451.564097][T19653] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz.0.3749: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1451.590203][T19653] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.3749: directory missing '..' [ 1451.698931][T19658] loop5: detected capacity change from 0 to 1024 [ 1451.748896][T19658] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3751'. [ 1451.882409][T19664] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1451.930853][T19658] overlayfs: failed to clone upperpath [ 1451.977887][T19664] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1452.237674][T19673] loop5: detected capacity change from 0 to 512 [ 1452.404644][T19677] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3755'. [ 1452.418870][T19676] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1452.484755][T19681] loop5: detected capacity change from 0 to 64 [ 1452.592414][T19687] loop2: detected capacity change from 0 to 64 [ 1452.641384][T19690] loop6: detected capacity change from 0 to 512 [ 1452.765632][T19690] EXT4-fs (loop6): Ignoring removed orlov option [ 1452.779352][T19690] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1452.830640][T19690] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1452.949411][T19690] EXT4-fs (loop6): 1 truncate cleaned up [ 1453.010692][T19690] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,quota,barrier=0x0000000000000003,orlov,test_dummy_encryption=v1,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 1453.147901][T19700] netlink: 'syz.0.3762': attribute type 10 has an invalid length. [ 1453.275214][T19700] team0: Port device netdevsim0 added [ 1453.470616][ T4235] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 1453.642734][T19719] loop5: detected capacity change from 0 to 4096 [ 1453.660575][ T23] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1453.774310][T19723] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1453.940635][ T4235] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1454.050945][ T4235] usb 3-1: config 8 has an invalid interface number: 11 but max is 0 [ 1454.069429][ T4235] usb 3-1: config 8 has no interface number 0 [ 1454.089717][ T4235] usb 3-1: config 8 interface 11 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1454.160578][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1454.220915][T19729] syz.1.3772 (19729): drop_caches: 2 [ 1454.387543][T19733] syz.1.3773 (19733): drop_caches: 2 [ 1454.395401][ T4235] usb 3-1: string descriptor 0 read error: -22 [ 1454.410701][ T4235] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=c3.96 [ 1454.427739][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.483048][ T23] usb 7-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40 [ 1454.534177][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.584869][ T23] usb 7-1: Product: syz [ 1454.603993][ T23] usb 7-1: Manufacturer: syz [ 1454.627344][ T23] usb 7-1: SerialNumber: syz [ 1456.207728][T19748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 1456.412590][ T8173] usb 3-1: USB disconnect, device number 38 [ 1456.422631][T19748] loop0: detected capacity change from 0 to 256 [ 1456.433910][T19751] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3778'. [ 1456.471055][T19748] exfat: Deprecated parameter 'utf8' [ 1456.476423][T19748] exfat: Deprecated parameter 'utf8' [ 1456.481814][T19748] exfat: Deprecated parameter 'namecase' [ 1456.487495][T19748] exfat: Deprecated parameter 'namecase' [ 1456.526507][T19748] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1456.720711][ T23] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1456.740549][ T23] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1456.790680][ T23] usb 7-1: unit 13 not found! [ 1456.830598][ T23] usb 7-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8213 device_setup=1 to enable and report any issues to g@b4.vu [ 1457.015826][T19764] syz.6.3783 (19764): drop_caches: 2 [ 1457.061471][ T23] usb 7-1: USB disconnect, device number 9 [ 1457.157360][T19762] loop2: detected capacity change from 0 to 4096 [ 1457.400826][ T4312] udevd[4312]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1457.690778][ T4228] wlan1: Trigger new scan to find an IBSS to join [ 1457.891053][T16421] ------------[ cut here ]------------ [ 1457.897587][T16421] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x20 [ 1457.908426][T16421] WARNING: CPU: 1 PID: 16421 at net/mac80211/rate.c:376 __rate_control_send_low+0x630/0x880 [ 1457.918662][T16421] Modules linked in: [ 1457.922720][T16421] CPU: 1 PID: 16421 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1457.930425][T16421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1457.940555][T16421] Workqueue: phy15 ieee80211_scan_work [ 1457.946052][T16421] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 1457.952377][T16421] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 8e 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 00 f0 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 1457.972071][T16421] RSP: 0018:ffffc90003aef488 EFLAGS: 00010246 [ 1457.978189][T16421] RAX: 84d21110e2e3dc00 RBX: 000000000000000c RCX: ffff88802be0d940 [ 1457.986283][T16421] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 1457.994314][T16421] RBP: 0000000000000084 R08: ffffc90003aeefa7 R09: 1ffff9200075ddf4 [ 1458.002363][T16421] R10: dffffc0000000000 R11: fffff5200075ddf5 R12: ffff888056b00b68 [ 1458.010405][T16421] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 1458.018410][T16421] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1458.027409][T16421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1458.034073][T16421] CR2: 0000200000019000 CR3: 00000000707bc000 CR4: 00000000003506e0 [ 1458.042153][T16421] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1458.050164][T16421] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1458.058233][T16421] Call Trace: [ 1458.061568][T16421] [ 1458.064520][T16421] rate_control_send_low+0x194/0x790 [ 1458.069822][T16421] rate_control_get_rate+0x207/0x5c0 [ 1458.075186][T16421] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 1458.080967][T16421] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 1458.086971][T16421] ? sta_info_hash_lookup+0x53e/0x580 [ 1458.092486][T16421] ? ieee80211_queue_skb+0xbc/0x2060 [ 1458.097808][T16421] invoke_tx_handlers_late+0xaa/0x16a0 [ 1458.103312][T16421] ? ieee80211_tx_h_select_key+0x12c0/0x17f0 [ 1458.109308][T16421] ? sta_info_get+0x220/0x230 [ 1458.114019][T16421] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 1458.119848][T16421] ieee80211_tx+0x2d4/0x460 [ 1458.124385][T16421] ? ieee80211_skb_resize+0x630/0x630 [ 1458.129804][T16421] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 1458.135678][T16421] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 1458.141896][T16421] ieee80211_scan_work+0x4eb/0x1b40 [ 1458.147131][T16421] process_one_work+0x85f/0x1010 [ 1458.152214][T16421] ? worker_detach_from_pool+0x240/0x240 [ 1458.157860][T16421] ? lockdep_hardirqs_off+0x70/0x100 [ 1458.163188][T16421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1458.168228][T16421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1458.173810][T16421] ? wq_worker_running+0x97/0x170 [ 1458.178869][T16421] worker_thread+0xaa6/0x1290 [ 1458.183602][T16421] kthread+0x436/0x520 [ 1458.187685][T16421] ? rcu_lock_release+0x20/0x20 [ 1458.192570][T16421] ? kthread_blkcg+0xd0/0xd0 [ 1458.197184][T16421] ret_from_fork+0x1f/0x30 [ 1458.201772][T16421] [ 1458.204814][T16421] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1458.212126][T16421] CPU: 1 PID: 16421 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1458.219791][T16421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1458.229856][T16421] Workqueue: phy15 ieee80211_scan_work [ 1458.235337][T16421] Call Trace: [ 1458.238747][T16421] [ 1458.241701][T16421] dump_stack_lvl+0x188/0x250 [ 1458.246391][T16421] ? show_regs_print_info+0x20/0x20 [ 1458.251599][T16421] ? load_image+0x400/0x400 [ 1458.256124][T16421] panic+0x2e5/0x810 [ 1458.260103][T16421] ? bpf_jit_dump+0xd0/0xd0 [ 1458.264624][T16421] ? ret_from_fork+0x1f/0x30 [ 1458.269230][T16421] ? __rate_control_send_low+0x630/0x880 [ 1458.274873][T16421] __warn+0x248/0x2b0 [ 1458.278871][T16421] ? __rate_control_send_low+0x630/0x880 [ 1458.284516][T16421] report_bug+0x1b7/0x2e0 [ 1458.288869][T16421] handle_bug+0x3a/0x70 [ 1458.293065][T16421] exc_invalid_op+0x16/0x40 [ 1458.297584][T16421] asm_exc_invalid_op+0x16/0x20 [ 1458.302441][T16421] RIP: 0010:__rate_control_send_low+0x630/0x880 [ 1458.308702][T16421] Code: 0f b6 04 28 84 c0 0f 85 e9 01 00 00 48 8b 44 24 08 8b 08 48 c7 c7 80 8e 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 00 f0 69 00 <0f> 0b e9 72 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 08 fa ff [ 1458.328320][T16421] RSP: 0018:ffffc90003aef488 EFLAGS: 00010246 [ 1458.334417][T16421] RAX: 84d21110e2e3dc00 RBX: 000000000000000c RCX: ffff88802be0d940 [ 1458.342620][T16421] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 1458.350654][T16421] RBP: 0000000000000084 R08: ffffc90003aeefa7 R09: 1ffff9200075ddf4 [ 1458.358647][T16421] R10: dffffc0000000000 R11: fffff5200075ddf5 R12: ffff888056b00b68 [ 1458.366636][T16421] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 1458.374653][T16421] ? __rate_control_send_low+0x630/0x880 [ 1458.380379][T16421] rate_control_send_low+0x194/0x790 [ 1458.385725][T16421] rate_control_get_rate+0x207/0x5c0 [ 1458.391030][T16421] ieee80211_tx_h_rate_ctrl+0xb02/0x1700 [ 1458.396698][T16421] ? ieee80211_tx_h_select_key+0x17f0/0x17f0 [ 1458.402964][T16421] ? sta_info_hash_lookup+0x53e/0x580 [ 1458.408393][T16421] ? ieee80211_queue_skb+0xbc/0x2060 [ 1458.413705][T16421] invoke_tx_handlers_late+0xaa/0x16a0 [ 1458.419178][T16421] ? ieee80211_tx_h_select_key+0x12c0/0x17f0 [ 1458.425179][T16421] ? sta_info_get+0x220/0x230 [ 1458.429882][T16421] ? invoke_tx_handlers_early+0xa11/0x1d10 [ 1458.435733][T16421] ieee80211_tx+0x2d4/0x460 [ 1458.440257][T16421] ? ieee80211_skb_resize+0x630/0x630 [ 1458.445689][T16421] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 1458.451521][T16421] ieee80211_scan_state_send_probe+0x526/0x8a0 [ 1458.457729][T16421] ieee80211_scan_work+0x4eb/0x1b40 [ 1458.462977][T16421] process_one_work+0x85f/0x1010 [ 1458.467960][T16421] ? worker_detach_from_pool+0x240/0x240 [ 1458.473648][T16421] ? lockdep_hardirqs_off+0x70/0x100 [ 1458.478954][T16421] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1458.483994][T16421] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1458.489556][T16421] ? wq_worker_running+0x97/0x170 [ 1458.494610][T16421] worker_thread+0xaa6/0x1290 [ 1458.499322][T16421] kthread+0x436/0x520 [ 1458.503412][T16421] ? rcu_lock_release+0x20/0x20 [ 1458.508319][T16421] ? kthread_blkcg+0xd0/0xd0 [ 1458.512938][T16421] ret_from_fork+0x1f/0x30 [ 1458.517383][T16421] [ 1458.520679][T16421] Kernel Offset: disabled [ 1458.536451][T16421] Rebooting in 86400 seconds..