last executing test programs:

6m6.023604446s ago: executing program 32 (id=135):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000010800"], 0x6c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000003010104000000000000002002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x4048000)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00040000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r5, @ANYBLOB="cabef996840e5d3c118491cb8f55f8b0ceb20f885d429e269046c4e30218b214f1468ce4a590f5251bd67c00a60000b75bbdb96a3a8fc2685d6d6d58ae82637d1a422c84fc60dc951d37612ab8b9b3a432308f9f4ffc5e1837031e9ab216df792f359434efc64c51e3937a4ebe704c3e8d7c0a"], 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

5m44.286009534s ago: executing program 33 (id=368):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0xffffffffffffffff) (async)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffe22)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)="554e3a1e08bc799ee0062a76fe4bab0bb40eb0deeeec5b557b36c7e16d43815437c8352a0e1ca326dd8e57f25a1b84e81b555bf26f04b1247a2ea3e41b5ecc946bcbd85150b6d2a302f33859ef5203aa689436f15f915cb361c08c1395e4443342ecb8f9d11f260000000009000000000000000000000049d1cf5146d8a71dcecbb9991029cc55d52d2ecdc560b4356a69e2d23bd691b328ef61ed3e8c1c39cbe18f31e5542ea3ea72be40f932f1d6393445608f21b9c33cb0a11d13ddcbeddaae4fba20dcef761af934b4dcf56db9888643915527d1a2328ebfdddb9d8a530640b906f7057eb08412bcf302fcd8017de4fb4d", 0x1}], 0x10000000000002ad}, 0x2004c041)
open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) (async)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
creat(&(0x7f0000000080)='./file0\x00', 0x6a) (async)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x6a)
close(r6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x6, 0x1, 0x7, 0x7fffffff}, {0x5, 0xff, 0x5, 0xff}, {0xdaa1, 0x8, 0x7, 0x1}]})
r7 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB='\x00\x00'])
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0xfffffff7, 0x4)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x1, 0x20000000}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x7, 0x1, 0x20000000}]}, 0x10)
syz_emit_ethernet(0x35d, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x1000)
renameat2(r8, &(0x7f0000000140)='./file0\x00', r8, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) (async)
renameat2(r8, &(0x7f0000000140)='./file0\x00', r8, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
epoll_create1(0x0) (async)
epoll_create1(0x0)
pipe(&(0x7f0000000180))

5m21.289279993s ago: executing program 34 (id=576):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./bus\x00', 0x180c850, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x5}}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@numtail}, {@shortname_mixed}, {@fat=@discard}, {@numtail}, {@utf8no}, {@utf8no}, {@utf8}]}, 0x1, 0x371, &(0x7f0000002980)="$eJzs3U9oHNUfAPDvdvK30CaHH5SfIIzeBA39gwfFQ0pJobgXlaXqQVxsqpKNhSwupodu40U8Ch4VBC/iQQ8eehZBEW8evFpBq+JBeytYfLK7s7uz3U0aKWkNfj6H4Zvve2/ee5OX7GSSfXlxOdbOTcf569evxdxcJaaWTy3HjUosRhZ9l2PczIQcALA/3Egp/kg9u2xS2eMhAQB7rPv6//KhUubNL3eqn7z6A8C+V/z8P79Tnbnx1E9PdI4X9m5cAMDeGXv+/+BI8czor/qnSn8VAADsV8889/yTJ6sRT+f5XMT6W61aqxaPD8tPno9XoxGrcTQW4mZE70ahc6h0j6fPVFeO5nnejp8XoxYRH7RqEevtVq13p3Ay67afjWOxEItF++JuI6WUnf6sunIs74qIy+1u/7FeadWm42DR//cHYzWORx7/G2sfcaa6cjwvTlBb77dvR2wNn1t0xr8UC/HtS3EhGnFu/myk1L+tqa5cOpbnp1J1pH2rNhvnBldhwhMQAAAAAAAAAAAAAAAAAAAAAAC4A0v5wOJg/5s03L9naWlCeXd/nF77Yn+grd7+QGk2RUq/v/FI7e0sRvYHunV/nlZtKg7c26kDAAAAAAAAAAAAAAAAAADAv0ZzcybqjcbqRnPz4lo5aG80Nw9ERCfz2teffDEf43VuE0wVfZSK8iJ1ca2esn7llI3UKYKs03k/8/GVwYjLdWYHs5g4jNntixqNQw/8+N4wc3/WP/NfwzpZTJ5gdsswysH64d6QBpnp4ZS3vWIniuD4ba7q1ZTSdue59MJ4q6hETP3zT9zOQeoEX1175f8nmkce7WY+Tz0PPbxw9uq7H/66Vm90eu5ofDSz0byZ1urFx5MX2/ZBVlo/leIaVsorYWqn5lujmXr23W/P3vfON7vrPZUzr0+ok/Wm8+lGc7NSfKV0i2Z6QSd3S6v5xplsbCVMT1j8dxZMXGxH3l+uX7n0wy+7PU/pm4SNOgAAAAAAAAAAAAAAAAAA4K4ovVe8ULzZd3qnVo89VQRzezs6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALg7hv//vxRsjWV2E/zZjvGi2dWNZsThez1NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+4/4OAAD//5U3aTg=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10b102, 0x8e)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="ffd2", 0x2}], 0x1, 0x5412, 0xfffff801, 0x0)
r1 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1)
open(&(0x7f0000000140)='./bus\x00', 0x10000, 0x156)

3m41.408175208s ago: executing program 1 (id=1480):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010029bd700001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

3m41.35618388s ago: executing program 1 (id=1481):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000008000001"], 0xfdef)

3m41.283458694s ago: executing program 1 (id=1483):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRESOCT=0x0, @ANYRES8=r0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffff0500"], 0x23c}}, 0x8000000)

3m41.260370155s ago: executing program 1 (id=1484):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108)
pipe2$9p(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}})
utimes(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c5442, 0xb2)
r6 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc)
fallocate(r6, 0x0, 0x0, 0x8800000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0)
fallocate(r7, 0x8, 0x4000, 0x8000)
fallocate(r1, 0x0, 0x8, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff})
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="f00000001000130700000000fcdbdf25e00000010000000000000000000000000000000000000000000000000000000000058b6e4e2100020000000032000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d43c0000007f0000010000000000000000000000000000000000000000000000000000000001000000000000000180000000000000fffffffffeffffff1000000000000000018000000000000043050000000000000400000000000000ffffffffffffff7f0b00000000000000fdffffffffffffff000000000e000000000000002bbd700000350000020000005000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2094)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b400000000c960eb87303bdb9d000000730137000000000095000000000000006e5b80b2667cc9708a0362b4dcceaa7a1abff0ff79235f2b0146e9617a74d53b27b1e977ecb183e48d9dd48ea80ca3c9ab14877e6592c118f161455e3e84eb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48)
request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='GPL\x00', 0xfffffffffffffff8)

3m40.856688995s ago: executing program 1 (id=1487):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0)
fadvise64(r0, 0x2, 0x5, 0x5)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 1)

3m31.579298221s ago: executing program 1 (id=1533):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffff050000000000000004000000000000000000010000000000840105"], 0x23c}}, 0x8000000)

3m31.540691482s ago: executing program 35 (id=1533):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffff050000000000000004000000000000000000010000000000840105"], 0x23c}}, 0x8000000)

3m27.941646179s ago: executing program 5 (id=1564):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x115)
clock_adjtime(0x4, &(0x7f00000001c0)={0x10001, 0x1f0d, 0x380000, 0x5, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x7fff, 0x0, 0x9, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x800000007, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x8, 0x0, 0x100, 0x4, 0x2, 0x682, 0x2000005, 0x7, 0x8})
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)

3m26.266333912s ago: executing program 5 (id=1569):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5fa)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000006480))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r3, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x240}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfffffff8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="7e8ac5da175f"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x2000c889)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x7, 0x2}]}, @restrict]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000540)=""/232, 0x45, 0xe8, 0x1}, 0x20)

3m25.937898708s ago: executing program 5 (id=1575):
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt(r1, 0x1, 0x5, &(0x7f0000000000)=""/133, &(0x7f00000000c0)=0x85)
syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="00b8e75c4b6480391953"]}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
socket$inet6(0xa, 0x5, 0x1)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000004280)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=ANY=[@ANYBLOB="4015020000002bd8"]})
syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000900)={0x0, 0x1d, 0xbb, {0xbb, 0x24, "495e4d584ed4b12236cb7b44c2596142a01ec641a5d733804444d9fbc09b2b774e61e21f17b873aea13f28903ac23fa137a3d1dd2af7ea15e16e33ef85169abba06ea64794d33b0e3f0ad8dc8d72b31d3227031b3d26cc627366b959db0ca9dd03b83000e3fbe2f29107283a3e5f05d23bc16a70ecebe3e1a900dc80c20e88a255f8c5ea57d74adfe249b55868dc948e130bf7ed87f0ad8e69b716cc3dbdc42721af18849ba0def555e0fa5cac2eb7a57ddde5f4c38e068a55"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f0000000a40)={0x0, 0xf, 0xce, {0x5, 0xf, 0xce, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x3, 0x8, 0x0, 0x5}, @generic={0x17, 0x10, 0x3, "c4a04307eb732c8a5372c7de27ab12c64838cca7"}, @ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x7ffff01, 0xf, 0x3, [0xc000, 0x0, 0x0]}, @generic={0x8f, 0x10, 0x3, "329d926b16816988214622306ca912bb0710c90be6383c51b50f788a3d95c64381fb2a563a8d6f864ef0f6b5313bff74ef440bfc26d79f6f9311b15714792e76dc80bf210b0580b3041170db4c1bc09a70c9ee46f75d0c67041efbac188e95bd267bd2cbda5d30b2134befa335e7eadc0fcfc2ccbb8f27769444d835df212bfd25070328970bc00831b130ba"}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0xff, 0x4, "cc40f918", "92908835"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0xd1, 0x5, 0x4, 0x3, 0x3}}}, &(0x7f0000001000)={0x84, &(0x7f0000000c00)={0x40, 0x17, 0x22, "53b437c6f355d08edde4f3e31a06e2547a9b301c749a47a516061d8764211b77f58d"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000d40)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000d80)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "58eb"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, '82'}, &(0x7f0000000f00)={0x40, 0x1a, 0x2}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000fc0)={0x40, 0x21, 0x1}})
syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x6b, {0x6b, 0x22, "0195f3548feb662862bac747461e0cf3f2604f090d17acd87527096aa13706c869c00db02c33f5e333ff21f2ab1d57f8f1cd626c7dee73fe734df8e186a1836f280caf00caff59cc4ffc5404824a774b3c9a59a75f63241976216342b53c7fce61cf791afc7d41481b"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x0, 0x7, 0x24, "0904578d", "986cbcd5"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x74, 0x4, 0x8, 0x7, 0xff, 0x7, 0x41f}}}, &(0x7f0000000840)={0x84, &(0x7f00000002c0)={0x20, 0x12, 0xf5, "eda831c5d116db63611d2962a7057c72eeb98712a6d0dec02a2ff9579a39a31a1bc5f91a2f3b0186863fbb7209548abd4c1ab42b1d6d98c2c3817a8d4e209ef18fac04a9682a3518a2778776e76a650c5e8184d784c2b3de8507918963e27c86610dbeb46c2212b06f3f19e889421e5fc96a64284d4903a36cf1147f6348b06d1a7e5e3340e15223476ce9cb955a8a7c1bc6904755ec8b69eb76e3af66a62dc51c192978a5186fa393f640a3a51232d8f9c04e05ea994f7402de31b1c6ab9a1942795c086ef8d0bb72545e0ebbe7e11e92f6a9697083643eebe1ee4e267047db880527fa0ba31255e3c16752614744171927be87e2"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xc8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x1000, 0x80}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000600)={0x40, 0xb, 0x2, "e198"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000680)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x17, 0x6}, &(0x7f0000000700)={0x40, 0x19, 0x2, '\t\x00'}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0xffc0}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x7}})

3m23.337939545s ago: executing program 5 (id=1604):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000009c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x570, &(0x7f0000000440)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf03NyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5GOAYdiJMt64Pn3ZUTUgSGV7DMEwHBqzgOa1/Y9ug5+Zjz4YO0CqBH7WGv8+bXXRmJv49po/2ry2JVRer073oP20zZ++ePO7XSJrV+H2NelDrAjN25GxOl8fvP4n2Tj3+6dbrx4vLWNbQzb/x/op7vp/OeNdvO/3Pr8J9rMfw60yd3d6J7/ufs9aKajdP73Xtv57/rQNT6S1V5ozPlGk4uXyqXTEfFiRJyIetdbH2dW79U7rWud/6VL2n5zLpgdx/38nsf3mS3WihExtsuQH/PgZsQr+XbxJ+v9n7Tp//T5OL/NNo6W7rzaaV33+J+u+k8Rr7Xt/0fdmmx9f3KicT5MNM+Kzf66dfS3Tu33O/60//dvHf940nq/trrzNn7c+0+p07rdnv9jyWeNcjMJrhVrtcXJiLHk482PTz3at1lvbp/Gf+L41uNfu/M/vfj6fJvx3zpyq+Omg9D/szvq/50X7n30xQ+d2t9e/7/ZKJ3IHsnGv/ayc2W7B/ikzx8AAAAAAAAMklxEHIwkV1gv53KFwtr7O47E/ly5Uq2dvFhZujwbjc/Kjsdornmn+1DL+yEms/fDNutTG+rTEXE4Ir4d2deoF2Yq5dl+Bw8AAAAAAAAAAAAAAAAAAAAD4kCHz/+nfh/p99EBT13jiw329PsogH7o+pX/vfimJ2Agdc1/4Lkl/2F4yX8YXvIfhpf8h+El/2F4yX8YXvIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPpUl99eH0mrc9eXV6ar1w9NVuqzhcWlmYKM5XFK4W5SmWuXCrMVBa6/b1ypXJlciqWrk3UStXaRHV55cJCZely7cKlheJc6UJp9H+JCgAAAAAAAAAAAAAAAAAAAJ4t1eWV+WK5XFpU6Fh4PwbiMJ5mgGt2tXt+UKJQ6FC4mXXvzvbq46AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABv8FwAA//97sy6m")
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$unix(r0, 0x0, &(0x7f0000000280))
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
creat(&(0x7f0000000e40)='./file1\x00', 0x18)
socket$inet(0x2, 0x3, 0x2f)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
socket(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x0, 0x4}}}, 0x24}}, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)

3m23.130934795s ago: executing program 5 (id=1610):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400ffb000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94)

3m22.008370291s ago: executing program 5 (id=1621):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x715401, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000004c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d00010000000000fcdbdf2507000400", @ANYRES32=r4, @ANYBLOB="000096000a000200ffffffffffff000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000340)={'gretap0\x00', r4, 0x8000, 0x7800, 0x6, 0x7, {{0x27, 0x4, 0x3, 0x3e, 0x9c, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x92, 0x1, 0xb, [{@loopback}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x9}]}, @end, @ssrr={0x89, 0x1f, 0xdb, [@broadcast, @private=0xa010101, @rand_addr=0x64010102, @remote, @empty, @private=0xa010101, @local]}, @timestamp_prespec={0x44, 0x4c, 0xf1, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff}, {@empty, 0x2}, {@private=0xa010102, 0x1}, {@multicast1, 0xffff}, {@empty, 0x2}, {@local, 0x7}, {@multicast1, 0x80}, {@multicast1, 0x11cb}, {@loopback, 0x4}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000340)={'gretap0\x00', <r5=>r4, 0x8000, 0x7800, 0x6, 0x7, {{0x27, 0x4, 0x3, 0x3e, 0x9c, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x92, 0x1, 0xb, [{@loopback}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x9}]}, @end, @ssrr={0x89, 0x1f, 0xdb, [@broadcast, @private=0xa010101, @rand_addr=0x64010102, @remote, @empty, @private=0xa010101, @local]}, @timestamp_prespec={0x44, 0x4c, 0xf1, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff}, {@empty, 0x2}, {@private=0xa010102, 0x1}, {@multicast1, 0xffff}, {@empty, 0x2}, {@local, 0x7}, {@multicast1, 0x80}, {@multicast1, 0x11cb}, {@loopback, 0x4}]}]}}}}})
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000500)=""/183) (async)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000500)=""/183)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480), 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') (async)
r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000002c0)) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000002c0))
pread64(r8, &(0x7f0000000140)=""/245, 0xf5, 0x4)

3m21.955442833s ago: executing program 36 (id=1621):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x715401, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x240000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000004c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d00010000000000fcdbdf2507000400", @ANYRES32=r4, @ANYBLOB="000096000a000200ffffffffffff000006000500"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000340)={'gretap0\x00', r4, 0x8000, 0x7800, 0x6, 0x7, {{0x27, 0x4, 0x3, 0x3e, 0x9c, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x92, 0x1, 0xb, [{@loopback}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x9}]}, @end, @ssrr={0x89, 0x1f, 0xdb, [@broadcast, @private=0xa010101, @rand_addr=0x64010102, @remote, @empty, @private=0xa010101, @local]}, @timestamp_prespec={0x44, 0x4c, 0xf1, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff}, {@empty, 0x2}, {@private=0xa010102, 0x1}, {@multicast1, 0xffff}, {@empty, 0x2}, {@local, 0x7}, {@multicast1, 0x80}, {@multicast1, 0x11cb}, {@loopback, 0x4}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000340)={'gretap0\x00', <r5=>r4, 0x8000, 0x7800, 0x6, 0x7, {{0x27, 0x4, 0x3, 0x3e, 0x9c, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x1c, 0x92, 0x1, 0xb, [{@loopback}, {@rand_addr=0x64010100, 0x8}, {@broadcast, 0x9}]}, @end, @ssrr={0x89, 0x1f, 0xdb, [@broadcast, @private=0xa010101, @rand_addr=0x64010102, @remote, @empty, @private=0xa010101, @local]}, @timestamp_prespec={0x44, 0x4c, 0xf1, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff}, {@empty, 0x2}, {@private=0xa010102, 0x1}, {@multicast1, 0xffff}, {@empty, 0x2}, {@local, 0x7}, {@multicast1, 0x80}, {@multicast1, 0x11cb}, {@loopback, 0x4}]}]}}}}})
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000500)=""/183) (async)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000500)=""/183)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480), 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') (async)
r8 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00')
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e24, 0x81000, @empty}, 0x1c)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000002c0)) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000002c0))
pread64(r8, &(0x7f0000000140)=""/245, 0xf5, 0x4)

2m59.62398886s ago: executing program 7 (id=1789):
r0 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x21, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x3}}, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt(r1, 0x1, 0x5, &(0x7f0000000000)=""/133, &(0x7f00000000c0)=0x85)
syz_usb_control_io$rtl8150(r0, &(0x7f0000002980)={0x14, 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="00b8e75c4b6480391953"]}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
socket$inet6(0xa, 0x5, 0x1)
syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000900)={0x0, 0x1d, 0xbb, {0xbb, 0x24, "495e4d584ed4b12236cb7b44c2596142a01ec641a5d733804444d9fbc09b2b774e61e21f17b873aea13f28903ac23fa137a3d1dd2af7ea15e16e33ef85169abba06ea64794d33b0e3f0ad8dc8d72b31d3227031b3d26cc627366b959db0ca9dd03b83000e3fbe2f29107283a3e5f05d23bc16a70ecebe3e1a900dc80c20e88a255f8c5ea57d74adfe249b55868dc948e130bf7ed87f0ad8e69b716cc3dbdc42721af18849ba0def555e0fa5cac2eb7a57ddde5f4c38e068a55"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, &(0x7f0000000a40)={0x0, 0xf, 0xce, {0x5, 0xf, 0xce, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x3, 0x8, 0x0, 0x5}, @generic={0x17, 0x10, 0x3, "c4a04307eb732c8a5372c7de27ab12c64838cca7"}, @ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x7ffff01, 0xf, 0x3, [0xc000, 0x0, 0x0]}, @generic={0x8f, 0x10, 0x3, "329d926b16816988214622306ca912bb0710c90be6383c51b50f788a3d95c64381fb2a563a8d6f864ef0f6b5313bff74ef440bfc26d79f6f9311b15714792e76dc80bf210b0580b3041170db4c1bc09a70c9ee46f75d0c67041efbac188e95bd267bd2cbda5d30b2134befa335e7eadc0fcfc2ccbb8f27769444d835df212bfd25070328970bc00831b130ba"}]}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x10, 0xff, 0x4, "cc40f918", "92908835"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0xd1, 0x5, 0x4, 0x3, 0x3}}}, &(0x7f0000001000)={0x84, &(0x7f0000000c00)={0x40, 0x17, 0x22, "53b437c6f355d08edde4f3e31a06e2547a9b301c749a47a516061d8764211b77f58d"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f0000000d40)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000000d80)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "58eb"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0xd}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, '82'}, &(0x7f0000000f00)={0x40, 0x1a, 0x2}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0xb}, &(0x7f0000000fc0)={0x40, 0x21, 0x1}})

2m56.97801991s ago: executing program 7 (id=1811):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100080020b404010000000000000109022400010000200009040000050300010009210600060122070009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220700000009b582aa0a7502"], 0x0}, 0x0)

2m53.842133664s ago: executing program 7 (id=1831):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
syz_create_resource$binfmt(0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
capset(&(0x7f0000000500)={0x20080522}, 0x0)
mknod$loop(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000400000000000000feffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000010b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000757d45ef8500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4}, 0xc)

2m52.636064363s ago: executing program 7 (id=1835):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0x4000})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680))
r1 = eventfd2(0x1, 0x1)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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")
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8c200, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xc)
r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0xfffffffe, 0x81, 0xffffffff})
r7 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x399}, &(0x7f00000001c0), &(0x7f0000000040))
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000001840)={&(0x7f0000002000)}, 0x1)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000100)={'#! ', '', [{0x20, 'hugetlb.2MB.usage_in_bytes\x00'}]}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r8, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x9, 0x98, 0x800, 0x3b, 0x3, 0x8, 0x8}, 0x1c)

2m51.966894386s ago: executing program 7 (id=1837):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
fchdir(r0)
ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000140)="a7fd22dd815437b941c86f976c97afac76516720ccc52498471f7434bb2aa377ca87c930cf7ffc5a1f32028f2002e6abbf4cdca6741d338571506a8d666c4b3dd15e0983ca6c5712468bdb0d1dd9eace9c0a2c87faf9835cfc9d4fa9e14f874843a1aaac216d3832d3c7698b20c0904724cb9a8e01e45c82730167fd99d72fcdbce39e9c87c80dba4f7fd920531afa45dbf3c35447fc3b57fab5aa52c42e3fc6db04e9d10b581ae2d36e573bd164")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x60}}, 0x0)
r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x6c00)
ioctl$TIOCGPTPEER(r3, 0x5441, 0x9)

2m50.965688285s ago: executing program 7 (id=1846):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
syz_create_resource$binfmt(0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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")
capset(&(0x7f0000000500)={0x20080522}, 0x0)
mknod$loop(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000400000000000000feffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000010b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000757d45ef8500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4}, 0xc)

2m50.909344667s ago: executing program 37 (id=1846):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000)
syz_create_resource$binfmt(0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==")
capset(&(0x7f0000000500)={0x20080522}, 0x0)
mknod$loop(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000400000000000000feffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000010b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000757d45ef8500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r4}, 0xc)

1m48.350928169s ago: executing program 6 (id=2557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x80000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x54, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)
r5 = fcntl$dupfd(r1, 0x406, r2)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r5)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48981, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000400)='cmdline\x00', 0x2001, &(0x7f0000000440)={@_ha_fsid={[0x4, 0x1ff]}, {0x0, 0x40, 0x7, 0xfffffffeffffffff}}, 0x2, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x8a4})
clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf4243, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x1, 0x6})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000003010104000000000000000002000003300002802c0001801400030000000000000000000000ffffe000000114000400fe880000000000000061f6ddd0190621d3c221fdff0000000001"], 0x44}}, 0x20000000)
sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x150, 0x1, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CT={0x118, 0xb, 0x0, 0x1, [@CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_DST={0x70, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}, @CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x6}]}}, @CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, @NFQA_EXP={0x24, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000804}, 0x800)
r9 = syz_open_procfs(0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r9, 0x8905, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, r6, 0x1, 0x0, 0x3}, 0x14}}, 0x0)

1m47.623428645s ago: executing program 6 (id=2558):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x24}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x4054)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc07, 0xddf9f000, 0x1, r6, 0x11})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r6, 0x1})
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x4e25d4e0, 0x0, 0x0, r6})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(r7)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01022ebd7000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000250000002a000e002a"], 0x54}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x3d70, r10, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_CSA_IES={0x2158, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x81, 0x8, 0x800, 0x4ec9, 0x4, 0x40, 0x8]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x470, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x9a, 0x2, "52e7be79fe17b74c6d3cd5a2f59bc8f4a344ddfc07b87fa70405be65da4da29c80ef3c6799e043160fb35615281eb815541156fd7b81d086334ebaa1b5296b4bfed3d3748840ce5bd8bd27b33636b4cb221fbc3c2af81789c3f5608acfada80dbe203aba910bcc0ab0226bc11e27dd05995243857ed4e083dc7472446894077a2f0358e6a1a77a4aa7daee742cef5c55864d49657fdf"}, @NL80211_FTM_RESP_ATTR_LCI={0x102, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x72, 0x2, "5f49beaf19ad79e929d769a06aaf522ac9370e228f048e970ce609c63cee681a9a7b9442f2fb22397082fe36e18732f804a61336b7e4eb63c9aefb22827a7e7686e7cc1abea3af6897ff6ecb905821e409891dbe70eefd5d703a4638a1f3fe30ad75ed528afe234c5115748f9955"}, @NL80211_FTM_RESP_ATTR_LCI={0x99, 0x2, "dfc66ec7057cf32f9ac87cb53a5b2b55c4e0b05ef931843da5c5a96a2b309fcc6b8d230d56ce7a5616e4287a5301177ff0b5b00cc9f3fdbb5c555e71d74017fc5d500c2e8e0d7f776ef1b794b32979f00fcf3c6a95aaa6b1d093e11cd08b4b76c3e2ab48662c1eaab0feab588b97826aaad998c75ac0576b51de59f37d1ab3b3f4a81c2fc03c77a4678578aa46e6698de8968abb9b"}, @NL80211_FTM_RESP_ATTR_LCI={0x56, 0x2, "e08e1c86e8a830363cdf8a62394d13bc104a03f2a02d5b0e3eb977a827ee19f4026ddd001217d37fffade3c766cae90262fc5c8db4dd312f933eb8232712decf05c3cf4c4cf90564e3bf0bfe8e5f7084222f"}, @NL80211_FTM_RESP_ATTR_LCI={0xcc, 0x2, "4c83c8134c4f801b3dc09f7f09dff992e3637c9e21db4467fa4e5bd63f80dfccdac1ad6824e47b5a17c9b3ed41b8dd7b9314a6b18c85000c85b13d7a0e97b51efa21bd594caa006bb8e9e0e2ca995a4cf4b8282c44328322c634006a0d62d9584c74b3fcb2c43d3292fd07e01ae9a5311da2f17ca01e36c3b5fef1293a145bf6f1c1a29f1d1934d2a9b4d5a30665b049b283ff8df608443076bf4fd3df199c3c5092988031c5a852e3aa38df817de5ef5ebf57ffab04db4a002ffd27e9ecec91a5f5afedbf4825af"}, @NL80211_FTM_RESP_ATTR_LCI={0x26, 0x2, "e5027880fcaace6b8c84b7b7a550d9a8124500d59c20e193765c1657010455e3c00f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x69, 0x3, "f972ef8dbb29ac693db19b4d5a3de7c5ff9b91d4328d8f4f3bb79ab5b955e171050233026562b280a90e3d6ca061928e246c429589bdd0eb9f62f1e0ff95ceace567461393837242e4a6e5160ecffbebfc95138f3467f6fa40a830182ed6326cc8bca69d0a"}]}, @NL80211_ATTR_PROBE_RESP={0x7e1, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x10, 0xf, [@mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x61}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x7e, 0x80, [@mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @random_vendor={0xdd, 0x6d, "3b6ee65248121f350c3bf1428e1c010cbe1649037e85f82521379771e3a327cad23c413c812e6a6c761d8e0fc4e366389d9d8fe7fba8ee0e2fc0b13aea379654992d685d6bc19f11c9fdea21d50cf85fcbefeee80f9d32d5d0a0aba94302a879ca44349e54aed3eaa8036c722c"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1100, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe3, 0x3, "2b1a3719a0ba7651c35a279b7f417ccb0a122495452fa801784f5972714cdcc4e9cf001782aa384b7cad13332c06fbb51343821e619a17eefcdcd455a144a77f2883eb2ec0e27a381372ea0fd68694941442d00896d3588faa8cc7079cb283bca4085c09a1fb4e4666a087ea709da3b80aa34451d46bfddc138c170fc051eddda9761f3276e9657648393944028873a4b50ad25be2682225ad35cf0f3cb2ba93bfd6ea242cdc8b5c0c476ed591ce6c1d154834e1e7ddda0ec80f9391d7b5d6d16369413594e116f91ea0ff7dc3f73be70144238eca793c357e7009984c3a99"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0xb, 0x7f, [@supported_rates={0x1, 0x5, [{0xb, 0x1}, {0x24, 0x1}, {0x6c, 0x1}, {0x6, 0x1}, {0x48}]}]}, @NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xe8, "014e2436901315135c93b588e0b6064c07c3d9749f5a89c6c8887ed18bbdb128d10b9977e88f516e7ed6b01c0a9025134a7a54dbf2fbd8e20e2e3fb021084ca36a4b3566fa0276aa56123453545734e50fe2d26ab3b5ed4efac2b6962a93860fcdf84b2536a666cb6e78800ec367c722aaeebdb5b4583f913606dff7b0bbb95ef44a9029423ad03c2b1f5d991fa2819c65137ca80e46ca064212dc7a824727d109abd130297564f0f1065adb97532c8eca1997b1034f8e5989478a2290c9ee4b708184796fb4e32976a8ef8d517cb1bb8e11b5c69e746670d904a9d4269d8f7f235ff56cf44a0b49"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40}}, @dsss={0x3, 0x1, 0x99}, @chsw_timing={0x68, 0x4, {0x8, 0x5}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x158, 0x80, [@gcr_ga={0xbd, 0x6}, @fast_bss_trans={0x37, 0x126, {0x6, 0xa, "96a8dcc93a12f19cb5dc3642a9c6cec0", "199658248afa49c3459e92d3124dadb55374e8f733d61d22556fb690482e4e17", "54f678c9daadb2e7a9e5e748010bfc081016f8a891af9687042526d0279f6816", [{0x4, 0x20, "b60a426cefafdb02a27cac2298b359e24895313aa3e6cae71ec799fc3d0688e4"}, {0x4, 0x6, "a3783090dfea"}, {0x2, 0x15, "24d1b392a732ae3ec420db313caf633ba0dd971a6d"}, {0x2, 0x20, "1d5a7f765cfe6ebe7c87dbe3ff89ab173c2d02059dcaca4fecd843f3dff6b677"}, {0x2, 0x18, "1ebda65cabc55d090287b0c4708aa43aa15e138882f9188f"}, {0x4, 0x19, "41e4c1e28eaf0c6c007bc4550eed93adda02a66c377a59904c"}, {0x3, 0x7, "efc13d9fe0f749"}, {0x3, 0xe, "d429a1767a69bccda8a18db1a1d3"}, {0x2, 0x1b, "53797adfc0320338b7c3e002580119cc00817644577bbbfd86242e"}, {0x4, 0x4, "24023059"}]}}, @challenge={0x10, 0x1, 0x8c}, @peer_mgmt={0x75, 0x6, {0x0, 0x3, @void, @val=0x39, @void}}, @gcr_ga={0xbd, 0x6}, @mesh_chsw={0x76, 0x6, {0x5, 0x2, 0x2e, 0x2}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x21}}]}, @NL80211_ATTR_IE={0xed, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1}}, @tim={0x5, 0xde, {0x9, 0x76, 0xae, "4a17fadc7162a1cbcb0d1bf8cb23b9b73e5c73fb01c42026834cebd3f48a5a85f02dc6c049283dbcbd8ffbad60b0ffc4d0878f89eb399913656a17959c6945e27d91a1ce7037326259a6013ea13f009b18f740e8156927b216abcb55422586c98df20333b935d4814e3923752256a32d8c7f4cdcd12dca872d1c0996697e5701a1dd55b8060de4a140e69531b72e1dc035f566f47e72f4afeb6b9f1b3b6dd7fd086fba4af70a123913b672d602de6ba040698faa13edd8b806b9acce5db7faf10b34fdaf15670b330a14ca28aa45aa65d835196c0d45627b542465"}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x2]}]}, @NL80211_ATTR_CSA_IES={0x1b8c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x1, 0x2, 0x4, 0x2, 0x9, 0x2, 0x6, 0x5]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x32, 0xf, [@dsss={0x3, 0x1, 0x9d}, @challenge={0x10, 0x1, 0x52}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x18, {0x1e5, "53a83b0e12c4", @long="9222938e74dcf38f04af8fa800f818f2"}}, @chsw_timing={0x68, 0x4, {0xfff4, 0x40}}]}, @NL80211_ATTR_BEACON_TAIL={0xcd, 0xf, [@measure_req={0x26, 0x65, {0x3d, 0x4, 0x57, "d66233f00deb79a9e278b17ec2a9acaa8043020cdd3c9aa2361ae2a33556d1d20d6518853d11edb4b442efd15d19c8bca0a8476a8fa24c95443ab90ddad8578f40f6651010efcb7d83420735f2bb699e11e5aba47b9976c9d1d3219d6ae3f44e91d9"}}, @measure_req={0x26, 0x60, {0x4, 0x6, 0x7f, "30e64d8129808869f3ac441d49f0a46b3edef8b8a5bdb78bb30befefd66d9e8d299b252b1682567389192d1fe4522386d8bac1a3a628277ccad295f6c992c074f2f8308fe456297c0327b9dc77b6513e2503a2a30a402ff7e67f00df46"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x25e, 0x7f, [@perr={0x84, 0xe8, {0x8, 0xe, [{{0x0, 0x1}, @broadcast, 0x9, @value, 0x2e}, {{0x0, 0x1}, @device_a, 0x80000000, @value=@broadcast, 0x15}, {{}, @broadcast, 0xa, @void, 0x1c}, {{}, @device_b, 0x101, @void, 0x23}, {{0x0, 0x1}, @device_b, 0x0, @value=@device_b, 0xd}, {{}, @device_a, 0x5, @void, 0x33}, {{0x0, 0x1}, @device_a, 0xd, @value=@device_b, 0x1}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x4}, {{0x0, 0x1}, @device_b, 0x5, @value=@device_b, 0x14}, {{}, @device_b, 0x7, @void, 0x1f}, {{0x0, 0x1}, @device_a, 0x200, @value=@broadcast, 0xa}, {{}, @device_b, 0x5f, @void, 0x1b}, {{0x0, 0x1}, @device_a, 0x3, @value=@device_b, 0x17}, {{}, @device_b, 0x200, @void, 0x8}]}}, @peer_mgmt={0x75, 0x18, {0x1, 0x3, @val=0x67, @val=0x2b, @val="af4267ad952bb36436c4a95451d11d23"}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0xff, 0x1, @broadcast, 0x1, 0x2, 0x80000001}}, @random={0x0, 0xab, "70522d8ac627ba7f4ab67ef248ac9bcde816fa9dd8887c43f6e48f447f3d74ffdc28e75c8e84fdbe6e6877284bdff2d6874ee9ae16e6ce2744fe3e0757fda5c142a1255632c0feb0b4e8f37019daacfb2ee2f8049774132af03eb5e341105246eca08ca02f0108cc3db3c9549a0bb2e3b4b26938d5b562fad781fe5fcbd0db10d749d2a56f5516eb03d3137bdf4b2832bd10742bb0a47b05fb65a70d1a33726928512394f0f279ada4e3b4"}, @random_vendor={0xdd, 0x8d, "302db7dc7be2e4675ad56ffe1faf7009eb44d9aaebec3d93d7274c9bdddf49e86c24d2c9d0d9be6ad54e072a1a8802cf58f3742764f531902e03934102eb8bfdd674e464d8d7aaa03854013f607be062ec5a209cf1393f63c3aa341c703eac1b737bb892c839bb170965476e5a62aef9ad35835551a3a02d6383167880741eab10794adbe89d9632e0042b4e26"}, @supported_rates={0x1, 0x1, [{0x1b}]}]}, @NL80211_ATTR_BEACON_HEAD={0x4c5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xd}, @device_b, @device_a, @random="cde66cc74399", {0xc, 0xffb}}, 0x40000000, @random=0x8, 0x808, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x60}, {0x60}, {0x36}]}, @void, @val={0x4, 0x6, {0x4, 0x3, 0x4, 0xf}}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xa, 0x6, 0x36, 0x3}}, [{0xdd, 0x9a, "f152208c2892ac6398f01de55dba3ed1b995f553f166b1a05e58f568d42fe75042bcca7e3304b600caca58498efb52a3e15e87c5b7b5e04e3b41812d6bdc6ca48f52f3e92ded4d25171412ee8e64a54513cb5e2573f8d65f4c48dd1d3586426b7e371f17e7f41fa7948ac82a8cad3e1dff05e6474d23e0c720c19cf43dd3f2ff345a788b3eaafcac78199b2e3b007d526a5111ceabbb9860a169"}, {0xdd, 0xa3, "f688080247299d9c38328913a9e80d32827aadf6b87a5dd8b8c3db8e2f3f627934ea1ececd5aa07350da83a77e307cc4dd5ee344d97d9565c7170c78712210c4db436cca771fb276d6fd5d76882bfba9a7d3377219da799825c07d5abaf95f9d81a2458968c1b259c2afb1bf4177e952b91d71276151403c989b97a7729b08d29a4e16f80531d3333a4f1dc53022c541929abc9f4ae7e40635d30ff43ef2bc3ebf8b81"}, {0xdd, 0x3b, "89b142b3b7c31fa55904167ca5f8909253650e4f3a8038b00427cdc769f048e8cf631f1449db05dba557f09d4bd1c5a6797996edcddc18e01acd2d"}, {0xdd, 0xa4, "157e67bb6ccef1406b9d8491d405d2045fa89ecd2b049562851c3060c38cd97de4b75cefc7978f1034d7771cc92a09a826e6712276e4a7579f5d0dce0c8b9b04f88660c99ffb5c9025de8e57bbfadb1f32c026aa4941a53526a34a2bef04b1b70b2d3b880426df00b71c579a1b29a2a3f6f97d3805bbc34d7e2339632cad4cfbebb082ea2ec750301c042b41f012bcd6d54106daf9b47b7803309fe43b2775f15dfb497c"}, {0xdd, 0xed, "e712c722355360f2222f9dbba85ef3c7d4952a261d73084df00bc8d9331a673ce4bfec81e5d6a5108d4b9b5a4d31d53d52318f7a0f1c686df8191dbae51272e82a9d1e0ebf669e80ffe59cd93615c072a2d06dafd43f41e0089b43d97d3096b79834616e1520d0bb0027db351c9bbb0932c1980961fd799525f749d68c1b511caa7574aa950609a0a5dc0a2a54c626e3d8ed520dfd5f35a840c83dce65421d793120c9e9ba0c298aa1ea3fd383a9661b1e2d1a1c6149ba2e3697beffd1a7f6b9bed155df4ba9416e03c9d9d9f62065c748194cf94e23232beacc9496b66b8fce6d368b56bcdddaa3047549883a"}, {0xdd, 0x88, "7f707e7e602b0fe18a3176b456b47c5bfaa87ff47c431f6b4e6ff260109344b2340a238bfd78c02b6942e11491a5bb6950ff91d4cef0ab7b67cb8561fff497c2f6de1e8903871b2e784ffdf41dfce3957eca1be2342d8e90ce49595a5381a91a5ac6a6f0a80e7c968631b8cf14853385a3c595af426efbe12bef804a0f513f8af68af1a02ea1a178"}, {0xdd, 0xd9, "8c78cf527e29d81b9d20dda37226b74bafe4dc55d1545a799c775d70f9e88dab6e49680f01e8b392a9fd9baa066de742b764530ffa91113a971695aecaa01f52fa3f529ba786bcb2abf1671cbe8ede358b2ad53c583fdb02b5a3d783bf53ba25c9a08eaf75fb209069c3782ccc52d13eb70c9b12e66dca445a624779de9b8bd51227360b9a7c5efed6395a072e134b5721fe975ab2829ef3abe380f4d6767caa7a65377344695061bea6271a632263c01a194d6909e77439f4007b3da666174d7090c744c8defa09607a1644f103b955d8edd2785b98ae69ff"}]}}, @NL80211_ATTR_IE={0x4}], @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x1ba, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x677, 0x91, "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"}], @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x282, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7791}, @broadcast, @device_a, @initial, {0x4, 0x6}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x4, @random=0x2, 0x846, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x30, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x24, 0x1}, {0xb, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0x24, 0x1}]}, @val={0x3, 0x1, 0x84}, @void, @val={0x6, 0x2, 0xf58e}, @val={0x5, 0x86, {0x7, 0x5b, 0x8, "f84fdd87903e096e81d1de091d4e3ac5714356edadb42c5139a7cf5f2a90806b52f9e0c9f6ae2979165092870fe2232de43a189f4e70c8f05494225b643810d749b715325483ead3381a374b99af765dc95ed22cf2f6a6c579f966a5d21c7b8b62e3dd44620806aaf9e8f8de7b9b8300823bb71dca50423bed64edaadb267eda12349e"}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x9, 0x7dd44677bdf1c4ca}}, @val={0x76, 0x6, {0xa5, 0x3, 0x33, 0x8}}, [{0xdd, 0xb4, "868b9ba2598aad35d75df01d22dd71ca9715f75820c014b611d343f5de67992a84205e2b94e6bcd414e68f461ad147df3a18af51548ea39dab76fe8f09fe5d9471f8a5ed71296a0e86bfbfd15e0ef10aa4e0aba1b5c24d4fa71d7716ea91d880f0a4c779b92b5801ff50f55341b2311293e83d954b60992a7c46486b16a03a17126d72082c43ffdd6a7640991bfb9070aa750c2cc0bea7771b084811a04d2f3e97f767b10022386165c6069dac70e961d6fd9edf"}, {0xdd, 0xe4, "cd365b2b1fe7609cb550890adaf007e4009b437068127ec1448efe9877fa5d77324dde78258c39abf45d43eb632f7af9579b024570f56a0b5a9416191dc64722aa7220caba6dc9967b4b13946d862cbe875c63987d4652c4b1d1488afd28ce11f78fcc1d5fd25d5b8dd7116ac166d009879d8f454fb42c1e95e3b1d63512ef0f63f2aecd58e5e3940bc695ae4fef6b8a2592b53e02de10b315b3bb76eebf9dd44994f0b42544aab6a22cd2b34587f1dfa0b05437ee02ef6ac698c6eb0ec042d3eb0cb16b870337790af737ec798d9a3e20bbbb50b6ede87f443561a7377a7099ed8b1ea3"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xc1, 0x80, [@dsss={0x3, 0x1, 0x2}, @dsss={0x3, 0x1, 0x28}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @random={0x7, 0x86, "d8afd68ff7f2419244c50e0d7629f3bdec21ba45ff580298e84e00ff68a34ed911f391ea35e10be56717ab7924d9de3abb9555e5231f74318a6ff9c7ebe66b321721eb45815e5957b635bb94f430fae6ec33be497de97560d9e6e37113b7bd660fb5d1dab02c82c8e7322d317ada77c2114cd3b66774de8e0230a71fd6eb8c96d1ceb30fbd6a"}, @chsw_timing={0x68, 0x4, {0x2, 0x3}}, @cf={0x4, 0x6, {0x6, 0x0, 0x3, 0xc65b}}, @cf={0x4, 0x6, {0xe, 0x3, 0x2, 0xffcc}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x71, 0x30}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x14f, 0x7f, [@preq={0x82, 0x7d, {{0x1}, 0x0, 0x6, 0x3, @device_b, 0x80, @void, 0x4, 0x7fffffff, 0x9, [{{}, @device_b, 0x36}, {{0x1, 0x0, 0x1}, @broadcast, 0x7ff}, {{0x1}, @device_a, 0xf}, {{0x1}, @device_a, 0x2}, {{0x1, 0x0, 0x1}, @device_b}, {{0x1}, @broadcast, 0x1e}, {{0x1}, @device_a, 0xc7c}, {{0x1, 0x0, 0x1}, @device_b, 0x4}, {{}, @device_a, 0x81}]}}, @random={0x53, 0xc4, "43fe437431fda0bd2c046f04e109979ff4de69ed56dd49d0f677ac9257ca9ed6bb2869695f30abb2c80eb7352e130f617035ac5665fa41848b649c1a6cba9bc6d3e20cbdc70a974723b31794da49eb942c2d08222e4b5d197c31f314e3d9f6832012441fd74f0cfdf9839c4490b7622bc6fdc8fb6216cad29b57f582f2c31ff69f8f76510700429c6c410248f77d6d6d1f7b33848b813cc14ac4c459d7e8d78d5f3632776d79b2625961b1f5adb2933d5a1bf81355de025fef7d0a120d4065d4e819b7d2"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @dsss={0x3, 0x1, 0x78}]}, @NL80211_ATTR_PROBE_RESP={0x675, 0x91, "a923facc84da102348b52e55ec963a88b9a413a5b34b41b993c3dae030c9b3a628fd609bb0372e2b58bec26074f37ff8d11e3ae1f2f79076ae2510d7e359038aeaab18abbcad69a3da68d0a23672aa51cdedca95c8b49894f07534a201800982407a8be1d4971e3773eb22a31d1e6c589200430be0aee5dd297e26adae0089c718302e7cade6e41a85781fd651f2e55a85632cfd7a9240ddd65dc11013295b165a681a643c01522d66c0966b335ca67ed623ffc981a80013f390e722631535712c313f822022973ec99f86abb884e01a2086e2930b52fce9fec94c22c33bbb8e0503dd3835e6be438b8e75a23202da9ad3fe5f68d11dcc5a5a686a9b2b1990d51510881bda2fa70b86c91aade08cb8de5b94eb1613e4b84101cde1dfb8dd549da3556315f8d8852ee7818a31c6fc6edf7d7aa8708a753071cc7890aea790fece49b6026db5051b949e24a87250aed22d9ecafc3472610ca971556e836cab7491fe63eb45fcd11cd9a6e973d1252dcd8e21cadfee5a987bfe6cd22f6e033f04fdfca324888c98f2e3209eaf244d6c2d8e361c1138134cdbc28372cffc2022e95d0717baf69c504e69463fbdf2bcc6f16ace90962d749e7288d9bd2690acb7e80a1af190ba65487ce220b157f1baaa39e889c00b896eb44fc446ebcdd208d101120e356abb898f720f2d1ea09b2ec0343f2a4993959b60adbb0b87f18b6d059d318f55f12388c8bd5bd0ac6f6bdec785d1d85e080588474e223e0a559be9a1d77ca2b46cd3eea043ef74783b5b921a37b64e980316a93533a127fad7683326ebebe98f87e8d65f5e4a289e22d293b498f089cdb3088bce9a9df31d5061905d6e7b509896810e8285545f9faa5a1aa6332d3512089e903d8ab09c80caa49ad8d3f58c8165902589c3d4bc2f33a4628237d61b3784167f1d0fa0093175927d51f6173a4ec7cde67df0b52b5415056fca73b64bd2ac82ab34e53edf7ae2be72c54932e559726bc592d5e674fb6143af180f7b0a5efd70694a25a661465e06f243715119b83db96f53ced53c65c21fc5ee2b86753b33e44eca6c486cef2eb4c58ad78fa845aed096ee8e147ca2f224e8138374558f1f73cb88dbb1ebb8ced3811339b10217e128271f8518c1c5b60d20c9bcf80384487825ea8a42b9c19aff964ea83cb92cd138fd6778bf309c9d096b0dc0beea49f85906a2bab9b3933a4deb238aad0111e88d3732d920660dca31ee493cc9103bafaa66c7c48622417f62386f44d78399280076166b713226b190a009b8516f34f2f00556fa8f4c4dddda346151818d1ea43a1b9bb2adc4b1a4c5414f7e94e23683392ff327610a9ad781b1e35b72193617a853c80d8b28524b07ec3f546afdc447cc03419042b8a46a6483b4160c1e2ee68a095b2d4544106aab7220d1a76e2af051054a1552470b62e241ae4c329e2f32cf349c34b38829e1ea7bb6f4a51f3e73226e097668d1a2329fdbd11e9d65e54984bb486bfb6243aa887dbafcc2720ea150dd77e4cc038f97bede21dccb2d6d3fd20798f9b8615a5cc9c0cb8dd3864dc16c99aa22844621280a0e083e5014dc6c8021c4fe8b6523fe181570f5620b091671d58655172bbba8b4d2c5c6de7e7c0f9d4baab738ff5e9c117c6f25936f86afd135aab8936c098fe4b78cf5a2e0f71cc85064a1232e6e1f718fcc51da4f40263008b639a5cb15123423afcbcf2d78b891bcb4488700b5f4f228e410908421d4a8e6dd78a90bf3f7e6e0bf35e0ec63546d55c7154d71ec48cde6ba8a3244a34566a718fb3776b9a3e8fd69380bf635f8d7cff60040a65c11d1acb56497054bb1dd041adb132e6ae753b0c5e9d9fe92a938b544efea6432e6e2b8eb4d29fc6256b2cfe0eecc42c04a9dccee0c167bafc711a3ab4c2131c6ae5cad09a8510660518d9c74e066a78f0f2153975b3518341e585b28be9f263945101e927c93df334f3809fd75ea4334f67f2c4e22f77aed323e915b9e17dde1c9c97e8ebdc962c6f43588d5ec70f99a5d325f25acdfc040bfac38ad69e82f0a12faf2774be0ebd950226b0b1d54b668bc0b94197a53ec37ce5e63e2d69fb39646007e5f79db0bdc231f59813b6ac880172d616cbb932aad224bbf524faad0bd8497ef9911a415df545ac45056629a4fc67c2e373c1750e9de610159c6c0e91a7fe4377cfe1a42796f28caf6580ada7edec2b407277ecd1cf405a511a504667a72d3930430e69d465fad7a4687a88ece976a96cef86b58e2ec600efd2632ddad6cbdbd9e967a416c00cd5bb8fe942d93a8f00bf93c46813830862ad128688f897a8ad8483d7b74"}]]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3813}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x3d70}, 0x1, 0x0, 0x0, 0x400c0}, 0x4408c)
ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000000180))
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0)

1m47.254439973s ago: executing program 6 (id=2565):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000003000001000000000000000000000000000000fdffffffffffffff050000000000000004000000000000000000010000000000840105"], 0x23c}}, 0x8000000)

1m47.187882957s ago: executing program 6 (id=2566):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
r1 = socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='\xe0\x0e\xb3O\xf1J\xf7N\x1c\\\x10\xecg\xb4\xe9\xae\x15\xe6\xf9\x8e\xee\a(\\)\x8c-Y\xd6\\t\xde\x89\xcf\xb5\b\x8e|\xd0\xf5\xa2Qf\xeb\x8eJ\xd5V\xfa[3\xb4\xac\x00\x00+\x15\xbf\xc3\x16?.\x92x\x177\x03rJ\xb3P}\x84\x85SIV\f\xdd\x93\x00\x12\xaeQ\xf1\xbf\xbdt\x85\xab\xfea\x96\b\xc6\x05\tC\x00~\x01\xb0\x9eH5\x8fB\xd4F\xd5\xd2\xb2\xea\xa2\x99\xcd%\x92:\xc6*\x976\n`\xc71/\xa2\xd1\xa5\xd3\xbfN\x952\x9c\x99Y;\xef\xe1\xdc\xbf\xfb\x1c\x9c\x13\x9d\x9d\xa1;\x00\x1e_\xadg|\xb7q6\x84\b\x80\xa00\xd81U\x1eXw\xa8\x9f{k\x8e\xb4\xaci\x82i2\xa3\xb2Mi\xb2e\xb8,0u\x1c\x82p\xe1K\x05\x8e\xbc\x04\x8d\xdaA\x04gr\x885\x14\x9c\a.j\xbe\xe4\xd9B\x88\x89')
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000700)=""/61, 0x3d}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80)
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x5b, 0x100)
ptrace$ARCH_SHSTK_STATUS(0x1e, 0xffffffffffffffff, &(0x7f0000000080), 0x5005)
socket$inet6(0xa, 0x7af2259f32b31ec7, 0x0)
r3 = memfd_create(&(0x7f0000000000)='\x00', 0x1)
fsync(r3)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000980)={0x0, 0x17, 0x5, "f222d66d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$uac2(r4, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@init_itable}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x555, &(0x7f0000000780)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0)
syz_usb_control_io$uac3(r4, &(0x7f0000000340)={0x14, &(0x7f00000000c0)={0x40, 0xe, 0x27, {0x27, 0x2, "bea94ee92213f8c53cffe9ea041163b46caa3d852d99a6d84ec47a6c496d63df315e29591c"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f0000000680)={0x44, &(0x7f0000000400)={0x40, 0x6, 0x66, "8095b3c1437ee7f3ae5b68fa919c3817c0a4c90b8e2e5ba19ab8677fffa5e37fabffa021572f95b1963b95ae1321a1ebea1a86f3eba69bb428183f828a2a7da49bc6d7de2bb71db50f690edcc1b89ba9ee83c1bb1db63eca965c55f54346049792b0771c0faf"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xa5}, &(0x7f00000004c0)={0x20, 0x81, 0x2, "b936"}, &(0x7f0000000500)={0x20, 0x82, 0x1, "8d"}, &(0x7f0000000540)={0x20, 0x83, 0x3, "0fe1ad"}, &(0x7f0000000600)={0x20, 0x84, 0x4, "97b4fa20"}, &(0x7f0000000640)={0x20, 0x85, 0x3, "cdcf14"}})
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000800)='./file1\x00', 0x1000080, &(0x7f0000000100)=ANY=[@ANYRES64], 0x12, 0x32b, &(0x7f0000001000)="$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")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)

1m44.172703575s ago: executing program 6 (id=2585):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[@cpuid={0x64, 0x18, {0x5000, 0x80}}], 0x18})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0xc0000000, 0x5, 0x4, 0x99f, 0x3, 0x5, 0xfffffffc}, {0x0, 0xffff0002, 0x6, 0xb, 0x2, 0x1, 0x80}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m44.108314788s ago: executing program 6 (id=2586):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000080ff000001000000000000000000000000000000fdffffffffffffff050000000000000004000000000000000000010000000000840105"], 0x23c}}, 0x8000000)

1m44.047747091s ago: executing program 38 (id=2586):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000080ff000001000000000000000000000000000000fdffffffffffffff050000000000000004000000000000000000010000000000840105"], 0x23c}}, 0x8000000)

17.139994214s ago: executing program 9 (id=3647):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="81b6769420e42ceb0ae02db25b9c09dc416fd4b886aee44965891add7b7cfeb1b0cea6ce115182977519ce934b1c92e69beceaf5f7d69afc5dbb2b88bb038cbd6cc0c6c3168cf2b8c6bf6fba02bed6d7a5661b10fd4fcd1d2593fa59309788656b2df1d032597c390326c8f669338a1d9787338e8e592ea83e355760f9cf0ec3143023e8a3309b716d6be6d4e8dd6a03885b69e8f0940f21903544666e84f8775ecd1b54ed9eaca120cc5c936c1e75cf91feab9d923b36bc622ed8b26ec2d9f9b53e5b078597e371cbded7a6c9157b9525e451c7b2315a79a4763fe690c42c0e73ba4476", 0xe4, 0x4004801, &(0x7f00000002c0)={0x11, 0x9, 0x0, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) (async)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r3) (async)
waitid(0x0, 0x0, 0x0, 0x1, 0x0) (async)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="40244000000040065a32d95b30eac1f07427f2ada9cdeecb1d48cd532fc9754f6f4dcb8ccafec4907fffc1d04ccf733d6906cace5eed4dabe52800c651a7aad920d616e8892c"], 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000900)={0x84, 0x0, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x9, 0x1, 0xfb}, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x17, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0})
wait4(r3, 0x0, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000d00)={0x11, 0x10, r8, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
close_range(r0, 0xffffffffffffffff, 0x0)

17.139807554s ago: executing program 9 (id=3648):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010029bd700001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500fe8000000000000000000000000000bb0000000033"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

17.139602404s ago: executing program 9 (id=3649):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0\x00', 0x2200060, 0x0, 0x11, 0x0, &(0x7f0000000200))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=<r3=>0x0)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000180)=r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000380)={0x8, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108)
getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)
ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"})
r5 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68)
fallocate(r5, 0x0, 0x9b1, 0x1001ed)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="040000000000000002004e207f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002004e22ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e246401010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14142f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac141425000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2164010100"/771], 0x310)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
open$dir(&(0x7f0000000100)='./bus\x00', 0x200, 0x145)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x2020850, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2014040, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

17.137754054s ago: executing program 9 (id=3650):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1010002, &(0x7f0000000380)={[{@utf8no}, {@shortname_win95}, {@utf8}, {@uni_xlate}, {@shortname_mixed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@shortname_mixed}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0xa7}}, {@uni_xlate}, {@shortname_lower}, {@utf8no}, {@fat=@gid}, {@shortname_lower}, {@uni_xlate}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@numtail}, {@rodir}, {@fat=@quiet}, {@uni_xlateno}, {@shortname_win95}, {@shortname_win95}]}, 0x1, 0x37f, &(0x7f0000000840)="$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")
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]})
r0 = syz_mount_image$fuse(0x0, 0x0, 0x1400800, 0x0, 0x0, 0x0, 0x0)
execveat(r0, 0x0, 0x0, 0x0, 0x1000)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0)

17.00646806s ago: executing program 9 (id=3651):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010029bd700001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000002b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

16.882186297s ago: executing program 9 (id=3653):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
io_uring_setup(0x3454, &(0x7f0000000080))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00198008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x32, &(0x7f00000019c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xb7}}}}}}}, 0x0)
setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4)
recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xfbffff80}], 0x1, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000040)="9800", 0x2, 0x10008095, 0x0, 0x20)

16.867953007s ago: executing program 39 (id=3653):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200))
io_uring_setup(0x3454, &(0x7f0000000080))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000101010100000000000000000a0000021800018014000180fb0001006401010006000000000000000c00198008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x480c0}, 0x4000000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4)
syz_emit_ethernet(0x32, &(0x7f00000019c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xb7}}}}}}}, 0x0)
setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4)
recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xfbffff80}], 0x1, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r1, &(0x7f0000000040)="9800", 0x2, 0x10008095, 0x0, 0x20)

6.533954477s ago: executing program 0 (id=3791):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000030000fdffffffffffffff0500000000000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff000000000000000000000a000700000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000100000001030000000000000000000009000000ff020000000000000000000000000001000000003200000002000000200100000000000000000000000000010000000000000000000000000300000000000000fc010000000000000000000000000001000000003c00000002"], 0x23c}}, 0x8000000)

6.460033042s ago: executing program 0 (id=3792):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020)

6.347796337s ago: executing program 0 (id=3796):
r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, "", {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000595000/0x3000)=nil, &(0x7f0000384000/0x4000)=nil, 0x3000, 0xa3ea514e3573d27f, 0x2})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000003c0), 0x7, 0x2000)
ioctl$BLKDISCARDZEROES(r3, 0x127c, &(0x7f0000000440))
syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="935fab7d69258fe8dc9e388ce51c14bd63e6d5fd0c12402befaab60d709869c266c39cac276a19aca84eb55ff370f7a75eb8cdde8f8f5c0337f5141c954cd49ed3d170ed6b039e06bcf5c0cbd1aa749a6a940006fface47762c99795f35b695d63c60ec1092c2443747d578f6450d46d89bee6c177e92a78f10290833574996ca93dc089b2abd2ee9ba935a099afac9ba45579972cf7457db6054d83a257333dd8d004e59131c43e87d09250", @ANYBLOB="16905a043576761403203810262947446f21d67e4440b3f07197b3a830b43b9f2dfb3177d0d09e86ff2a0d858a21340920b5128bfe479527c5176b074920a6c68741de63525659d440f0ff3fca235df5cb52a08569e8ccddb099d2234fc78ceef1d2415089cc224e0c5215614a0f29d52bd61a27e57bca18fabc0361d77b605a6860ae02f21205c0c328b67219bf1e4842c5dad9c8b17f6a2d5419ddd8034c159b4461b047376d0d22fb31fdb7790558611011d41186722e4fb81a8a24cd26f2ff3500a2526f46bdb072c3e232453c513cad74ce56f7baebf20941", @ANYBLOB="ec41d16e97b60c7c840de40b65e07b5ec2297f6f900bcb83f6e2b4d19183b0cc3e67cc814a98e80ee7b8d068c3f35596628256351da1b41deeb4d89d8d5d9f139eaa2295948e1ca6744c3de149"], 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="00000001000200000000800000000000b6aa6396a92278f41e1b40fddef109004d8a0c68dd8c24d83c864e369a5e88403114bc102b40897e1ddebc6b84c632"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)
syz_usb_control_io(r2, 0x0, 0x0)

6.136349037s ago: executing program 3 (id=3800):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
sendmmsg$inet(r0, 0x0, 0x0, 0x8800) (async, rerun: 64)
r1 = socket(0x80000000000000a, 0x2, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1a000000002800001800348014f802757e88fd09c2310000000000000000000014"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r3, &(0x7f0000000000)="b563c4dc2f4c", 0x0}, 0x20) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xb}, {0xe, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000)
r4 = socket(0x10, 0x3, 0xfffffffc)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007a000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.020038693s ago: executing program 3 (id=3802):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf980000000000007908000000000f008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

6.019326413s ago: executing program 3 (id=3803):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000040000fdffffffffffffff0500000000000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff000000000000000000000a000700000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000100000001030000000000000000000009000000ff020000000000000000000000000001000000003200000002000000200100000000000000000000000000010000000000000000000000000300000000000000fc010000000000000000000000000001000000003c00000002"], 0x23c}}, 0x8000000)

6.018742073s ago: executing program 3 (id=3804):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f00000000c0))
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x0, 0xc0000000, 0x6, 0x6}}]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000440)=r1}, 0x20)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x84, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])

5.169816825s ago: executing program 8 (id=3810):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}, {@umask={'umask', 0x3d, 0xec}}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x8}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {}]}, 0x1, 0x151f, &(0x7f0000000500)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000002240)=@v2={0x2, @adiantum, 0x1b, '\x00', @auto="72b95ef315caeb402b403ad0223f1745"})
r4 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000300)={0x7, 0xeeee0000, 0x0, r4})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x4, 0x65000, 0x8, r4, 0x1})
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r4})
write$UHID_CREATE2(r0, 0x0, 0x118)

5.054910711s ago: executing program 3 (id=3815):
syz_mount_image$f2fs(&(0x7f00000105c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0063edcea4", @ANYRESDEC], 0x1, 0x105c7, &(0x7f0000020c40)="$eJzs3EtvG1UbB/DHzdvr25YI9bZBjIRAiVRbcZJWZYNSaFSQSBVxWbACx3Yst7Ynip0L3SHBjo/CBvEBWFSw4HuwQyyQ2CGBPDNBSWmlKnXjpPn9pOn/zJlznjnjKpGOHTmAY2sy+fOPUlyMsxExERHnI7J2qTgyC3lci4jXI+LErqNU9P/bcSoizkXExWHxvGapuHTh0eKj32/dvvTjz6/dnZx46/r4nhoYtzcjoruWt7e6eaatPO8X/bXNdpbd+c0i8wvdB8V5mudWcyWrsFXbGVfLcq6Vj0/XNvrDXO3U6sNstVez/rVefsP+ZmunTjbhfm09O280V7Js99MsWw/zdW0X+bA/yOs0inpfZuVjMNjJvL+53cyfZ+1BlvXeoOjP66aN5vYwN4ssbhf1tNPI1rGy75f50Puw3dvYTjab6/122ktuVKq3KtWb5ep62mgOmvPlWrdxcz6ZanWGw8qDZq270ErTVqdZqafd6WSqVa+Xq9Vk6k5zpV3rJdVqZa4yU74xXbSuJ3fvfZp0GsnUMN9t9zYG7U4/WU3Xk3zGdDJbmXt7Onmjmnz81XKy/NHi4tLyJ5/f+eze7aUP3isG/WdZydTszOxsuTpTnq1OvzTPvzSO57/2fNM57krjXgDA0WP/D4yD/b/9fxzY/vf74m4Hvv89cTie/0D2/2f38/9/Zj+TYIf9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsfXryR/ezxqT+fn/i/4LRderEXE1Iq5ExOWI+PsJJuLUnpqXIqJUtJ80/uRja/ipFFmF4ZzTxXEuIhaK469XXvSrAAAAAEfeiadd+O6Xr7+JmBg2s3/eOchVMW7FmzZnRlUve8vnf6Oqdikrtj2iapd3So7ElYg4OfnbiKpdHf6Mnv9iRNWeycSeOLMrSnk89XcGAABwdO3dCYxs9wYAAMCh8+24F8DzevwP6p9tfGnX1OKz4NN5FB8Int1zBgAAABxBpXEvAAAAAHjhsv2/7/8DAACAl1v+/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/sHP3uIkDURzAn2G9y35p0YqPq1CttqTgEDlCypQpktuk4wyRECfIAUiXI0QQYSZSjFBSeCwr6PeTzIwt+OsZqudBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJsey+X8bn1z2zRnu2smz90AAAAAp2zK5byaDA/nP9P13+nS34iYRsQkIsYRcap378fXWuYoIoo0P/X+8qiG+4gqYf+Zb+n4ERH/0/H8p+1vAQAAAM7XejVbRPT30+rlXxw18pyz9FsPcuVVj3y+5EobVWFXmdLGr5FZTCKiHD5lSptGRO/XRaa09Pzsff3aMHgzFIeh91FCcd2oRAAAoAP1TmDfvT10Wg8AAABtuey6ALpRrdem/+KnteC0cpgWBL/XzgAAAIBPqOi6AAAAAKB1Vf9v/z8AAAA4b4f9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTplzO16vZomnOdtdMnrsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADghf15R4EQCIMw2Lu+7zR4/2NJg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf7cnUAIBEEY7Dv/c1rMPyxp0BhEqIKFjxnmYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrA/9ygKA2Ech9/M7rJJvUfYPuzHGWysRI/gBwiBnMEDeCEbK9vgRfQKCjqprSSFz9P8/sUMzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr+ny8MRbRBSR+pkijTdfp/eI+Ii07brR520Wu/OxLe9ztj9Myv7+9LuKiCqKJ/8EAGAYdd88Vutm+ZP7m/uX+59bz9tmMeSjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4snP/rE2EcRzAnyRNtE52EMFJqYggGpNoyZBFodC3EdsYiqlKmsEWl+4uvgTBQcQtL8HB3UUcBP/MBRVcXJQkl/qUFrkOuYT284Hn8stx3D1PhsD3fpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCR7O6Ea+M6F0K4MPevHvj44+nqYa9v+4vnxmN54dX3+JyDUxRDCPfXO62bGa5lll1Oedzm1vaDZqfT6ioUCsVeMeEvKAAAjpViMga5/kuxvzLYl2uE8OfF/vx/JapDyvz/7Nvru/G14vxfyWyFsy1t/i/3Nh6XN7e2r69vNNutduvhUu1WpVq9XVsqD2+nlN1UAQAA4D9KyYjzf75xsP9/JqpDyvx/79PnN/G1CvL/AUfv/094QgAAACfYwsVfP3OH7M+VSuFJs9frVkbbvffV0XYKU00vWdCpZMT5v9CY8twAAACATOzu5Pb1/9eiOqTs/5+9874dn7MQQphP+v83Vh911rJbzsyapd//T3ipAAAATNF8MuL+f3H4/H/+0viYfAjh6uKoTv4GMFX+//Du5fn4WvHz/7XsljiT8vXR55Em/w+PrYcwV89gYgAAABxLp5MxyP9fi/2V7u/nyyXP/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwlx07RmkgiAIAutnNKhZiQGysBLUV7awCFoJ4DVEQbOzTeABPkyPYp1VLa0nhDeTP7oik0ICyCfoezP7PzsD8nWr/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN+anhQ7Oa/iMWjysn339Da6iPg8E8PDeHcrRuS9bsteQvWXs/04o+POigEAAOCfqnJ/XxTFSz0+i1gOU/+/H/laOzdab2Lu52f7/hxz7x9j+/X28WOjQbNPdMNX1zeXh5194XLbm3Pdxhxr0l1Cc0NTpaua8vxuc1qnU+/dTyanKyld/VnFAMBvOMixTfL/UcSjRRYGwJ/Vb0fxqf+vhoutCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAL7wEAAP///r1cWg==")
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
r0 = open(0x0, 0x8000, 0x112)
getdents(r0, &(0x7f0000000000)=""/199, 0xc7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}})

4.966752965s ago: executing program 8 (id=3817):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010029bd700001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000003c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500fe8000000000000000000000000000bb0000000033"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

4.965542955s ago: executing program 4 (id=3818):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[], 0x24, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000240)="09485aa4283e", 0x6, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0)
read(r3, &(0x7f0000000000)=""/149, 0xaa)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x41c7, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x586, 0x0, 0x10000004}]})
setsockopt$inet6_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000480)="1a5e01b037de2602d95bfc47e862a007f692fc56d5810b7e438a277464fd6a660479c898f0762474fd3e731bfaf7da2b3bdc9728bebf4a95e7c48514d2b42a5d9419f4172103eaf18fd882da4f0d3770d22090728a5ba17c1ced70c3cd2acf91649d226a19e5626786a796c6fa6e5c67c5fc1d00ad80b82ef22d52e1686763a65cc14813fd16038e041041a09cc8d607627ef094a01dcbd1fe9eeffc4828c6e23532c70d7077cb35d78939f1e00b28650434c6e3b81247ac65fd4eaa74b38050e004a3ebbc74d7bec3d601bcf131606aed210f44511a71ee214af9f216a50427c666b32d9ac5ca4f73be4c06fb", 0xed)
chdir(&(0x7f00000001c0)='./bus\x00')

4.893067169s ago: executing program 8 (id=3819):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0x101}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xa, 0x0, 0x7fffffff}]})
r3 = socket$unix(0x1, 0x5, 0x0)
dup2(r3, r2)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async)
sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) (async)
recvmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006280)=""/4099, 0x1003}, 0xd8a7}], 0x1, 0x202, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) (async)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async)
sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) (async)
r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
pwrite64(r5, &(0x7f00000010c0)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a3125", 0x3d, 0x20002) (async)
getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc)

4.87669787s ago: executing program 8 (id=3820):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x13)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000700000005000000070000", @ANYBLOB="b1"], 0x50)
syz_usb_connect$uac2(0x0, 0xa6, &(0x7f00000017c0)=ANY=[@ANYBLOB="12011003000000401e04483040000102030109029400030101900e080b0101010b200009040000000101200009240106000a1c00500c240303070339020809008007240c080804090904010000010220000904010101010220000824020103030102102401038101040000004001000080b7090701090800067801082501803304000009040200000102200009040201010102200009b8820910000908050825010003010500"], &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
unshare(0x400)
fchdir(0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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")
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
creat(&(0x7f00000004c0)='./bus\x00', 0x20)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2)

4.66299518s ago: executing program 0 (id=3821):
syz_usb_connect$uac3(0x2, 0xbd, &(0x7f0000000a80)=ANY=[@ANYBLOB="1201010200000040fd0701000000010203010902ab0003017f0006080b0002012030310904000000010130000a2401100a0009000000090401000001023000090401010101023000092402010610000b040a240202010010000303172401050a000000ff000210000000000000090101005309240201f501099f010a240201820203069f4e0905010960"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2a, &(0x7f00000004c0)=@string={0x2a, 0x3, "ba46ec497e91899603255a56d8ac49b0cc4cd3e58897df69110f98d54a8b551602915179fdaefba5"}}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x6c, r1, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @empty, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xff, @private2, 0x2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00')
getdents(r2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x44)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r3, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000140)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29)

3.711929697s ago: executing program 4 (id=3824):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020080ff0000000002000100000000000007000c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x4, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8, 0x400204, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4000, 0x0, 0x2, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}}}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r5=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
eventfd2(0x0, 0x0)
r6 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000100))
r7 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r7, &(0x7f0000000140), 0xfffffffffffffe16)
pselect6(0x40, &(0x7f0000000200)={0x6, 0x330c868c, 0x8, 0xfffffffffffffffa, 0x2, 0x100000001, 0x1840, 0xfffffffffffffffc}, &(0x7f0000000240)={0xa, 0x7052, 0x4, 0xa11, 0xd7, 0xa78, 0x1511, 0x3}, 0x0, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}])

3.04343994s ago: executing program 3 (id=3827):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
write(r2, &(0x7f00000008c0)="bae2bf808214ff98d8d00b4e4aa5b63a86342a471feaedd023fe0d23081a02d33e4a469ab9d700b98dbc637a1ab17ee404dfa6c5d5a144ee59221d4b94680ba508343a208a525cff39a2733191ec729e1ed6ee89970d901cdde9274de2a14d16d4b60efff4a823051100a4766a36baa70307cd088fcc9e7146a60c52282f525d113a20c411358bfa0b288791cc9dba6ba75a160cb7beda4a2a7f1a2fa5c565ff344c6b7550c85aeec24195055e0cb2b5ed37875be4e627ef1027ef44c76edb024b67d2dd316c9025880d70300e9ac5abae459e1de4d6868facadaf5c07042ba04768b47d542ef67510bc6a31e1c671cd366d1060843996078b8bceab4299a1fd7ff0318b010dfc8a95b9163505bdde7f92bccfb94a227d620c7fbf355564d75dadaeb40bfa148575d175ba6b276dd1f08de275305c679ed2ca319a0d0ea310eee868429deb863319197812d62a2961765536e8b81edabf419b3ee6c60e17b9c61353366cb3e11572e94b996053feb7854704a86cd638976f8373557ca455e43463252bff8f4835f05ac57cc3e29031d648a942c4f83823378367ff5ff6157e59ccb6b7236eeca6a5f962d3f79b677fa1d2b8baa374f5aab9ecabd7f024941d73db13ba01090a7544d51c2e1ffc35d383b355c359568623715caadca70f1125419af0a5ec9832a5885c29ac40b3fe2f9f173934bb57eef3c9ab71d1b747554fb403d22cd39f98d2ac6df121c75ea827d1790db6fc7c21f601f75bc9b7d5facd83cf77e4b666e3257fb81ac213d2afccd3cc5e2bab7db075d051cd5c9f860f421e672e6d3c2ffce5f51b45e24a1dcf27de17e47ad0d34fa1ead3fc3892593f29f94f26413603c490f9c7d0682de6f9048ae911615975cee4e8b1349133192bfe71130368238688b67b74631a1a524699d28d86427694f753daf88e009c4d34ed310fea1c7356e5abc256595589f704a69b36b6dd05060f3abd79af70d2eb438b85b3d35d300eabaf51bdf479e07ff1338eba821f0c2a395cd355103df33032c1cd8edcdc5425f4418f18b7c1e85fceeb6f41fbaed2573052cf087659520618fe64ec82ae8484b2ddb50a41762fc3f90b3ceb8b2d10bac688e2d35d35e93639ab72384bebe7690c467f0f678bd75c9aa67bc96d94c98ced73d22c6776c918fe50143b80dc80d97326858cbbff3d66f7dc788b788ef275c5037081e9f025e3becca7cf496f7cddd0da37a4ea323d5037bfbcb61edf8b5980269c788605be92bd56b2399e1d5c6dfb43b65d6c9fb9a1ea1c8c548833c48a255b81ac0f7029be6234823bcf232efdc8116d530b652bc6aeab4367f7a33b4d152646003c2064a0b1cabaef6c2391e71c822409130fc4d0a3c9d2895b3f3468a51b33c512711e36632597b3e582af545f29b698d2d41f8362080977d0a0d48d492cc4f61816b7fedd27b826f81e1cbffed54c31dc6ef4b986bad01da626237a2e6bca61e2329bc4e06de64fa68d371a2f0b5dfe017d321e09bd5fc8fba5416e8d7ea329ec0f9be877dc406b6f592dfb3176cffcd9a82ac7479e674d6f3c346fcd3cd2f65e724693b5ace04bb74c2e8a47717162a3b14fcd0b9045b48545ec9dd4d2d1926da207371dbb8e339bd5456f7e00dfb73a9ad86e5e902311644a9a0ce2cb9483b90c25c8e30984bac1c462c06f1b76c68f5a8ef8e6414c67b6a0f77e9eb2e56a8b9ebe6af0a8fa69a92ea6ffde0eee16696a065da53bb4cb51c5985fcb0434589b4628efcf14ddd5f17ec6bd1f219096e02dc364d036b21df65c16a7a83a2145996f2154719317f49444f6ba380b821e4ca10ebba5795d6f04fe252cfabc4ffba1ae5938450b6da37ad734cf298029bfdac3b28cf86f27696fb2b7707702606e3bf5ae65e0d74b3ba450cb36af1c975aead56e69d4e61d3b1941b15d4e017f46552caf43c5ac8beafcf4c0e64c8247136d8e36409ef2986b79c806f4122a44cf988ce789797ec8919f6daff8e353e2391e45f4a2dd9984fbc8646132e2502d462d04b2d7be73cca3ede4240e3368585083f7721da55c95fc49b43a28c3e09c5fb7b43e4dc48d1095d7327ec859d657cf9cc8eef62aac5f1948358727267b87741c27fcc4b3577552e8ad3393a28261a1f754e8130c5b696509b608eb18a0cea00709ec2698527182412559deb8158e2caac436d000b4fb0f98cf920be07f0cbf3eb042bf865f68ca9295e541ae1ec6620b657ffd021794c9e2af3fdaeb5d453c30f8f915b28f230deb1f0717992d9b33425b79106de94e1cdb79dd14627413af70a2d34c908d0c165a3601b0339a335bb44ae635fe96c932111f6eef5216e32a46085216ad85423ef9b0e335ff7028464ccaaaf146d846c436e1db3c77877dce48b92d6b7e1d04f455f66093a9b24c07ef58cbfa7626c03cdf2153f14b055eb6c3c98a28ca85a74c48773f829a35433f11078249dd0a4295dbc3cf539a2b68c472a3000bb1b8e0faee8ea405270532c20ef4955b54d768d99d83ba165f37061bad1d1dcb1d90162b2a6c7678068e665dfa9501d367e4ba272238a3f8919d7f19cb692f2679fb1ea43d3fcf7119ce967529450de7fb3a2bb9902bf5b146e37661a934554f12dfec8647a96c5efc7bf3256af35cc94b64ad1a6902c6b052bb7334a364b0eaa485dee260d1331620e59260517f5d79c5eefc11148062fc6d8296d40a0e832b406c39440945ef986f7bd5beeef8954a86d4efb2f0b1215a3860df643bfa2f8bc99113ea1401188b580ee168a3b62201529b581e360754ae9528f9a2339e9b91a60111bd31a0079f739219cc44f909291b62f120154f6b52acde04dbccf990fcc7a69ce2038abcb3a67c6486096646dda436b4a95e50c18756554c60c6c1cc54ce217b56bdc191ed7eb7878913203bc227b28d5fdf65953a59a2ee1e1238e2c661777a9159a101fccee86d1ce2b95f5ad3d91466d9c466f5eca143b29c2609c13f708d1467c3be9834a7846eb6914861aa7b44f63c509484ffca1cfb2e561af51cbde7ee3fc2e07fc5e0e81df9d935b09f9f9476b1f3dd14952ca4d110933ee4d92eb98ea6fac1111a33e4a23a8a0c8542d5351cf34820daf5b4b805b7e70e47daa9e2dad1f8c8bb88d49322c0b40b9d7517aeee63f2167aff6cbd520a7703b38f5fb1b35437b78749c884aeec19d39a27703422dca08f5ab657bd5fd49710b7ae5da0ebd1f8846bc2d52550a576ebd6d40e6ad3c4dfc6333a244aac3f37d2c4fba92a0a9fbee36a3aa25c3bb992bb427a8f5e5b7711b2dcf2dd6e4b539d480547cffed5d71ee72f6f9de2ff259582bfd1a30d555529f49b2736addfbfe2c41112b4d303f47eca8efa1f6352a732825e98a8492a9822d91ecf3ac3328cd35c65f2c0a66f63b3c99a1366281790302a81dad6e40927e2ba721d45f9b3872900afabbd43d2b58164f7e32ca1ce161e7b3a1e05e749b99bac07f491958dd690d91e642f5c7dc560a71c56e9da22f914b15aac87c34bdc97a81a76fc083786709faf2253f90ec09708376092cc0fd168f1c8a28b70c633b7332409e09c8ebc6f44140661b43d68cb38fed68b16ab576ae2968c9d0f919cf353bdcba23a604bd501b467e8f87fd4dc6a1f411c8cee636239246054c86011f36d789233458fda552462448b4c8ffb7fb1266f0ba9b2445dc6646739f014244370940d7478aef9b59149666d8611df11dd9a188bbdb74605bf6948c75d3254b50520e4478029137386507f14fe07eb290f58d657c3d652c79684177f2086d4f8ee233d01843b5072f68bf954683daa28df895a8a61dc6ce683d388c0231d971c76509826de3df51fdfbbaaab194f0d7833e0af79004c1e1ef1849aa92598cd59e4a6e772e408791409ce179376020ebd176eeb5f1a0210bc203e4eb7caab029dab9e630463dda20f4ccaf65b1a16c1f5c84e58ee82d718c8f486ea3b7da88689a52eb38e91cd9366b1bc406e78e18964aedc915fc4fa15567276cb15d75c71eb566a8bff6e96666616c88312071c98c97ab74116e131a8aeef4bd278ae292f8bd9677e2c6b7d4a541475c20824c10da9ae336a32c51e25e58c6658d0404af0a64518bf6338fdee18cabb1373d1fdf1381f40c3408239bccfb601dfde6f76199e06023544a216749bcdde531655f7a4bc275ec02001aad0d232c82f07a9bd679ec406bf076a21be31f896885cc3189b61ab7170fb798670777e7863f4d6b171e697031b73ab8c207b83e4454018894c97f4f80c0f8a7538a395e3a5fb9d9de5c82f34b4f412a12c106bcbfb9289802c66948eca04d37afb1e496bcfdea5d4b26dfcbde0ee7c5967f20a5ab546b843082ea5fc188db08be145c05d4303b95478317e25d89a974b6bb40695cac52497f37a22b7fc580e3fff572fb953f3d83ad4ccee8497dda59ea1ecc2f5ad86b516f46889aff394d8c3e82ceaa013d299c0b461677ad5a49311f32799f44e504f15265ac587344b519c60273c2a0fdbd4e3f15fb0b27308cf5d8ee031fa8d2c6d6af5cac4760edef7e7733bff3417432a7a3a145035d238cffb60621c9836b51889cf4439dc927dbeb0277e9b40", 0xcad)
syz_usb_control_io(r1, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20014000000020"], 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB="000bcf00000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)

2.814778491s ago: executing program 0 (id=3835):
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100)
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_pidfd_open(r1, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',\x00'])

2.723173006s ago: executing program 4 (id=3836):
r0 = socket(0x10, 0x803, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180400000000000000000000000000004000d5d50000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x9d, &(0x7f0000000080)=""/157, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
openat(r6, &(0x7f0000000540)='./file1\x00', 0x121143, 0x1db)
prlimit64(0x0, 0x2, &(0x7f0000000040)={0x2000000000033c, 0xffffffffffffffff}, 0x0)
brk(0x5d555cde6007)
splice(r4, 0x0, r4, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
r8 = dup2(r7, r7)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r9})
write(r2, &(0x7f0000000240)="94", 0x1)
vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r1, r5, 0x8f5, 0x0)
r10 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'lo\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32=r11, @ANYBLOB="14000200ff02000000000000000000000000000114000600041a00004a"], 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)
write(r3, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000000003704000000000000e3ff00000000", @ANYRES32=0x0, @ANYBLOB="83040100011c02002000128008000100736974001400028008000300e00000010500040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2005c815}, 0x24008000)

1.987989562s ago: executing program 0 (id=3837):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x4e23, 0x80, 0x7, 0x20, 0x0, 0xe0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x24004000) (async)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@delpolicy={0x5c, 0x14, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x4e23, 0x80, 0x7, 0x20, 0x0, 0xe0}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x5c}}, 0x24004000)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540))
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)={0x40, 0x0, 0x4, "daa6622b"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, &(0x7f0000000480)={0x0, 0x21, 0x8c, {0x8c, 0x8, "5f4285dab24dd87b7f61585cb547a3a0762db30dcdcf34b210b86aeacd5b4a21ee4a10dfb73510cf88d91a4d91166cfcc35d4250a0b87c4278adffe86016c415a1c596970cfdf3f0a9022352b19b404fd2924eb73ebf9d130c57962c4b4a1abb621de7c5a9e1828ebddbb9279c92c86c5b68a1f3b7d78129aa6796469720a865b41fcebb7f263ae9ff68"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f0000000380)={0x0, 0x22, 0x11, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x0, 0x2, 0xa}, @local=@item_4={0x3, 0x2, 0x9, "0745ddb3"}, @local=@item_4={0x3, 0x2, 0x8, "8ef32e81"}, @global=@item_4={0x3, 0x1, 0x1, "0fbf8488"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x165f, 0xff, 0x1, {0x22, 0xf70}}}}, &(0x7f0000000780)={0x2c, &(0x7f00000005c0)={0x0, 0x15, 0xb9, "844dd135af4331e91d77f209b3e2afbd091a822953a60fa44fb2c31e05ce61b28778bb8f9d571d47132aa7e9a92f0bae1ec540942aa450c1d398ce466b60a529d7970dc7cc2e960a845484c01d6d72b3281963ae91c6520eea0faa729cfda8f171bc172cf6fd5513f8023673dd957a191f955f73ab6c0b7e212f18774fea937c6b06a6de47f4a6f31eec302b908b1b6581114d8cc0bae4e91dd139f17d3724a5f49eb06e867137603c5aaa875db07f72bbb674b76b50695fac"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000700)={0x20, 0x1, 0x21, "36a33675c3fd793ed0adbdf691696fbc1660fafce608a71486d49e59ebe79fed86"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x3}})
syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0xa, 0x45, {0x45, 0x7, "5bf67971983d3b3d4ff05e444eda18b911b86af71f16b190481fe974307427f51b6b15f4b0ce893f072167d65e09330fcd4ee42c170bd1a75bde41a98f08b190724da2"}}, &(0x7f00000007c0)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000000400)={0x34, &(0x7f00000001c0)={0x20, 0xe, 0x7d, "130f0f5af59b58c9399a8bc99ae1635e1c6a88866449dab925012be0f2a4de5cf87c41a8909c25f6d4d6a85f9c82df7c5f09c49c77613a38655958083633558fcc23a324a0a27662a554f9a1bb973f51bb841b52e4edeac1f4e0e013d714213998ccbc27c47d4e0bc893032733b3f347f8ae81a25d5849843eda056024"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000300)={0x20, 0x0, 0x69, {0x67, "326ab54ffe11e29b9945931756e0a4523c4cd88ccc3b250881894cc413eb3824d675c7beab0927dcf8be746329390c0ef7a7d71a7de594bda2e71c20e5687339922c3f07ad9b3417d228c0ae3b2c638ad68565c9ddae3a4b290633896b1e10c0bb085b0857f9ed"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x8}})
syz_usb_control_io$sierra_net(r0, &(0x7f0000000440)={0x14, &(0x7f0000000080)={0x40, 0x4, 0xdf, {0xdf, 0x3, "9740542eee321b063346bf9233f9d5b42ec53fa0d90b3f3072901804dd420934d6c1f43854b4b04252f5c388b682d4cee458c23ff8bc7286fc5cf0c0a2e5c2787808dbdc9f1bd22174acf8a797e2632d835d2ba5cec601136a04882784ec756602cf0a145fbbcdaa710e81a42619fa56ad42533e548b33ad97d871188cecd23680399529d7cbcc2941c84920e4071b69c0bbdaf81d50c3f2db344e5d3058ac8f7ab3ad82af07f823f0c20f9e697cf69c7d2271429afe8698dcdae3fa1d91af15a7174e3d5f4d1f53f4cc63ecfa525c4db4c57c35f3bcf922a7349396ac"}}, &(0x7f0000000900)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "63bb49975c66b9450cd9e30a0ff4a28f4b382652e244bd0fb62cd4ca1bf28e586712e3a6f5f3231896d07f3bb10c318c213442c6463d3fcb127cb9f77623c0f75943c80dbe33786b3e9aa63a9b53b9159bfa987946b358b47e226d8562a6db95d9e3142b2727d5fb6ed25b3c2b5590cee8802fdb67aaad41e81daf186bd890ad9637b4c56dd92ee8ae605e7b1b2d58acb59fd202a3eacb5677f5deb8453a5e5bde875626b3f35bd305d4a3627138ff5de7d07400d2ffb2ade659e19f10777218b5c7fd441f6309bab634820441fd15593a8a69e129ece11776757dd82e2c247997f9919b5174f7"}}}, &(0x7f0000000ec0)={0x1c, &(0x7f0000000a00)={0x40, 0x17, 0x1b, "74fb4bb3dcd8166ac5ddc71d2327c5b31c7767bce827ae45080f34"}, &(0x7f0000000a40)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000e80)={0x21, 0x0, 0x1, "98"}})

1.809159471s ago: executing program 4 (id=3838):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000200)=ANY=[], 0x0, 0x1d2, &(0x7f0000000a80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
ftruncate(r2, 0x8800000)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
sendfile(r3, r2, 0x0, 0x558410e9)
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0)
lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f00000004c0)=ANY=[], 0xf, 0x1)

1.590999772s ago: executing program 8 (id=3842):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010029bd700001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044010500fe8000000000000000000000000000bb0000000033"], 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.206024101s ago: executing program 8 (id=3846):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03030800060416000c00452d0024006500feff8090780a010101ac141492c705ffd5bf0400000200000001000304"], 0x2e)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0)
umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]})

1.135884674s ago: executing program 40 (id=3846):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8b101a, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03030800060416000c00452d0024006500feff8090780a010101ac141492c705ffd5bf0400000200000001000304"], 0x2e)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0)
umount2(&(0x7f0000000380)='./file0/../file0\x00', 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]})

887.714987ms ago: executing program 4 (id=3848):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000140)='./file2\x00', 0x2991812, &(0x7f0000000300), 0x1, 0x539, &(0x7f0000000cc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f00000002c0)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) (async, rerun: 64)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) (async, rerun: 64)
chdir(&(0x7f0000000140)='./bus\x00')
unlink(&(0x7f0000000280)='./file1\x00') (async)
poll(&(0x7f0000000100), 0x0, 0x5e5f) (async)
shutdown(r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x0, 0x61, 0x61, 0x0, 0x5f]}}, 0x0, 0x58}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000", @ANYRES32, @ANYBLOB="10000000"], 0x50) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async, rerun: 64)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) (rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x20, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x9, 0xf00, 0x0, 0x0, {}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async, rerun: 64)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) (async, rerun: 64)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async)
madvise(&(0x7f0000c64000/0x4000)=nil, 0x4000, 0x15)

835.853319ms ago: executing program 4 (id=3849):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0)
r1 = gettid()
rt_sigqueueinfo(r1, 0x21, &(0x7f00000002c0))
recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f0000002bc0)=""/128, 0x80}, {&(0x7f0000000500)=""/159, 0x9f}, {&(0x7f0000002f00)=""/268, 0x10c}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000400)=""/60, 0x3c}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1007}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000000, 0x0)

79.979027ms ago: executing program 2 (id=3852):
r0 = syz_open_dev$usbmon(&(0x7f0000001b00), 0x882c, 0x100)
ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000001b80)={0x0, 0xfffffffffffffee0, 0x8})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711873000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

78.565297ms ago: executing program 2 (id=3853):
r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r1, 0x0)
r2 = syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20050080, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=r0, @ANYRES64], 0x1, 0x14ee, &(0x7f0000002400)="$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")
fdatasync(r1)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00')
getdents64(r3, &(0x7f0000000040)=""/53, 0x35)
getdents(r3, 0xffffffffffffffff, 0x7a)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0xfffffffffffffff8, 0x7, 0x76f})

78.492026ms ago: executing program 2 (id=3854):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000078500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

68.962617ms ago: executing program 2 (id=3855):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000ab00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x80ff}, 0x94)

55.694298ms ago: executing program 2 (id=3856):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000010000000000000000000000ff800000fdffffffffffffff0500000000000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b"], 0x23c}}, 0x8000000)

0s ago: executing program 2 (id=3857):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', 0x0, 0x40, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}})
r0 = socket(0x10, 0x803, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e"], 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000140)=0xf, 0x4)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x80002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mount_setattr(0xffffffffffffff9c, 0x0, 0x900, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80080, &(0x7f0000000440)=ANY=[])
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x2}, {0x6}]})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000200)={0x0, 0x42003ff, 0x2b7b2b51, 0xc4d3, 0x65, "df5d393e6922804a0000100001a6e7800600", 0x240240, 0x1fd})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x6)
creat(0x0, 0x17e)
close(r2)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xae8, 0x863, 0x0)

kernel console output (not intermixed with test programs):

  T59] usb usb3-port1: unable to enumerate USB device
[  353.050968][ T5408] usb 9-1: device descriptor read/8, error -71
[  353.169108][ T1455] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[  353.214041][ T5408] usb 9-1: device descriptor read/8, error -71
[  353.324815][  T297] koneplus 0003:1E7D:2D51.0020: unbalanced delimiter at end of report description
[  353.334884][  T297] koneplus 0003:1E7D:2D51.0020: parse failed
[  353.348429][  T297] koneplus: probe of 0003:1E7D:2D51.0020 failed with error -22
[  353.357505][   T28] audit: type=1400 audit(1774676273.784:2990): avc:  denied  { watch watch_reads } for  pid=10270 comm="syz.8.3339" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  353.380374][ T1455] usb 10-1: Using ep0 maxpacket: 16
[  353.394002][ T1455] usb 10-1: unable to get BOS descriptor or descriptor too short
[  353.414105][ T1455] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  353.426840][ T1455] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  353.436035][ T1455] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.444695][ T1455] usb 10-1: Product: 锂덉⮊쳨峘⮢⩚㲡⹨穋쟿霹듢ג鄤楋㗟㶛ﯤ䕊鉩쵓獽ꥰ鯜ί⫉붔舞뷵⃉䋱ﬗ棭뼉珟蓓㹯꿏ᙍ鞡О큙얜텭⾂頞季澩荾㾬冱㌶䵭흚屎㊡伟轜嶈듞聆ᆭኃ照壮ຉҡ
[  353.469222][ T1455] usb 10-1: Manufacturer: ї
[  353.473868][ T1455] usb 10-1: SerialNumber: ᰁ
[  353.570945][  T297] usb 1-1: USB disconnect, device number 35
[  353.602157][   T28] audit: type=1400 audit(1774676274.005:2991): avc:  denied  { getopt } for  pid=10274 comm="syz.8.3340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  353.647923][   T28] audit: type=1400 audit(1774676274.051:2992): avc:  denied  { getopt } for  pid=10278 comm="syz.8.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  353.683353][   T28] audit: type=1400 audit(1774676274.088:2993): avc:  denied  { listen } for  pid=10283 comm="syz.8.3343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  353.710312][ T1455] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  353.740281][ T1455] usb 10-1: USB disconnect, device number 39
[  353.940673][   T28] audit: type=1326 audit(1774676274.328:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10297 comm="syz.2.3350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdad2d9c799 code=0x0
[  354.145676][T10302] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3351'.
[  354.198522][   T59] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  354.294191][T10312] set_capacity_and_notify: 1 callbacks suppressed
[  354.294210][T10312] loop8: detected capacity change from 0 to 256
[  354.312327][T10312] FAT-fs (loop8): Directory bread(block 64) failed
[  354.324324][T10312] FAT-fs (loop8): Directory bread(block 65) failed
[  354.331391][T10312] FAT-fs (loop8): Directory bread(block 66) failed
[  354.338249][T10312] FAT-fs (loop8): Directory bread(block 67) failed
[  354.345290][T10312] FAT-fs (loop8): Directory bread(block 68) failed
[  354.361245][   T59] usb 4-1: device descriptor read/64, error -71
[  354.400330][T10312] FAT-fs (loop8): Directory bread(block 69) failed
[  354.409942][T10314] loop9: detected capacity change from 0 to 16
[  354.439220][T10312] FAT-fs (loop8): Directory bread(block 70) failed
[  354.446150][T10312] FAT-fs (loop8): Directory bread(block 71) failed
[  354.453845][T10312] FAT-fs (loop8): Directory bread(block 72) failed
[  354.463634][T10312] FAT-fs (loop8): Directory bread(block 73) failed
[  354.470941][T10314] erofs: (device loop9): mounted with root inode @ nid 36.
[  354.482355][T10314] syz.9.3355: attempt to access beyond end of device
[  354.482355][T10314] loop9: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  354.516803][T10314] syz.9.3355: attempt to access beyond end of device
[  354.516803][T10314] loop9: rw=524288, sector=16, nr_sectors = 40 limit=16
[  354.530775][T10314] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  354.541915][T10314] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  354.586470][T10314] xt_hashlimit: size too large, truncated to 1048576
[  354.836768][   T28] audit: type=1107 audit(1774676275.140:2995): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  354.917478][T10324] loop8: detected capacity change from 0 to 256
[  355.024471][T10324] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  355.087105][ T1455] usb 10-1: new full-speed USB device number 40 using dummy_hcd
[  355.173045][T10333] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3364'.
[  355.184734][   T59] usb 4-1: device descriptor read/64, error -71
[  355.283310][ T1455] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  355.294967][ T1455] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.304939][ T1455] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  355.318428][ T1455] usb 10-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  355.327721][ T1455] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.336577][ T1455] usb 10-1: config 0 descriptor??
[  355.390504][  T297] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[  355.446239][   T28] audit: type=1107 audit(1774676275.713:2996): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  355.477199][   T59] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  355.579248][  T305] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  355.597963][  T297] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  355.608170][  T297] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  355.618377][  T297] usb 9-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  355.631564][  T297] usb 9-1: config 1 interface 0 has no altsetting 0
[  355.639551][  T297] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  355.648827][  T297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.657065][  T297] usb 9-1: Product: syz
[  355.661408][  T297] usb 9-1: Manufacturer: syz
[  355.666175][  T297] usb 9-1: SerialNumber: syz
[  355.672521][T10326] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  355.679960][T10326] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  355.749934][   T59] usb 4-1: device descriptor read/64, error -71
[  355.792921][  T305] usb 3-1: unable to get BOS descriptor or descriptor too short
[  355.803381][ T1455] cypress 0003:04B4:0001.0021: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.9-1/input0
[  355.805245][  T305] usb 3-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config
[  355.865231][  T305] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  355.878600][  T305] usb 3-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40
[  355.887742][  T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.895889][  T305] usb 3-1: Product: syz
[  355.900157][  T305] usb 3-1: Manufacturer: syz
[  355.904899][  T305] usb 3-1: SerialNumber: syz
[  355.906536][T10326] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  356.073235][   T59] usb 4-1: device descriptor read/64, error -71
[  356.203651][   T59] usb usb4-port1: attempt power cycle
[  356.256104][T10326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.274063][  T305] usb 3-1: unit 2 not found!
[  356.323306][T10326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.362428][  T297] rtl8150 9-1:1.0: couldn't find required endpoints
[  356.369373][  T297] rtl8150: probe of 9-1:1.0 failed with error -5
[  356.384158][  T305] snd-usb-audio: probe of 3-1:1.0 failed with error -71
[  356.392798][  T297] usb 9-1: USB disconnect, device number 47
[  356.395537][  T305] usb 3-1: USB disconnect, device number 85
[  356.420895][ T3303] udevd[3303]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  356.658330][   T59] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  356.691949][   T59] usb 4-1: device descriptor read/8, error -71
[  356.865510][   T59] usb 4-1: device descriptor read/8, error -71
[  356.934247][   T28] audit: type=1326 audit(1774676277.088:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.2.3376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdad2d9c799 code=0x0
[  356.990661][T10377] loop8: detected capacity change from 0 to 512
[  357.007485][T10377] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  357.027985][ T4942] EXT4-fs (loop8): unmounting filesystem.
[  357.099282][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3382'.
[  357.156873][   T59] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  357.189900][   T59] usb 4-1: device descriptor read/8, error -71
[  357.200318][  T305] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  357.352456][   T59] usb 4-1: device descriptor read/8, error -71
[  357.373505][  T305] usb 1-1: device descriptor read/64, error -71
[  357.482440][   T59] usb usb4-port1: unable to enumerate USB device
[  357.550407][  T297] usb 10-1: USB disconnect, device number 40
[  357.566076][T10389] loop9: detected capacity change from 0 to 512
[  357.587583][T10389] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  357.596742][T10389] ext4 filesystem being mounted at /343/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  357.618306][ T5227] EXT4-fs (loop9): unmounting filesystem.
[  357.645651][T10395] loop9: detected capacity change from 0 to 256
[  357.653264][T10395] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  357.666103][  T305] usb 1-1: device descriptor read/64, error -71
[  357.872025][   T59] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  357.958680][  T305] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  357.967296][T10408] loop8: detected capacity change from 0 to 512
[  357.974168][T10408] EXT4-fs: Ignoring removed bh option
[  357.981555][T10408] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  358.003945][T10408] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  358.019362][T10408] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3392: bg 0: block 248: padding at end of block bitmap is not set
[  358.034303][T10408] EXT4-fs error (device loop8): ext4_acquire_dquot:6822: comm syz.8.3392: Failed to acquire dquot type 1
[  358.046563][T10408] EXT4-fs (loop8): 1 truncate cleaned up
[  358.052309][T10408] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  358.067033][   T59] usb 4-1: Using ep0 maxpacket: 16
[  358.100870][T10408] netlink: 'syz.8.3392': attribute type 7 has an invalid length.
[  358.109125][T10408] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.3392: deleted inode referenced: 12
[  358.121244][  T305] usb 1-1: device descriptor read/64, error -71
[  358.132064][  T297] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[  358.213957][ T4942] EXT4-fs (loop8): unmounting filesystem.
[  358.273025][   T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  358.328254][  T297] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  358.338664][  T297] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  358.348938][  T297] usb 10-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  358.362098][  T297] usb 10-1: config 1 interface 0 has no altsetting 0
[  358.382367][  T297] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  358.391629][  T297] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.392102][T10415] loop8: detected capacity change from 0 to 40427
[  358.399802][  T297] usb 10-1: Product: syz
[  358.410674][T10415] F2FS-fs (loop8): Corrupted extension count (64 + 1 > 64)
[  358.412045][  T297] usb 10-1: Manufacturer: syz
[  358.418121][  T305] usb 1-1: device descriptor read/64, error -71
[  358.429350][T10415] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  358.435457][  T297] usb 10-1: SerialNumber: syz
[  358.437635][   T24] usb 3-1: device descriptor read/64, error -71
[  358.449153][T10402] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  358.456612][T10402] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  358.459027][T10415] F2FS-fs (loop8): Image doesn't support compression
[  358.470771][T10415] F2FS-fs (loop8): Unrecognized mount option "fsyocmode=sdrict" or missing value
[  358.565578][  T305] usb usb1-port1: attempt power cycle
[  358.622579][T10417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12643 sclass=netlink_route_socket pid=10417 comm=syz.8.3395
[  358.640876][   T59] usb 4-1: unable to get BOS descriptor or descriptor too short
[  358.660234][   T59] usb 4-1: unable to read config index 0 descriptor/start: -71
[  358.667511][T10424] loop8: detected capacity change from 0 to 512
[  358.671962][   T59] usb 4-1: can't read configurations, error -71
[  358.676563][T10424] EXT4-fs: Ignoring removed i_version option
[  358.690845][T10424] EXT4-fs (loop8): 1 truncate cleaned up
[  358.697062][T10424] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  358.771392][   T24] usb 3-1: device descriptor read/64, error -71
[  358.794740][ T4942] EXT4-fs (loop8): unmounting filesystem.
[  358.869006][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  358.869024][   T28] audit: type=1400 audit(1774676278.878:2998): avc:  denied  { write } for  pid=10438 comm="syz.8.3402" path="socket:[58442]" dev="sockfs" ino=58442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  358.916402][  T297] rtl8150 10-1:1.0: couldn't find required endpoints
[  358.925806][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3402'.
[  358.934852][  T297] rtl8150: probe of 10-1:1.0 failed with error -5
[  358.945774][  T297] usb 10-1: USB disconnect, device number 41
[  359.020618][  T305] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  359.064047][   T24] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  359.072640][  T305] usb 1-1: device descriptor read/8, error -71
[  359.237357][   T24] usb 3-1: device descriptor read/64, error -71
[  359.249440][  T305] usb 1-1: device descriptor read/8, error -71
[  359.483758][   T28] audit: type=1326 audit(1774676279.432:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10448 comm="syz.9.3406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9878b9c799 code=0x0
[  359.529932][   T24] usb 3-1: device descriptor read/64, error -71
[  359.549630][T10451] FAULT_INJECTION: forcing a failure.
[  359.549630][T10451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.551586][  T305] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  359.563279][T10451] CPU: 0 PID: 10451 Comm: syz.9.3407 Tainted: G        W          syzkaller #0
[  359.579843][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  359.590339][T10451] Call Trace:
[  359.593640][T10451]  <TASK>
[  359.596031][  T305] usb 1-1: device descriptor read/8, error -71
[  359.596567][T10451]  __dump_stack+0x21/0x24
[  359.607122][T10451]  dump_stack_lvl+0x110/0x170
[  359.611796][T10451]  ? __cfi_dump_stack_lvl+0x8/0x8
[  359.616835][T10451]  ? __kasan_check_read+0x11/0x20
[  359.621942][T10451]  ? __seccomp_filter+0x47f/0x1af0
[  359.627131][T10451]  dump_stack+0x15/0x24
[  359.631383][T10451]  should_fail_ex+0x3d4/0x520
[  359.636141][T10451]  should_fail+0xb/0x10
[  359.638300][   T59] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  359.640301][T10451]  should_fail_usercopy+0x1a/0x20
[  359.652870][T10451]  _copy_from_user+0x1e/0xc0
[  359.657479][T10451]  do_seccomp+0x375/0xed0
[  359.660002][   T24] usb usb3-port1: attempt power cycle
[  359.661805][T10451]  ? prctl_set_seccomp+0x60/0x60
[  359.672217][T10451]  ? ksys_write+0x1f4/0x250
[  359.676849][T10451]  ? __cfi_ksys_write+0x10/0x10
[  359.681737][T10451]  ? __secure_computing+0xea/0x290
[  359.687038][T10451]  __x64_sys_seccomp+0x7b/0x90
[  359.691886][T10451]  x64_sys_call+0x721/0x9a0
[  359.696385][T10451]  do_syscall_64+0x4c/0xa0
[  359.700852][T10451]  ? clear_bhb_loop+0x30/0x80
[  359.705627][T10451]  ? clear_bhb_loop+0x30/0x80
[  359.710382][T10451]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  359.716272][T10451] RIP: 0033:0x7f9878b9c799
[  359.720681][T10451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.740382][T10451] RSP: 002b:00007f98799c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d
[  359.748830][T10451] RAX: ffffffffffffffda RBX: 00007f9878e15fa0 RCX: 00007f9878b9c799
[  359.756979][T10451] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001
[  359.765148][T10451] RBP: 00007f98799c0090 R08: 0000000000000000 R09: 0000000000000000
[  359.773138][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.781195][T10451] R13: 00007f9878e16038 R14: 00007f9878e15fa0 R15: 00007ffcea38f218
[  359.789270][T10451]  </TASK>
[  359.799565][  T305] usb 1-1: device descriptor read/8, error -71
[  359.815269][   T28] audit: type=1326 audit(1774676279.745:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10452 comm="syz.8.3408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3422d9c799 code=0x0
[  359.838695][   T59] usb 4-1: device descriptor read/64, error -71
[  359.893065][T10463] loop8: detected capacity change from 0 to 256
[  359.909053][T10463] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  359.974313][  T305] usb usb1-port1: unable to enumerate USB device
[  359.981242][T10461] loop9: detected capacity change from 0 to 32768
[  360.136778][   T59] usb 4-1: device descriptor read/64, error -71
[  360.158410][   T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  360.168083][   T28] audit: type=1107 audit(1774676280.068:3001): pid=10460 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  360.215081][   T24] usb 3-1: device descriptor read/8, error -71
[  360.271006][   T28] audit: type=1326 audit(1774676280.114:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10482 comm="syz.9.3416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9878b9c799 code=0x0
[  360.302815][   T59] usb usb4-port1: attempt power cycle
[  360.494358][  T305] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[  360.503159][   T24] usb 3-1: device descriptor read/8, error -71
[  360.624366][ T5408] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  360.690577][  T305] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  360.700838][  T305] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  360.710874][  T305] usb 9-1: config 1 interface 0 has no altsetting 0
[  360.719203][  T305] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  360.728679][  T305] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.736709][  T305] usb 9-1: Product: syz
[  360.740893][  T305] usb 9-1: Manufacturer: syz
[  360.745500][  T305] usb 9-1: SerialNumber: syz
[  360.751312][T10477] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  360.759063][T10477] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  360.776081][   T59] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  360.797745][   T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  360.810116][   T59] usb 4-1: device descriptor read/8, error -71
[  360.819437][ T5408] usb 1-1: Using ep0 maxpacket: 16
[  360.826067][ T5408] usb 1-1: unable to get BOS descriptor or descriptor too short
[  360.834627][ T5408] usb 1-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config
[  360.845003][ T5408] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  360.854167][   T24] usb 3-1: device descriptor read/8, error -71
[  360.862135][ T5408] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  360.872825][ T5408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.881127][ T5408] usb 1-1: Product: syz
[  360.885446][ T5408] usb 1-1: Manufacturer: syz
[  360.890139][ T5408] usb 1-1: SerialNumber: syz
[  360.983121][   T59] usb 4-1: device descriptor read/8, error -71
[  361.015512][   T24] usb 3-1: device descriptor read/8, error -71
[  361.116646][ T5408] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  361.123698][ T5408] usb 1-1: 0:2 : does not exist
[  361.131113][ T5408] usb 1-1: USB disconnect, device number 40
[  361.155428][   T24] usb usb3-port1: unable to enumerate USB device
[  361.208855][T10477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.217591][T10477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.274549][   T59] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  361.294960][T10489] netlink: 388 bytes leftover after parsing attributes in process `syz.9.3421'.
[  361.315758][  T305] rtl8150 9-1:1.0: couldn't reset the device
[  361.322190][  T305] rtl8150: probe of 9-1:1.0 failed with error -5
[  361.329596][   T59] usb 4-1: device descriptor read/8, error -71
[  361.336893][  T305] usb 9-1: USB disconnect, device number 48
[  361.360855][T10495] loop2: detected capacity change from 0 to 256
[  361.370852][T10495] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  361.385544][ T3305] udevd[3305]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  361.490849][T10499] loop2: detected capacity change from 0 to 32768
[  361.503533][   T59] usb 4-1: device descriptor read/8, error -71
[  361.632151][   T24] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[  361.640253][   T59] usb usb4-port1: unable to enumerate USB device
[  361.659607][   T28] audit: type=1107 audit(1774676281.443:3003): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  361.751845][T10511] loop2: detected capacity change from 0 to 256
[  361.854828][T10511] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  361.871897][   T24] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  361.886884][   T24] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.907053][T10513] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.908115][T10516] loop2: detected capacity change from 0 to 2048
[  361.915114][T10513] tipc: Resetting bearer <eth:syzkaller0>
[  361.920671][   T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  361.935867][   T24] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.950332][   T24] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  361.959636][   T24] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  361.967837][   T24] usb 10-1: Product: syz
[  361.972424][   T24] usb 10-1: Manufacturer: syz
[  361.978986][T10516] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  361.979189][   T24] cdc_wdm 10-1:1.0: skipping garbage
[  361.987654][T10516] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  361.993499][   T24] cdc_wdm 10-1:1.0: skipping garbage
[  362.009596][T10512] tipc: Disabling bearer <eth:syzkaller0>
[  362.010264][   T24] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  362.033094][  T297] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  362.035677][T10516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3433'.
[  362.060956][ T6330] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /270/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  362.084273][   T28] audit: type=1400 audit(1774676281.840:3004): avc:  denied  { unlink } for  pid=6330 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  362.108609][ T6330] EXT4-fs (loop2): unmounting filesystem.
[  362.121984][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3435'.
[  362.139688][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3435'.
[  362.149038][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3435'.
[  362.158283][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3435'.
[  362.168048][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3435'.
[  362.177200][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3435'.
[  362.205700][T10527] loop8: detected capacity change from 0 to 16
[  362.225710][T10527] erofs: (device loop8): mounted with root inode @ nid 36.
[  362.234253][  T297] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  362.239364][T10493] input: syz1 as /devices/virtual/input/input40
[  362.244687][  T297] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  362.270723][  T297] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  362.287959][  T305] usb 10-1: USB disconnect, device number 42
[  362.292396][  T297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.309383][  T297] usb 1-1: config 0 descriptor??
[  362.338561][T10533] loop8: detected capacity change from 0 to 1024
[  362.348247][T10524] loop2: detected capacity change from 0 to 40427
[  362.356241][T10533] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  362.367770][T10524] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  362.374841][T10524] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  362.382976][T10533] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  362.383835][T10524] F2FS-fs (loop2): invalid crc value
[  362.402310][T10533] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3850: comm syz.8.3439: Allocating blocks 497-513 which overlap fs metadata
[  362.402654][T10524] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  362.417462][T10532] EXT4-fs (loop8): pa ffff8881161eb2a0: logic 80, phys. 209, len 19
[  362.435672][T10532] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1
[  362.448318][T10524] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  362.456544][T10524] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  362.469538][ T4942] EXT4-fs (loop8): unmounting filesystem.
[  362.501625][   T28] audit: type=1400 audit(1774676282.228:3005): avc:  denied  { shutdown } for  pid=10544 comm="syz.8.3442" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  362.529740][T10547] FAULT_INJECTION: forcing a failure.
[  362.529740][T10547] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.543073][T10547] CPU: 1 PID: 10547 Comm: syz.8.3443 Tainted: G        W          syzkaller #0
[  362.552048][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  362.562243][T10547] Call Trace:
[  362.565528][T10547]  <TASK>
[  362.568651][T10547]  __dump_stack+0x21/0x24
[  362.573081][T10547]  dump_stack_lvl+0x110/0x170
[  362.577773][T10547]  ? __cfi_dump_stack_lvl+0x8/0x8
[  362.582813][T10547]  ? __alloc_pages+0x610/0x610
[  362.587598][T10547]  dump_stack+0x15/0x24
[  362.591767][T10547]  should_fail_ex+0x3d4/0x520
[  362.596552][T10547]  should_fail+0xb/0x10
[  362.600881][T10547]  should_fail_usercopy+0x1a/0x20
[  362.605907][T10547]  copyin+0x20/0xa0
[  362.609746][T10547]  _copy_from_iter+0x3e2/0x1010
[  362.614608][T10547]  ? __cfi__copy_from_iter+0x10/0x10
[  362.619896][T10547]  ? __kasan_check_write+0x14/0x20
[  362.625212][T10547]  ? __check_object_size+0x45a/0x600
[  362.630623][T10547]  tcp_sendmsg_locked+0x1a1f/0x3a90
[  362.635847][T10547]  ? _raw_spin_unlock_bh+0x50/0x60
[  362.641245][T10547]  ? __cfi_tcp_sendmsg_locked+0x10/0x10
[  362.646906][T10547]  tcp_sendmsg+0x2f/0x50
[  362.651255][T10547]  inet_sendmsg+0xb6/0xd0
[  362.655968][T10547]  __sys_sendto+0x4ac/0x660
[  362.660736][T10547]  ? __cfi___sys_sendto+0x10/0x10
[  362.666076][T10547]  ? ksys_write+0x1f4/0x250
[  362.670756][T10547]  ? __cfi_ksys_write+0x10/0x10
[  362.675605][T10547]  __x64_sys_sendto+0xe5/0x100
[  362.680725][T10547]  x64_sys_call+0x83/0x9a0
[  362.685340][T10547]  do_syscall_64+0x4c/0xa0
[  362.689935][T10547]  ? clear_bhb_loop+0x30/0x80
[  362.694706][T10547]  ? clear_bhb_loop+0x30/0x80
[  362.699501][T10547]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  362.705419][T10547] RIP: 0033:0x7f3422d9c799
[  362.709947][T10547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.730179][T10547] RSP: 002b:00007f3423bbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  362.738792][T10547] RAX: ffffffffffffffda RBX: 00007f3423015fa0 RCX: 00007f3422d9c799
[  362.746869][T10547] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003
[  362.754855][T10547] RBP: 00007f3423bbe090 R08: 0000000000000000 R09: 0000000000000000
[  362.762967][T10547] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001
[  362.771041][T10547] R13: 00007f3423016038 R14: 00007f3423015fa0 R15: 00007ffdffff2868
[  362.779110][T10547]  </TASK>
[  362.856644][   T19] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  362.878583][T10551] loop8: detected capacity change from 0 to 32768
[  363.036765][   T28] audit: type=1107 audit(1774676282.717:3006): pid=10550 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  363.051679][   T19] usb 3-1: Using ep0 maxpacket: 16
[  363.147015][   T19] usb 3-1: unable to get BOS descriptor or descriptor too short
[  363.155838][   T19] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64
[  363.167592][   T19] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40
[  363.176884][   T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.185052][   T19] usb 3-1: Product: syz
[  363.189227][   T19] usb 3-1: Manufacturer: syz
[  363.193970][   T19] usb 3-1: SerialNumber: syz
[  363.199992][T10524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  363.214253][  T305] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[  363.410895][  T305] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  363.419675][   T28] audit: type=1400 audit(1774676283.068:3007): avc:  denied  { connect } for  pid=10567 comm="syz.3.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  363.440770][  T305] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  363.445143][   T19] usb 3-1: invalid MIDI in EP 0
[  363.452226][  T305] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  363.466168][  T305] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.468620][   T19] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  363.486327][   T19] usb 3-1: USB disconnect, device number 90
[  363.488680][  T305] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  363.498918][ T3305] udevd[3305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  363.503562][  T305] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  363.526344][  T305] usb 10-1: Product: syz
[  363.531048][  T305] usb 10-1: Manufacturer: syz
[  363.539342][  T297] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[  363.544096][  T305] cdc_wdm 10-1:1.0: skipping garbage
[  363.547474][T10576] overlayfs: failed to resolve './file0': -2
[  363.552700][  T305] cdc_wdm 10-1:1.0: skipping garbage
[  363.572456][  T305] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  363.757105][  T297] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  363.767426][  T297] usb 9-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  363.777493][  T297] usb 9-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  363.778796][  T305] usb 10-1: USB disconnect, device number 43
[  363.791374][  T297] usb 9-1: config 1 interface 0 has no altsetting 0
[  364.056116][  T297] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  364.065337][  T297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.073853][ T6330] syz-executor: attempt to access beyond end of device
[  364.073853][ T6330] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  364.075033][  T297] usb 9-1: Product: syz
[  364.092583][  T297] usb 9-1: Manufacturer: syz
[  364.097194][  T297] usb 9-1: SerialNumber: syz
[  364.108562][T10556] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  364.116317][T10556] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  364.158774][T10586] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  364.206788][T10590] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  364.298464][   T28] kauditd_printk_skb: 344 callbacks suppressed
[  364.298477][   T28] audit: type=1326 audit(1774676283.880:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.3.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361f75cfce code=0x7ffc0000
[  364.328416][   T28] audit: type=1326 audit(1774676283.880:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.3.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361f75cfce code=0x7ffc0000
[  364.371406][   T28] audit: type=1326 audit(1774676283.880:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.3.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361f75cfce code=0x7ffc0000
[  364.418632][   T28] audit: type=1326 audit(1774676283.880:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.3.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361f75cfce code=0x7ffc0000
[  364.444572][   T28] audit: type=1326 audit(1774676283.880:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.3.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361f75cfce code=0x7ffc0000
[  364.469695][   T28] audit: type=1326 audit(1774676283.880:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.3.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361f75cfce code=0x7ffc0000
[  364.494573][T10596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  364.607697][   T28] audit: type=1326 audit(1774676283.880:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.3.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361f75cfce code=0x7ffc0000
[  364.631723][   T28] audit: type=1326 audit(1774676283.880:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.3.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361f75cfce code=0x7ffc0000
[  364.631754][T10596] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002]
[  364.655814][   T28] audit: type=1326 audit(1774676283.880:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.3.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361f75cfce code=0x7ffc0000
[  364.663424][T10596] System zones: 1-12
[  364.687290][   T28] audit: type=1326 audit(1774676283.880:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10579 comm="syz.3.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f361f75cfce code=0x7ffc0000
[  364.715946][T10596] EXT4-fs (loop2): 1 truncate cleaned up
[  364.722350][T10596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  365.166782][ T6330] EXT4-fs (loop2): unmounting filesystem.
[  365.229755][ T1455] usb 10-1: new full-speed USB device number 44 using dummy_hcd
[  365.447634][ T1455] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  365.459007][ T1455] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.469039][ T1455] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  365.482081][ T1455] usb 10-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  365.491518][ T1455] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.500511][ T1455] usb 10-1: config 0 descriptor??
[  365.644478][  T305] usb 1-1: USB disconnect, device number 41
[  365.702818][T10618] __nla_validate_parse: 60 callbacks suppressed
[  365.702833][T10618] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3468'.
[  365.942993][ T1455] cypress 0003:04B4:0001.0022: hidraw0: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.9-1/input0
[  366.020861][   T19] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  366.105551][T10625] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3471'.
[  366.117602][T10625] set_capacity_and_notify: 3 callbacks suppressed
[  366.117621][T10625] loop2: detected capacity change from 0 to 256
[  366.133667][T10625] exfat: Unknown parameter ''
[  366.139556][T10625] overlayfs: missing 'lowerdir'
[  366.162757][ T1455] usb 10-1: USB disconnect, device number 44
[  366.217391][   T19] usb 4-1: unable to get BOS descriptor or descriptor too short
[  366.227971][   T19] usb 4-1: not running at top speed; connect to a high speed hub
[  366.241331][   T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  366.257465][   T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  366.275785][   T19] usb 4-1: string descriptor 0 read error: -22
[  366.285654][   T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  366.304190][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.346426][   T19] usb 4-1: 0:2 : does not exist
[  366.587960][  T297] rtl8150 9-1:1.0: couldn't find required endpoints
[  366.594666][  T297] rtl8150: probe of 9-1:1.0 failed with error -5
[  366.621072][  T297] usb 9-1: USB disconnect, device number 49
[  366.761008][T10636] loop9: detected capacity change from 0 to 2048
[  366.802430][T10636] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  366.827180][T10636] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  366.893623][ T5227] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /358/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  366.948233][ T5227] EXT4-fs (loop9): unmounting filesystem.
[  367.020986][   T19] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[  367.040045][   T19] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  367.073453][   T19] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  367.102991][   T19] usb 4-1: USB disconnect, device number 50
[  367.120948][T10651] netlink: 388 bytes leftover after parsing attributes in process `syz.9.3481'.
[  367.408858][T10634] loop8: detected capacity change from 0 to 131072
[  367.416293][T10634] F2FS-fs (loop8): invalid crc value
[  367.435978][T10634] F2FS-fs (loop8): Found nat_bits in checkpoint
[  367.480973][T10634] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  367.624602][  T297] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  367.694153][T10676] tmpfs: Bad value for 'size'
[  367.764381][T10653] loop9: detected capacity change from 0 to 131072
[  367.782291][T10653] F2FS-fs (loop9): invalid crc value
[  367.825233][T10653] F2FS-fs (loop9): Found nat_bits in checkpoint
[  367.843679][  T297] usb 1-1: unable to get BOS descriptor or descriptor too short
[  367.854911][  T297] usb 1-1: not running at top speed; connect to a high speed hub
[  367.868501][  T297] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.887006][  T297] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  367.904225][  T297] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  367.923421][T10653] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  367.936478][  T297] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.00
[  367.939042][T10634] F2FS-fs (loop8): invalid namelen(0), ino:8, run fsck to fix.
[  367.956610][  T297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.982611][T10634] F2FS-fs (loop8): Found FS corruption, run fsck to fix.
[  367.988571][  T297] usb 1-1: Product: syz
[  367.995725][  T297] usb 1-1: Manufacturer: syz
[  368.000503][  T297] usb 1-1: SerialNumber: syz
[  368.248711][T10661] tipc: Started in network mode
[  368.263852][T10661] tipc: Node identity , cluster identity 4711
[  368.269961][T10661] tipc: Failed to set node id, please configure manually
[  368.303024][T10661] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  368.403676][T10683] loop2: detected capacity change from 0 to 40427
[  368.429768][T10683] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  368.441977][T10683] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  368.459620][T10683] F2FS-fs (loop2): Unrecognized mount option "i
line_data" or missing value
[  368.571104][T10698] netlink: 'syz.9.3498': attribute type 4 has an invalid length.
[  368.604540][T10698] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.3498'.
[  368.629263][T10699] netlink: 'syz.9.3498': attribute type 4 has an invalid length.
[  368.645315][T10699] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.3498'.
[  368.782469][T10709] xt_hashlimit: size too large, truncated to 1048576
[  368.906967][  T297] usb 1-1: Can't get UAC3 power state for id 10
[  368.924878][  T506] usb 9-1: new full-speed USB device number 50 using dummy_hcd
[  368.933391][  T297] usb 1-1: 2:0: failed to get current value for ch 0 (-71)
[  368.948981][  T297] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  368.968258][   T19] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  368.979517][  T297] usb 1-1: USB disconnect, device number 42
[  368.981342][ T5408] usb 10-1: new high-speed USB device number 45 using dummy_hcd
[  369.142817][  T506] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  369.153086][  T506] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4
[  369.164229][  T506] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  369.177853][   T19] usb 4-1: Using ep0 maxpacket: 16
[  369.184760][   T19] usb 4-1: unable to get BOS descriptor or descriptor too short
[  369.192750][  T506] usb 9-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[  369.207440][   T19] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  369.218975][ T3305] udevd[3305]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  369.219953][  T506] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.235372][ T5408] usb 10-1: unable to get BOS descriptor or descriptor too short
[  369.245536][  T506] usb 9-1: Product: syz
[  369.255153][  T506] usb 9-1: Manufacturer: syz
[  369.266083][   T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  369.270822][ T5408] usb 10-1: unable to read config index 0 descriptor/start: -71
[  369.282943][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.297004][  T506] usb 9-1: SerialNumber: syz
[  369.303843][ T5408] usb 10-1: can't read configurations, error -71
[  369.304466][   T19] usb 4-1: Product: syz
[  369.318770][  T506] usb 9-1: config 0 descriptor??
[  369.333773][  T506] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  369.341429][   T19] usb 4-1: Manufacturer: syz
[  369.346133][   T19] usb 4-1: SerialNumber: syz
[  369.353681][  T506] usb 9-1: Detected SIO
[  369.357976][  T506] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[  369.367619][  T506] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  369.515197][T10726] xt_hashlimit: size too large, truncated to 1048576
[  369.551179][  T305] usb 9-1: USB disconnect, device number 50
[  369.569850][  T305] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  369.579504][  T305] ftdi_sio 9-1:0.0: device disconnected
[  369.600185][   T19] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  369.636580][   T19] usb 4-1: USB disconnect, device number 51
[  369.715936][ T5408] usb 10-1: new low-speed USB device number 46 using dummy_hcd
[  369.912419][ T5408] usb 10-1: unable to get BOS descriptor or descriptor too short
[  369.921490][ T5408] usb 10-1: config 8 has an invalid interface number: 241 but max is 0
[  369.930266][ T5408] usb 10-1: config 8 has no interface number 0
[  369.937052][   T28] kauditd_printk_skb: 65 callbacks suppressed
[  369.937062][ T5408] usb 10-1: config 8 interface 241 has no altsetting 0
[  369.937069][   T28] audit: type=1107 audit(1774676289.084:3427): pid=10732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  369.949617][ T5408] usb 10-1: string descriptor 0 read error: -22
[  370.045157][   T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  370.053109][ T5408] usb 10-1: New USB device found, idVendor=29fe, idProduct=4d53, bcdDevice=b5.07
[  370.062364][ T5408] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.072940][ T5408] usb 10-1: Found UVC 0.00 device <unnamed> (29fe:4d53)
[  370.080014][ T5408] usb 10-1: No valid video chain found.
[  370.233356][T10748] loop8: detected capacity change from 0 to 512
[  370.257706][   T24] usb 3-1: Using ep0 maxpacket: 16
[  370.261453][T10748] EXT4-fs warning (device loop8): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop8.
[  370.264569][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  370.283242][   T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  370.303251][   T24] usb 3-1: string descriptor 0 read error: -22
[  370.306247][  T506] usb 10-1: USB disconnect, device number 46
[  370.309465][   T24] usb 3-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40
[  370.324629][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.334526][   T24] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  370.463597][ T5408] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  370.496175][ T1455] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  370.564756][   T24] usb 3-1: USB disconnect, device number 91
[  370.660118][ T5408] usb 4-1: unable to get BOS descriptor or descriptor too short
[  370.680778][ T5408] usb 4-1: not running at top speed; connect to a high speed hub
[  370.691345][ T1455] usb 1-1: Using ep0 maxpacket: 16
[  370.697679][ T1455] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  370.702358][ T5408] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  370.711871][T10754] loop8: detected capacity change from 0 to 131072
[  370.719296][ T5408] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  370.725027][ T1455] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  370.733830][ T5408] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  370.754827][T10754] F2FS-fs (loop8): invalid crc value
[  370.762194][ T1455] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  370.762425][ T5408] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.00
[  370.771522][ T1455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.789223][ T1455] usb 1-1: Product: syz
[  370.793413][T10754] F2FS-fs (loop8): Found nat_bits in checkpoint
[  370.793504][ T5408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.799865][ T1455] usb 1-1: Manufacturer: syz
[  370.808150][ T5408] usb 4-1: Product: syz
[  370.816755][ T5408] usb 4-1: Manufacturer: syz
[  370.821705][ T1455] usb 1-1: SerialNumber: syz
[  370.822190][ T5408] usb 4-1: SerialNumber: syz
[  370.845113][T10754] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  371.059021][T10739] tipc: Started in network mode
[  371.062240][ T1455] usb 1-1: 0:2 : does not exist
[  371.065617][T10739] tipc: Node identity , cluster identity 4711
[  371.075926][T10739] tipc: Failed to set node id, please configure manually
[  371.087626][ T1455] usb 1-1: USB disconnect, device number 43
[  371.093759][T10739] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  371.113117][T10766] loop8: detected capacity change from 0 to 256
[  371.134405][T10766] FAT-fs (loop8): Directory bread(block 64) failed
[  371.141106][T10766] FAT-fs (loop8): Directory bread(block 65) failed
[  371.148237][T10766] FAT-fs (loop8): Directory bread(block 66) failed
[  371.155073][T10766] FAT-fs (loop8): Directory bread(block 67) failed
[  371.161879][T10766] FAT-fs (loop8): Directory bread(block 68) failed
[  371.169454][T10766] FAT-fs (loop8): Directory bread(block 69) failed
[  371.180938][T10766] FAT-fs (loop8): Directory bread(block 70) failed
[  371.192238][T10766] FAT-fs (loop8): Directory bread(block 71) failed
[  371.198901][T10766] FAT-fs (loop8): Directory bread(block 72) failed
[  371.205527][T10766] FAT-fs (loop8): Directory bread(block 73) failed
[  371.252468][   T28] audit: type=1326 audit(1774676290.293:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.8.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3422d9c799 code=0x7ffc0000
[  371.280636][T10771] Core dump to core aborted: cannot preserve file permissions
[  371.291445][   T28] audit: type=1326 audit(1774676290.293:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.8.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3422d9c799 code=0x7ffc0000
[  371.317387][   T28] audit: type=1326 audit(1774676290.293:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.8.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3422d9b607 code=0x7ffc0000
[  371.341582][   T28] audit: type=1326 audit(1774676290.293:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.8.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3422d9c799 code=0x7ffc0000
[  371.370766][T10770] loop2: detected capacity change from 0 to 512
[  371.377631][   T28] audit: type=1326 audit(1774676290.293:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.8.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3422d9c799 code=0x7ffc0000
[  371.394448][T10774] loop8: detected capacity change from 0 to 256
[  371.402278][   T28] audit: type=1326 audit(1774676290.293:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.8.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f3422d9c799 code=0x7ffc0000
[  371.431853][T10770] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  371.439208][T10774] FAT-fs (loop8): Directory bread(block 64) failed
[  371.441185][   T28] audit: type=1326 audit(1774676290.293:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.8.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3422d9c799 code=0x7ffc0000
[  371.447989][T10774] FAT-fs (loop8): Directory bread(block 65) failed
[  371.471644][   T28] audit: type=1326 audit(1774676290.293:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.8.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3422d9c799 code=0x7ffc0000
[  371.479545][T10774] FAT-fs (loop8): Directory bread(block 66) failed
[  371.501966][   T28] audit: type=1326 audit(1774676290.293:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10765 comm="syz.8.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3422d9c799 code=0x7ffc0000
[  371.508331][T10774] FAT-fs (loop8): Directory bread(block 67) failed
[  371.538210][T10774] FAT-fs (loop8): Directory bread(block 68) failed
[  371.544804][T10774] FAT-fs (loop8): Directory bread(block 69) failed
[  371.549521][T10770] EXT4-fs error (device loop2): ext4_acquire_dquot:6822: comm syz.2.3524: Failed to acquire dquot type 1
[  371.551480][T10774] FAT-fs (loop8): Directory bread(block 70) failed
[  371.563806][T10770] EXT4-fs (loop2): 1 truncate cleaned up
[  371.569273][T10774] FAT-fs (loop8): Directory bread(block 71) failed
[  371.575295][T10770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  371.581486][T10774] FAT-fs (loop8): Directory bread(block 72) failed
[  371.600677][T10774] FAT-fs (loop8): Directory bread(block 73) failed
[  371.612087][T10770] EXT4-fs error (device loop2): ext4_acquire_dquot:6822: comm syz.2.3524: Failed to acquire dquot type 1
[  371.624315][T10770] EXT4-fs error (device loop2): ext4_acquire_dquot:6822: comm syz.2.3524: Failed to acquire dquot type 1
[  371.652470][ T6330] EXT4-fs (loop2): unmounting filesystem.
[  371.707481][ T5408] usb 4-1: Can't get UAC3 power state for id 10
[  371.717628][ T5408] usb 4-1: 2:0: failed to get current value for ch 0 (-71)
[  371.730060][T10784] FAULT_INJECTION: forcing a failure.
[  371.730060][T10784] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.741632][ T5408] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  371.743562][T10784] CPU: 0 PID: 10784 Comm: syz.3.3528 Tainted: G        W          syzkaller #0
[  371.756531][ T5408] usb 4-1: USB disconnect, device number 52
[  371.760251][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  371.776639][T10784] Call Trace:
[  371.779923][T10784]  <TASK>
[  371.782854][T10784]  __dump_stack+0x21/0x24
[  371.787440][T10784]  dump_stack_lvl+0x110/0x170
[  371.792497][T10784]  ? __cfi_dump_stack_lvl+0x8/0x8
[  371.797522][T10784]  ? __asan_set_shadow_00+0xe/0x10
[  371.802806][T10784]  dump_stack+0x15/0x24
[  371.806963][T10784]  should_fail_ex+0x3d4/0x520
[  371.811868][T10784]  should_fail+0xb/0x10
[  371.816059][T10784]  should_fail_usercopy+0x1a/0x20
[  371.821108][T10784]  _copy_from_user+0x1e/0xc0
[  371.825715][T10784]  msr_io+0x9d/0x2d0
[  371.829611][T10784]  ? __cfi_do_get_msr_feature+0x10/0x10
[  371.835237][T10784]  ? kvm_arch_dev_ioctl+0x890/0x890
[  371.840443][T10784]  kvm_arch_dev_ioctl+0x217/0x890
[  371.845568][T10784]  ? __cfi_kvm_arch_dev_ioctl+0x10/0x10
[  371.851110][T10784]  ? vfs_write+0xa2c/0xce0
[  371.855514][T10784]  ? selinux_file_ioctl+0x3a0/0x4d0
[  371.860704][T10784]  kvm_dev_ioctl+0xd6/0x11f0
[  371.865456][T10784]  ? __fget_files+0x2d5/0x330
[  371.870260][T10784]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[  371.875506][T10784]  ? security_file_ioctl+0x95/0xc0
[  371.880623][T10784]  ? __cfi_kvm_dev_ioctl+0x10/0x10
[  371.885737][T10784]  __se_sys_ioctl+0x12f/0x1b0
[  371.890406][T10784]  __x64_sys_ioctl+0x7b/0x90
[  371.895001][T10784]  x64_sys_call+0x58b/0x9a0
[  371.899667][T10784]  do_syscall_64+0x4c/0xa0
[  371.904090][T10784]  ? clear_bhb_loop+0x30/0x80
[  371.908872][T10784]  ? clear_bhb_loop+0x30/0x80
[  371.913658][T10784]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  371.919640][T10784] RIP: 0033:0x7f361f79c799
[  371.924311][T10784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.943927][T10784] RSP: 002b:00007f3620637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  371.952432][T10784] RAX: ffffffffffffffda RBX: 00007f361fa15fa0 RCX: 00007f361f79c799
[  371.959675][ T3305] udevd[3305]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  371.960396][T10784] RDX: 0000200000000500 RSI: 00000000c008ae88 RDI: 0000000000000003
[  371.984502][T10784] RBP: 00007f3620637090 R08: 0000000000000000 R09: 0000000000000000
[  371.992645][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  372.000611][T10784] R13: 00007f361fa16038 R14: 00007f361fa15fa0 R15: 00007ffcee11b778
[  372.008586][T10784]  </TASK>
[  372.017876][   T59] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  372.034882][   T24] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  372.242196][   T59] usb 3-1: unable to get BOS descriptor or descriptor too short
[  372.254465][   T24] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  372.264633][   T24] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  372.275582][   T59] usb 3-1: unable to read config index 0 descriptor/start: -61
[  372.283709][   T59] usb 3-1: can't read configurations, error -61
[  372.309982][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[  372.328543][   T24] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  372.342808][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.351036][   T24] usb 1-1: Product: syz
[  372.355391][   T24] usb 1-1: Manufacturer: syz
[  372.360142][   T24] usb 1-1: SerialNumber: syz
[  372.376123][T10786] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  372.383540][T10786] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  372.489983][   T59] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  372.533312][   T19] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  372.548296][T10788] loop9: detected capacity change from 0 to 131072
[  372.556712][T10788] F2FS-fs (loop9): invalid crc value
[  372.564022][T10788] F2FS-fs (loop9): Found nat_bits in checkpoint
[  372.595790][T10788] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  372.686569][   T59] usb 3-1: unable to get BOS descriptor or descriptor too short
[  372.695554][   T59] usb 3-1: unable to read config index 0 descriptor/start: -61
[  372.703522][   T59] usb 3-1: can't read configurations, error -61
[  372.710206][   T59] usb usb3-port1: attempt power cycle
[  372.739239][   T19] usb 4-1: Using ep0 maxpacket: 16
[  372.752579][   T19] usb 4-1: unable to get BOS descriptor or descriptor too short
[  372.761159][   T19] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64
[  372.771841][ T1455] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[  372.780570][   T19] usb 4-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40
[  372.789857][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.798313][   T19] usb 4-1: Product: syz
[  372.802571][   T19] usb 4-1: Manufacturer: syz
[  372.807353][   T19] usb 4-1: SerialNumber: syz
[  372.830943][T10790] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  372.834876][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.847100][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.888004][T10807] loop9: detected capacity change from 0 to 32768
[  372.931889][   T24] rtl8150 1-1:1.0: couldn't reset the device
[  372.938298][   T24] rtl8150: probe of 1-1:1.0 failed with error -5
[  372.946825][   T24] usb 1-1: USB disconnect, device number 44
[  372.968516][ T1455] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  372.978837][ T1455] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  372.991868][ T1455] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  373.001379][ T1455] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.010018][ T1455] usb 9-1: config 0 descriptor??
[  373.015930][ T1455] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  373.059856][   T19] usb 4-1: invalid MIDI in EP 0
[  373.067344][   T19] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  373.076719][   T19] usb 4-1: USB disconnect, device number 53
[  373.082512][ T3305] udevd[3305]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  373.172694][   T59] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  373.206956][   T59] usb 3-1: unable to get BOS descriptor or descriptor too short
[  373.216134][   T59] usb 3-1: unable to read config index 0 descriptor/start: -61
[  373.224609][   T59] usb 3-1: can't read configurations, error -61
[  373.389360][   T59] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  373.411039][ T5408] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[  373.423717][   T59] usb 3-1: unable to get BOS descriptor or descriptor too short
[  373.433090][   T59] usb 3-1: unable to read config index 0 descriptor/start: -61
[  373.440666][   T59] usb 3-1: can't read configurations, error -61
[  373.447025][   T59] usb usb3-port1: unable to enumerate USB device
[  373.467930][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3539'.
[  373.534512][T10821] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3541'.
[  373.607856][ T5408] usb 10-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  373.618253][ T5408] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  373.628864][ T5408] usb 10-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  373.642239][ T5408] usb 10-1: config 1 interface 0 has no altsetting 0
[  373.650593][ T5408] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  373.659964][ T5408] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.668484][ T5408] usb 10-1: Product: syz
[  373.672803][ T5408] usb 10-1: Manufacturer: syz
[  373.677673][ T5408] usb 10-1: SerialNumber: syz
[  373.697009][T10813] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  373.707088][T10813] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  374.152209][ T5408] rtl8150 10-1:1.0: couldn't find required endpoints
[  374.159696][ T5408] rtl8150: probe of 10-1:1.0 failed with error -5
[  374.167553][ T5408] usb 10-1: USB disconnect, device number 47
[  374.536960][T10835] ext2: Unexpected value for 'acl'
[  374.857830][T10858] tmpfs: Unknown parameter 'uid}0x0000000000000000'
[  374.935783][T10860] loop2: detected capacity change from 0 to 256
[  375.013252][T10862] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3556'.
[  375.092994][T10866] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3557'.
[  375.133635][T10870] xt_hashlimit: size too large, truncated to 1048576
[  375.394053][   T59] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  375.589113][   T59] usb 3-1: Using ep0 maxpacket: 8
[  375.595485][   T59] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  375.615783][   T59] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  375.629585][   T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.641168][   T59] usb 3-1: Product: syz
[  375.645437][   T59] usb 3-1: Manufacturer: syz
[  375.666865][   T59] usb 3-1: SerialNumber: syz
[  375.741219][T10892] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3567'.
[  375.803775][T10899] xt_hashlimit: size too large, truncated to 1048576
[  375.900349][   T59] cdc_ether: probe of 3-1:1.0 failed with error -22
[  375.913604][   T59] usb 3-1: USB disconnect, device number 96
[  375.950848][T10902] netlink: 388 bytes leftover after parsing attributes in process `syz.9.3571'.
[  376.257001][ T1455] usb 9-1: USB disconnect, device number 51
[  376.397766][T10914] netlink: 388 bytes leftover after parsing attributes in process `syz.8.3577'.
[  376.492074][T10918] loop8: detected capacity change from 0 to 512
[  376.510539][T10918] EXT4-fs: Ignoring removed bh option
[  376.534395][T10918] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  376.626884][T10928] bridge2: the hash_elasticity option has been deprecated and is always 16
[  376.866014][T10918] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  376.881486][T10918] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.3577: bg 0: block 248: padding at end of block bitmap is not set
[  376.900813][T10918] __quota_error: 82 callbacks suppressed
[  376.900829][T10918] Quota error (device loop8): write_blk: dquota write failed
[  376.925524][T10918] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  376.937313][T10918] EXT4-fs error (device loop8): ext4_acquire_dquot:6822: comm syz.8.3577: Failed to acquire dquot type 1
[  376.949923][T10918] EXT4-fs (loop8): 1 truncate cleaned up
[  376.957342][T10918] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  376.980615][T10939] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3584'.
[  377.029949][   T28] audit: type=1400 audit(1774676295.627:3513): avc:  denied  { setattr } for  pid=10934 comm="syz.9.3582" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  377.124340][T10935] loop9: detected capacity change from 0 to 40427
[  377.131535][   T28] audit: type=1400 audit(1774676295.729:3514): avc:  denied  { mounton } for  pid=10934 comm="syz.9.3582" path="/393/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  377.155495][T10935] F2FS-fs (loop9): Fix alignment : internally, start(4096) end(16896) block(12288)
[  377.165664][T10935] F2FS-fs (loop9): invalid crc value
[  377.172284][T10935] F2FS-fs (loop9): Found nat_bits in checkpoint
[  377.196217][T10935] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  377.268447][ T4942] EXT4-fs (loop8): unmounting filesystem.
[  377.313655][ T1455] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  377.336018][T10948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  377.353928][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready
[  377.364162][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready
[  377.379911][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  377.459572][T10953] loop2: detected capacity change from 0 to 512
[  377.462630][   T28] audit: type=1326 audit(1774676296.024:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10944 comm="syz.8.3586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3422d9c799 code=0x0
[  377.466377][T10953] EXT4-fs: Ignoring removed bh option
[  377.495472][T10955] overlayfs: overlapping lowerdir path
[  377.501800][T10955] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  377.503016][T10953] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  377.510131][T10955] overlayfs: overlapping lowerdir path
[  377.528474][T10955] SELinux:  Context system_u:object_r:boot_t:s0 is not valid (left unmapped).
[  377.535428][T10953] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  377.538237][   T28] audit: type=1400 audit(1774676296.098:3516): avc:  denied  { relabelto } for  pid=10949 comm="syz.3.3588" name="file0" dev="tmpfs" ino=1691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:boot_t:s0"
[  377.552738][T10953] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3589: bg 0: block 248: padding at end of block bitmap is not set
[  377.578255][   T28] audit: type=1400 audit(1774676296.098:3517): avc:  denied  { associate } for  pid=10949 comm="syz.3.3588" name="file0" dev="tmpfs" ino=1691 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0"
[  377.593346][T10953] Quota error (device loop2): write_blk: dquota write failed
[  377.621155][ T1455] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.637843][T10953] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  377.638206][ T1455] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  377.648521][T10953] EXT4-fs error (device loop2): ext4_acquire_dquot:6822: comm syz.2.3589: Failed to acquire dquot type 1
[  377.661019][ T1455] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  377.672809][T10953] EXT4-fs (loop2): 1 truncate cleaned up
[  377.681200][ T1455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.687526][T10953] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  377.696430][ T1455] usb 1-1: config 0 descriptor??
[  377.715956][ T1455] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  378.216978][   T28] audit: type=1326 audit(1774676296.725:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10945 comm="syz.9.3587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9878b9c799 code=0x7fc00000
[  378.389283][ T6330] EXT4-fs (loop2): unmounting filesystem.
[  378.395286][  T304] EXT4-fs error (device loop2): ext4_release_dquot:6858: comm kworker/u4:3: Failed to release dquot type 1
[  378.416386][T10978] loop2: detected capacity change from 0 to 256
[  378.425751][T10978] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  378.460810][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  378.468009][T10981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3599'.
[  378.490101][T10985] loop2: detected capacity change from 0 to 1024
[  378.516300][T10985] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  378.525862][T10985] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  378.540684][T10985] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3601: bg 0: block 3: invalid block bitmap
[  378.553530][T10985] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117
[  378.566211][T10985] EXT4-fs (loop2): This should not happen!! Data will be lost
[  378.566211][T10985] 
[  378.581335][ T6330] EXT4-fs (loop2): unmounting filesystem.
[  378.607880][T11003] binder: 11002:11003 ioctl 4018620d 0 returned -22
[  379.900017][T11059] loop9: detected capacity change from 0 to 4096
[  379.918129][T11059] EXT4-fs (loop9): Test dummy encryption mode enabled
[  379.931818][T11059] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  379.940576][T11059] System zones: 0-5
[  379.945644][T11059] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  379.960990][ T5227] EXT4-fs (loop9): unmounting filesystem.
[  380.335391][   T19] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[  380.533342][   T19] usb 10-1: Using ep0 maxpacket: 16
[  380.541011][   T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.552369][   T19] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  380.564295][   T19] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  380.577739][   T19] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  380.592460][   T19] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.601597][   T19] usb 10-1: config 0 descriptor??
[  380.610916][T11081] loop8: detected capacity change from 0 to 128
[  380.631701][T11081] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  380.644668][T11081] ext4 filesystem being mounted at /496/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  380.674678][ T4942] EXT4-fs (loop8): unmounting filesystem.
[  380.759704][T11094] loop2: detected capacity change from 0 to 256
[  380.783569][T11094] FAT-fs (loop2): Directory bread(block 64) failed
[  380.796020][T11094] FAT-fs (loop2): Directory bread(block 65) failed
[  380.802983][T11094] FAT-fs (loop2): Directory bread(block 66) failed
[  380.809551][T11094] FAT-fs (loop2): Directory bread(block 67) failed
[  380.818412][T11094] FAT-fs (loop2): Directory bread(block 68) failed
[  380.825435][T11094] FAT-fs (loop2): Directory bread(block 69) failed
[  380.832267][T11094] FAT-fs (loop2): Directory bread(block 70) failed
[  380.840583][T11094] FAT-fs (loop2): Directory bread(block 71) failed
[  380.847521][T11094] FAT-fs (loop2): Directory bread(block 72) failed
[  380.849853][T11085] loop8: detected capacity change from 0 to 32768
[  380.854092][T11094] FAT-fs (loop2): Directory bread(block 73) failed
[  380.878764][T11095] Core dump to core aborted: cannot preserve file permissions
[  381.027080][T11097] loop2: detected capacity change from 0 to 40427
[  381.035100][T11097] F2FS-fs (loop2): fault_type options not supported
[  381.042013][T11097] F2FS-fs (loop2): fault_injection options not supported
[  381.049170][T11097] F2FS-fs (loop2): Image doesn't support compression
[  381.056900][T11097] F2FS-fs (loop2): invalid crc value
[  381.057886][T11067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.064003][T11097] F2FS-fs (loop2): Found nat_bits in checkpoint
[  381.071649][T11067] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.091553][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.099174][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.112576][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.122362][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.129746][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.137497][T11097] F2FS-fs (loop2): Start checkpoint disabled!
[  381.138481][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.152591][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.160630][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.160686][T11097] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  381.168867][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.168891][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.191404][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.195179][T11097] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  381.229014][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.240495][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.248915][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.256420][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.271365][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.279224][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.286467][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.299494][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.310697][T11111] loop2: detected capacity change from 0 to 128
[  381.311566][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.325026][   T19] microsoft 0003:045E:07DA.0023: unknown main item tag 0x0
[  381.333249][   T19] microsoft 0003:045E:07DA.0023: No inputs registered, leaving
[  381.336503][T11111] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  381.341440][   T19] microsoft 0003:045E:07DA.0023: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0
[  381.350240][T11111] ext4 filesystem being mounted at /307/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  381.360939][   T19] microsoft 0003:045E:07DA.0023: no inputs found
[  381.399461][   T19] microsoft 0003:045E:07DA.0023: could not initialize ff, continuing anyway
[  381.409470][ T1455] usb 1-1: USB disconnect, device number 45
[  381.418120][   T19] usb 10-1: USB disconnect, device number 48
[  381.439950][T11113] fido_id[11113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  381.549006][  T305] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[  381.744061][  T305] usb 9-1: Using ep0 maxpacket: 32
[  381.750515][  T305] usb 9-1: config 0 has an invalid interface number: 20 but max is 0
[  381.758727][  T305] usb 9-1: config 0 has no interface number 0
[  381.765431][  T305] usb 9-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  381.775514][  T305] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  381.785450][  T305] usb 9-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  381.796904][  T305] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  381.798228][ T1455] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  381.805972][  T305] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.821669][  T305] usb 9-1: Product: syz
[  381.825819][  T305] usb 9-1: Manufacturer: syz
[  381.830413][  T305] usb 9-1: SerialNumber: syz
[  381.836058][  T305] usb 9-1: config 0 descriptor??
[  381.842232][T11107] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  381.921954][T11123] overlayfs: './file1' not a directory
[  381.945488][T11125] loop9: detected capacity change from 0 to 256
[  381.960694][T11125] FAT-fs (loop9): Directory bread(block 64) failed
[  381.967633][T11125] FAT-fs (loop9): Directory bread(block 65) failed
[  381.974733][T11125] FAT-fs (loop9): Directory bread(block 66) failed
[  381.981651][T11125] FAT-fs (loop9): Directory bread(block 67) failed
[  381.988448][T11125] FAT-fs (loop9): Directory bread(block 68) failed
[  381.996088][T11125] FAT-fs (loop9): Directory bread(block 69) failed
[  382.002746][T11125] FAT-fs (loop9): Directory bread(block 70) failed
[  382.009479][T11125] FAT-fs (loop9): Directory bread(block 71) failed
[  382.009618][ T1455] usb 1-1: Using ep0 maxpacket: 16
[  382.016435][T11125] FAT-fs (loop9): Directory bread(block 72) failed
[  382.027929][T11125] FAT-fs (loop9): Directory bread(block 73) failed
[  382.053433][T11126] Core dump to core aborted: cannot preserve file permissions
[  382.066925][ T5227] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  382.069851][  T305] usb-storage 9-1:0.20: USB Mass Storage device detected
[  382.075108][ T5227] FAT-fs (loop9): Filesystem has been set read-only
[  382.083119][  T305] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  382.099578][  T305] scsi host1: usb-storage 9-1:0.20
[  382.111462][  T305] usb 9-1: USB disconnect, device number 52
[  382.222245][T11111] EXT4-fs (loop2): unmounting filesystem.
[  382.319236][T11139] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.326321][T11139] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.334340][T11139] device bridge_slave_0 entered promiscuous mode
[  382.341868][T11139] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.348934][T11139] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.356687][T11139] device bridge_slave_1 entered promiscuous mode
[  382.434836][T11139] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.442289][T11139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.449627][T11139] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.456783][T11139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.481448][  T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  382.489301][  T660] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.496764][  T660] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.506670][  T660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  382.515265][  T660] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.522426][  T660] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.531642][  T660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  382.540231][  T660] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.547482][  T660] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.561281][  T660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  382.573800][ T1455] usb 1-1: unable to get BOS descriptor or descriptor too short
[  382.574160][  T660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  382.589507][ T1455] usb 1-1: unable to read config index 0 descriptor/start: -71
[  382.597103][ T1455] usb 1-1: can't read configurations, error -71
[  382.610286][  T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  382.623135][  T660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  382.631574][  T660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  382.640039][  T660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  382.643517][   T19] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  382.659089][T11139] device veth0_vlan entered promiscuous mode
[  382.672646][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  382.682882][T11139] device veth1_macvtap entered promiscuous mode
[  382.694700][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  382.708018][  T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  382.732812][   T28] kauditd_printk_skb: 176 callbacks suppressed
[  382.732830][   T28] audit: type=1400 audit(1774676300.897:3694): avc:  denied  { mounton } for  pid=11139 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  382.856055][T11170] loop4: detected capacity change from 0 to 128
[  382.888392][   T19] usb 4-1: unable to get BOS descriptor or descriptor too short
[  382.904282][   T19] usb 4-1: not running at top speed; connect to a high speed hub
[  382.920792][T11174] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000e8a2, chksum : 0xd7c774f0, utbl_chksum : 0xe619d30d)
[  382.928402][   T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  382.944012][   T19] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  382.953972][   T19] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  382.956023][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3669'.
[  382.986847][T11174] netlink: 7 bytes leftover after parsing attributes in process `syz.8.3669'.
[  382.989509][   T19] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.00
[  383.022787][   T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.039117][   T19] usb 4-1: Product: syz
[  383.048212][   T19] usb 4-1: Manufacturer: syz
[  383.056446][   T19] usb 4-1: SerialNumber: syz
[  383.290061][T11145] tipc: Started in network mode
[  383.295174][T11145] tipc: Node identity , cluster identity 4711
[  383.301326][T11145] tipc: Failed to set node id, please configure manually
[  383.308771][T11145] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  383.384148][T11172] F2FS-fs (loop4): invalid crc value
[  383.391602][T11172] F2FS-fs (loop4): Found nat_bits in checkpoint
[  383.429987][T11172] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  383.440403][T11172] FAULT_INJECTION: forcing a failure.
[  383.440403][T11172] name failslab, interval 1, probability 0, space 0, times 0
[  383.453621][T11172] CPU: 1 PID: 11172 Comm: syz.4.3668 Tainted: G        W          syzkaller #0
[  383.462672][T11172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  383.472735][T11172] Call Trace:
[  383.476074][T11172]  <TASK>
[  383.479020][T11172]  __dump_stack+0x21/0x24
[  383.483355][T11172]  dump_stack_lvl+0x110/0x170
[  383.488234][T11172]  ? __cfi_dump_stack_lvl+0x8/0x8
[  383.493297][T11172]  ? proc_fail_nth_write+0x180/0x200
[  383.498600][T11172]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  383.504260][T11172]  ? security_file_permission+0x8a/0xb0
[  383.509906][T11172]  dump_stack+0x15/0x24
[  383.514086][T11172]  should_fail_ex+0x3d4/0x520
[  383.518883][T11172]  ? getname_flags+0xb9/0x500
[  383.523577][T11172]  __should_failslab+0xac/0xf0
[  383.528443][T11172]  should_failslab+0x9/0x20
[  383.532978][T11172]  kmem_cache_alloc+0x3b/0x330
[  383.537768][T11172]  ? __cfi_vfs_write+0x10/0x10
[  383.542812][T11172]  getname_flags+0xb9/0x500
[  383.547362][T11172]  user_path_at_empty+0x30/0x1c0
[  383.552321][T11172]  path_setxattr+0xb3/0x290
[  383.556846][T11172]  ? simple_xattr_list_add+0x120/0x120
[  383.562445][T11172]  ? __cfi_ksys_write+0x10/0x10
[  383.567309][T11172]  __x64_sys_setxattr+0xc5/0xe0
[  383.572184][T11172]  x64_sys_call+0x633/0x9a0
[  383.576791][T11172]  do_syscall_64+0x4c/0xa0
[  383.581223][T11172]  ? clear_bhb_loop+0x30/0x80
[  383.585924][T11172]  ? clear_bhb_loop+0x30/0x80
[  383.590626][T11172]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  383.596626][T11172] RIP: 0033:0x7f943b99c799
[  383.601064][T11172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.620943][T11172] RSP: 002b:00007f943c7c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  383.629468][T11172] RAX: ffffffffffffffda RBX: 00007f943bc15fa0 RCX: 00007f943b99c799
[  383.637452][T11172] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000
[  383.645439][T11172] RBP: 00007f943c7c7090 R08: 0000000000000000 R09: 0000000000000000
[  383.653426][T11172] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000001
[  383.661508][T11172] R13: 00007f943bc16038 R14: 00007f943bc15fa0 R15: 00007fff5bfd0ec8
[  383.669614][T11172]  </TASK>
[  383.746668][T11190] overlayfs: unrecognized mount option "verity=on" or missing value
[  383.871357][   T28] audit: type=1326 audit(1774676301.949:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11193 comm="syz.2.3677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdad2d9c799 code=0x0
[  384.016061][   T19] usb 4-1: Can't get UAC3 power state for id 10
[  384.031505][T11218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3687'.
[  384.035322][   T19] usb 4-1: 2:0: failed to get current value for ch 0 (-71)
[  384.066025][   T19] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  384.073848][   T59] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  384.103877][   T19] usb 4-1: USB disconnect, device number 54
[  384.122815][T11227] set_capacity_and_notify: 2 callbacks suppressed
[  384.122836][T11227] loop4: detected capacity change from 0 to 128
[  384.269882][   T59] usb 1-1: Using ep0 maxpacket: 16
[  384.276705][   T59] usb 1-1: unable to get BOS descriptor or descriptor too short
[  384.292255][   T59] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64
[  384.313022][   T59] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40
[  384.330205][   T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.346397][   T59] usb 1-1: Product: syz
[  384.355315][   T59] usb 1-1: Manufacturer: syz
[  384.364814][   T59] usb 1-1: SerialNumber: syz
[  384.376987][T11184] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  384.528957][  T305] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  384.608943][   T59] usb 1-1: invalid MIDI in EP 0
[  384.620513][   T59] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  384.635782][   T59] usb 1-1: USB disconnect, device number 48
[  384.643070][ T3305] udevd[3305]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  384.725541][  T305] usb 5-1: unable to get BOS descriptor or descriptor too short
[  384.736860][  T305] usb 5-1: config index 0 descriptor too short (expected 96, got 45)
[  384.753358][  T305] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  384.774152][  T305] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  384.809637][  T305] usb 5-1: string descriptor 0 read error: -22
[  384.821746][  T305] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[  384.854217][  T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.993009][T11253] loop8: detected capacity change from 0 to 4096
[  385.031809][T11253] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  385.041693][T11253] EXT4-fs (loop8): unmounting filesystem.
[  385.101736][T11229] loop4: detected capacity change from 0 to 256
[  385.127341][   T28] audit: type=1400 audit(1774676303.102:3696): avc:  denied  { watch watch_reads } for  pid=11249 comm="syz.8.3698" path="/504/file1" dev="tmpfs" ino=2755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  385.155723][T11229] FAT-fs (loop4): Directory bread(block 64) failed
[  385.169480][T11229] FAT-fs (loop4): Directory bread(block 65) failed
[  385.176298][T11229] FAT-fs (loop4): Directory bread(block 66) failed
[  385.193196][T11229] FAT-fs (loop4): Directory bread(block 67) failed
[  385.199929][T11229] FAT-fs (loop4): Directory bread(block 68) failed
[  385.206532][T11229] FAT-fs (loop4): Directory bread(block 69) failed
[  385.217599][T11229] FAT-fs (loop4): Directory bread(block 70) failed
[  385.224411][T11229] FAT-fs (loop4): Directory bread(block 71) failed
[  385.233470][T11229] FAT-fs (loop4): Directory bread(block 72) failed
[  385.240250][T11229] FAT-fs (loop4): Directory bread(block 73) failed
[  385.273026][   T28] audit: type=1326 audit(1774676303.231:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.4.3690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f943b99c799 code=0x0
[  385.417520][ T1455] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[  385.525871][   T19] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  385.601733][ T1455] usb 9-1: device descriptor read/64, error -71
[  385.632300][T11280] netlink: 'syz.3.3710': attribute type 7 has an invalid length.
[  385.641767][T11280] netlink: 'syz.3.3710': attribute type 8 has an invalid length.
[  385.743705][   T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  385.752747][   T28] audit: type=1326 audit(1774676303.674:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.2.3716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdad2d9c799 code=0x0
[  385.776265][   T19] usb 1-1: config 1 has no interface number 0
[  385.782391][   T19] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  385.793402][   T19] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  385.804317][   T19] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  385.813630][   T19] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  385.830634][   T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  385.839916][   T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.848083][   T19] usb 1-1: Product: syz
[  385.852303][   T19] usb 1-1: Manufacturer: syz
[  385.856917][   T19] usb 1-1: SerialNumber: syz
[  385.866474][T11262] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  385.894305][ T1455] usb 9-1: device descriptor read/64, error -71
[  386.035179][  T506] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  386.093227][T11262] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  386.164571][T11311] incfs: Backing dir is not set, filesystem can't be mounted.
[  386.172784][T11311] incfs: mount failed -2
[  386.186957][ T1455] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[  386.231376][  T506] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.241797][  T506] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  386.254756][  T506] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  386.263988][  T506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.273105][  T506] usb 4-1: config 0 descriptor??
[  386.279606][  T506] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  386.318107][T11262] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  386.349575][ T1455] usb 9-1: device descriptor read/64, error -71
[  386.641991][ T1455] usb 9-1: device descriptor read/64, error -71
[  386.760200][T11262] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  386.768569][   T19] cdc_ncm 1-1:1.1: bind() failure
[  386.773781][ T1455] usb usb9-port1: attempt power cycle
[  386.777577][   T28] audit: type=1326 audit(1774676304.625:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.3727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdad2d9c799 code=0x0
[  386.989208][   T19] usb 1-1: USB disconnect, device number 49
[  387.014630][T11393] 9pnet_fd: Insufficient options for proto=fd
[  387.021709][   T28] audit: type=1400 audit(1774676304.856:3700): avc:  denied  { watch_reads } for  pid=11392 comm="syz.2.3734" path="/" dev="ramfs" ino=61168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  387.227202][ T1455] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[  387.261646][ T1455] usb 9-1: device descriptor read/8, error -71
[  387.337030][   T28] audit: type=1326 audit(1774676305.142:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11399 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad2d9c799 code=0x7ffc0000
[  387.360907][   T28] audit: type=1326 audit(1774676305.142:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11399 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad2d9c799 code=0x7ffc0000
[  387.384835][   T28] audit: type=1326 audit(1774676305.142:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11399 comm="syz.2.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fdad2d9c799 code=0x7ffc0000
[  387.423370][ T1455] usb 9-1: device descriptor read/8, error -71
[  387.456993][  T305] usb 5-1: 0:2 : does not exist
[  387.479333][  T305] usb 5-1: USB disconnect, device number 12
[  387.652900][T11412] 9pnet_fd: Insufficient options for proto=fd
[  387.699743][T11412] loop4: detected capacity change from 0 to 128
[  388.008747][ T1455] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[  388.051871][ T1455] usb 9-1: device descriptor read/8, error -71
[  388.213765][ T1455] usb 9-1: device descriptor read/8, error -71
[  388.343428][ T1455] usb usb9-port1: unable to enumerate USB device
[  389.222549][  T305] usb 4-1: USB disconnect, device number 55
[  389.277741][T11441] device ip6gre1 entered promiscuous mode
[  389.747181][T11452] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3755'.
[  389.819241][T11461] SELinux: failed to load policy
[  389.864610][T11374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  390.422064][ T1455] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[  390.479105][T11486] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:0:5efe:253.127.26.154
[  390.506706][T11491] fuse: Unknown parameter 'defaul'
[  390.597079][T11439] loop4: detected capacity change from 0 to 131072
[  390.611241][T11439] F2FS-fs (loop4): invalid crc value
[  390.629737][ T1455] usb 9-1: Using ep0 maxpacket: 16
[  390.635707][T11439] F2FS-fs (loop4): Found nat_bits in checkpoint
[  390.636189][ T1455] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  390.674693][ T1455] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  390.683697][ T1455] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  390.698249][T11457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.701169][T11439] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  390.707669][T11457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.754809][T11499] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3770'.
[  390.764947][   T28] kauditd_printk_skb: 8 callbacks suppressed
[  390.764965][   T28] audit: type=1400 audit(1774676308.307:3712): avc:  denied  { remount } for  pid=11456 comm="syz.8.3754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  391.323033][   T28] audit: type=1107 audit(1774676308.815:3713): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  391.401129][   T28] audit: type=1326 audit(1774676308.898:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.3.3777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f361f79c799 code=0x0
[  391.513438][ T3492] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  391.574300][ T1455] usb 9-1: string descriptor 0 read error: -71
[  391.583013][ T1455] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  391.592171][ T1455] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.606898][ T1455] usb 9-1: rejected 1 configuration due to insufficient available bus power
[  391.616127][ T1455] usb 9-1: no configuration chosen from 1 choice
[  391.625565][ T1455] usb 9-1: USB disconnect, device number 57
[  391.749927][ T3492] usb 5-1: unable to get BOS descriptor or descriptor too short
[  391.758119][ T3492] usb 5-1: not running at top speed; connect to a high speed hub
[  391.766764][ T3492] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  391.777149][ T3492] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  391.790328][ T3492] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  391.803529][ T3492] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.00
[  392.033213][ T3492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.041527][ T3492] usb 5-1: Product: syz
[  392.045725][ T3492] usb 5-1: Manufacturer: syz
[  392.050454][ T3492] usb 5-1: SerialNumber: syz
[  392.279267][T11509] tipc: Started in network mode
[  392.284200][T11509] tipc: Node identity , cluster identity 4711
[  392.290369][T11509] tipc: Failed to set node id, please configure manually
[  392.297533][T11509] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  392.373953][T11556] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready
[  392.391472][T11559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3786'.
[  392.578590][T11566] overlayfs: overlapping lowerdir path
[  392.690076][   T28] audit: type=1400 audit(1774676310.088:3715): avc:  denied  { unmount } for  pid=8131 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  392.757036][T11581] loop8: detected capacity change from 0 to 256
[  392.772543][   T28] audit: type=1400 audit(1774676310.107:3716): avc:  denied  { create } for  pid=11572 comm="syz.3.3795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[  392.776087][T11581] exfat: Deprecated parameter 'utf8'
[  392.804552][T11581] exfat: Deprecated parameter 'utf8'
[  392.813067][T11581] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  392.861734][ T3492] usb 5-1: Can't get UAC3 power state for id 10
[  392.868259][   T28] audit: type=1400 audit(1774676310.254:3717): avc:  denied  { link } for  pid=11582 comm="syz.3.3798" name="#37" dev="tmpfs" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  392.873776][ T3492] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  392.898172][   T28] audit: type=1400 audit(1774676310.282:3718): avc:  denied  { rename } for  pid=11582 comm="syz.3.3798" name="#38" dev="tmpfs" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  392.908626][ T3492] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  392.966737][   T28] audit: type=1326 audit(1774676310.337:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11588 comm="syz.4.3801" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f943b99c799 code=0x0
[  392.996493][ T3492] usb 5-1: USB disconnect, device number 13
[  393.013673][ T5408] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  393.143691][   T24] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[  393.209878][ T5408] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  393.225783][ T5408] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  393.236523][ T5408] usb 1-1: config 1 interface 0 has no altsetting 0
[  393.244973][ T5408] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  393.254549][ T5408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.267578][ T5408] usb 1-1: Product: syz
[  393.273826][ T5408] usb 1-1: Manufacturer: syz
[  393.280939][ T5408] usb 1-1: SerialNumber: syz
[  393.294362][T11576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  393.302736][T11576] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  393.322094][T11605] 9pnet_fd: Insufficient options for proto=fd
[  393.338969][   T24] usb 9-1: Using ep0 maxpacket: 16
[  393.363665][T11615] tipc: Started in network mode
[  393.368702][T11615] tipc: Node identity , cluster identity 4711
[  393.375479][T11615] tipc: Failed to set node id, please configure manually
[  393.382808][T11615] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  393.392426][T11615] overlayfs: failed to clone upperpath
[  393.400528][T11615] fuse: Bad value for 'fd'
[  393.749087][T11576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.757803][T11576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.789323][ T5408] rtl8150 1-1:1.0: couldn't reset the device
[  393.795689][ T5408] rtl8150: probe of 1-1:1.0 failed with error -5
[  393.803986][ T5408] usb 1-1: USB disconnect, device number 50
[  393.894367][   T24] usb 9-1: unable to get BOS descriptor or descriptor too short
[  393.909756][   T24] usb 9-1: unable to read config index 0 descriptor/start: -71
[  393.917791][T11617] loop8: detected capacity change from 0 to 256
[  393.917798][   T24] usb 9-1: can't read configurations, error -71
[  393.936584][T11617] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  393.962997][   T28] audit: type=1400 audit(1774676311.251:3720): avc:  denied  { associate } for  pid=11616 comm="syz.8.3810" name="cpu.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  394.039030][   T28] audit: type=1400 audit(1774676311.325:3721): avc:  denied  { bind } for  pid=11630 comm="syz.4.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  394.040709][T11631] netlink: 'syz.4.3816': attribute type 3 has an invalid length.
[  394.780052][ T5408] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  394.877549][   T24] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[  395.000599][ T5408] usb 1-1: unable to get BOS descriptor or descriptor too short
[  395.111592][ T5408] usb 1-1: not running at top speed; connect to a high speed hub
[  395.128410][   T24] usb 9-1: unable to get BOS descriptor or descriptor too short
[  395.148640][ T5408] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  395.159930][   T24] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  395.195147][ T5408] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  395.206067][   T24] usb 9-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  395.230387][ T5408] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  395.258248][   T24] usb 9-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40
[  395.289279][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.298748][ T5408] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.00
[  395.330133][ T5408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.338452][   T24] usb 9-1: Product: syz
[  395.342697][   T24] usb 9-1: Manufacturer: syz
[  395.353609][ T5408] usb 1-1: Product: syz
[  395.375954][   T24] usb 9-1: SerialNumber: syz
[  395.383031][ T5408] usb 1-1: Manufacturer: syz
[  395.398985][ T5408] usb 1-1: SerialNumber: syz
[  395.638596][T11648] tipc: Started in network mode
[  395.643710][T11648] tipc: Node identity , cluster identity 4711
[  395.657709][T11648] tipc: Failed to set node id, please configure manually
[  395.667139][T11648] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  395.891082][T11646] loop8: detected capacity change from 0 to 8192
[  395.937645][T11646] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  396.082189][T11677] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3831'.
[  396.122748][T11681] x_tables: duplicate underflow at hook 2
[  396.128979][T11681] fuse: Bad value for 'fd'
[  396.247629][ T5408] usb 1-1: Can't get UAC3 power state for id 10
[  396.264134][ T5408] usb 1-1: 2:0: failed to get current value for ch 0 (-71)
[  396.275093][ T5408] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  396.312043][ T5408] usb 1-1: USB disconnect, device number 51
[  396.318757][   T59] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  396.413773][T11689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11689 comm=syz.4.3836
[  396.489156][T11685] 9pnet_fd: Insufficient options for proto=fd
[  396.514939][   T59] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  396.528356][   T59] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  396.537978][   T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.561279][   T59] usb 4-1: config 0 descriptor??
[  396.570757][   T59] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  397.270861][T11694] loop4: detected capacity change from 0 to 16
[  397.277840][T11694] erofs: (device loop4): mounted with root inode @ nid 36.
[  397.337366][  T506] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  397.408288][T11699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3840'.
[  397.466644][   T24] usb 9-1: unit 2 not found!
[  397.471680][   T24] usb 9-1: unit 8: unexpected type 0x0c
[  397.488578][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3841'.
[  397.508864][   T24] usb 9-1: USB disconnect, device number 59
[  397.554388][  T506] usb 1-1: Using ep0 maxpacket: 16
[  397.560701][  T506] usb 1-1: config index 0 descriptor too short (expected 51443, got 18)
[  397.562221][  T506] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  397.562247][  T506] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.562266][  T506] usb 1-1: Product: syz
[  397.562279][  T506] usb 1-1: Manufacturer: syz
[  397.562293][  T506] usb 1-1: SerialNumber: syz
[  397.562996][  T506] r8152-cfgselector 1-1: config 0 descriptor??
[  397.646532][T11374] tipc: Disabling bearer <udp:syz2>
[  397.646588][T11374] tipc: Left network mode
[  397.647498][T11710] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3844'.
[  397.649416][T11710] device vlan3 entered promiscuous mode
[  397.649429][T11710] device bridge0 entered promiscuous mode
[  397.683314][T11712] tipc: Started in network mode
[  397.683329][T11712] tipc: Node identity , cluster identity 4711
[  397.683346][T11712] tipc: Failed to set node id, please configure manually
[  397.683363][T11712] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  397.693946][T11712] fuse: Bad value for 'fd'
[  397.781812][  T506] r8152-cfgselector 1-1: Unknown version 0x0000
[  397.793310][  T506] r8152-cfgselector 1-1: Unknown version 0x2860
[  397.800001][  T506] r8152-cfgselector 1-1: bad CDC descriptors
[  398.005665][  T506] r8152-cfgselector 1-1: Unknown version 0x34d0
[  398.090455][T11715] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.097591][T11715] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.105575][T11715] device bridge_slave_0 entered promiscuous mode
[  398.115525][T11715] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.122884][T11715] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.130633][T11715] device bridge_slave_1 entered promiscuous mode
[  398.153442][T11374] device bridge_slave_1 left promiscuous mode
[  398.159706][T11374] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.167870][T11374] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.176410][T11374] device bridge0 left promiscuous mode
[  398.181958][T11374] device veth1_macvtap left promiscuous mode
[  398.188148][T11374] device veth0_vlan left promiscuous mode
[  398.216172][T11720] loop4: detected capacity change from 0 to 512
[  398.251827][T11139] ------------[ cut here ]------------
[  398.257342][T11139] WARNING: CPU: 0 PID: 11139 at fs/inode.c:335 drop_nlink+0xc5/0x110
[  398.265610][T11139] Modules linked in:
[  398.269771][T11139] CPU: 0 PID: 11139 Comm: syz-executor Tainted: G        W          syzkaller #0
[  398.279072][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  398.289361][T11139] RIP: 0010:drop_nlink+0xc5/0x110
[  398.294647][T11139] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 23 ae f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 cb 6e ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[  398.314439][T11139] RSP: 0018:ffffc900007cfab8 EFLAGS: 00010293
[  398.320530][T11139] RAX: ffffffff81c5ff15 RBX: ffff888134429ec0 RCX: ffff88811d0ee540
[  398.328666][T11139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  398.336889][T11139] RBP: ffffc900007cfae0 R08: 0000000000000003 R09: 0000000000000004
[  398.345110][T11139] R10: dffffc0000000000 R11: fffff520000f9f48 R12: dffffc0000000000
[  398.353133][T11139] R13: 1ffff110268853e1 R14: ffff888134429f08 R15: 0000000000000000
[  398.361457][T11139] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  398.370536][T11139] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  398.377216][T11139] CR2: 0000555573115948 CR3: 0000000110117000 CR4: 00000000003506b0
[  398.385304][T11139] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  398.393389][T11139] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  398.401517][T11139] Call Trace:
[  398.404800][T11139]  <TASK>
[  398.407743][T11139]  shmem_rmdir+0x5b/0x90
[  398.412079][T11139]  vfs_rmdir+0x393/0x500
[  398.416516][T11139]  incfs_kill_sb+0x105/0x220
[  398.421163][T11139]  deactivate_locked_super+0xb5/0x120
[  398.426560][T11139]  deactivate_super+0xaf/0xe0
[  398.431252][T11139]  cleanup_mnt+0x474/0x500
[  398.435892][T11139]  ? __kasan_slab_free+0x11/0x20
[  398.441023][T11139]  __cleanup_mnt+0x19/0x20
[  398.445482][T11139]  task_work_run+0x1e1/0x250
[  398.450091][T11139]  ? __cfi_task_work_run+0x10/0x10
[  398.455280][T11139]  ? free_nsproxy+0x21f/0x270
[  398.459985][T11139]  do_exit+0xa35/0x2660
[  398.464288][T11139]  ? __cfi_do_exit+0x10/0x10
[  398.469502][T11139]  ? __kasan_check_write+0x14/0x20
[  398.474615][T11139]  ? _raw_spin_lock_irq+0x95/0xf0
[  398.479678][T11139]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  398.485237][T11139]  ? ksys_write+0x1e4/0x250
[  398.489883][T11139]  ? zap_other_threads+0x2c1/0x2f0
[  398.495011][T11139]  do_group_exit+0x210/0x2d0
[  398.499629][T11139]  __x64_sys_exit_group+0x3f/0x40
[  398.504684][T11139]  x64_sys_call+0x7b4/0x9a0
[  398.509257][T11139]  do_syscall_64+0x4c/0xa0
[  398.513697][T11139]  ? clear_bhb_loop+0x30/0x80
[  398.518414][T11139]  ? clear_bhb_loop+0x30/0x80
[  398.523106][T11139]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  398.529182][T11139] RIP: 0033:0x7f943b99c799
[  398.533680][T11139] Code: Unable to access opcode bytes at 0x7f943b99c76f.
[  398.541079][T11139] RSP: 002b:00007fff5bfcef38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  398.549701][T11139] RAX: ffffffffffffffda RBX: 00007f943ba320b0 RCX: 00007f943b99c799
[  398.557921][T11139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  398.566017][T11139] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f943ba32050
[  398.574038][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5bfd01f0
[  398.582117][T11139] R13: 00007f943ba32050 R14: 00005555730f24e8 R15: 00007fff5bfd12c0
[  398.590175][T11139]  </TASK>
[  398.593204][T11139] ---[ end trace 0000000000000000 ]---
[  398.598839][T11139] ------------[ cut here ]------------
[  398.604431][T11139] WARNING: CPU: 1 PID: 11139 at fs/inode.c:335 drop_nlink+0xc5/0x110
[  398.612774][T11139] Modules linked in:
[  398.616775][T11139] CPU: 1 PID: 11139 Comm: syz-executor Tainted: G        W          syzkaller #0
[  398.626133][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  398.636323][T11139] RIP: 0010:drop_nlink+0xc5/0x110
[  398.641462][T11139] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 23 ae f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 cb 6e ab ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c
[  398.661457][T11139] RSP: 0018:ffffc900007cfab8 EFLAGS: 00010293
[  398.667621][T11139] RAX: ffffffff81c5ff15 RBX: ffff888134428bd8 RCX: ffff88811d0ee540
[  398.675707][T11139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  398.683774][T11139] RBP: ffffc900007cfae0 R08: 0000000000000003 R09: 0000000000000004
[  398.692070][T11139] R10: dffffc0000000000 R11: fffff520000f9f48 R12: dffffc0000000000
[  398.700065][T11139] R13: 1ffff11026885184 R14: ffff888134428c20 R15: 0000000000000000
[  398.708166][T11139] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  398.717281][T11139] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  398.724022][T11139] CR2: 00007f36205b1fe0 CR3: 000000010ff1d000 CR4: 00000000003506a0
[  398.732099][T11139] Call Trace:
[  398.735455][T11139]  <TASK>
[  398.738379][T11139]  shmem_rmdir+0x5b/0x90
[  398.742920][T11139]  vfs_rmdir+0x393/0x500
[  398.747323][T11139]  incfs_kill_sb+0x198/0x220
[  398.751943][T11139]  deactivate_locked_super+0xb5/0x120
[  398.757659][T11139]  deactivate_super+0xaf/0xe0
[  398.762377][T11139]  cleanup_mnt+0x474/0x500
[  398.766942][T11139]  ? __kasan_slab_free+0x11/0x20
[  398.772191][T11139]  __cleanup_mnt+0x19/0x20
[  398.776635][T11139]  task_work_run+0x1e1/0x250
[  398.781442][T11139]  ? __cfi_task_work_run+0x10/0x10
[  398.786571][T11139]  ? free_nsproxy+0x21f/0x270
[  398.791363][T11139]  do_exit+0xa35/0x2660
[  398.795551][T11139]  ? __cfi_do_exit+0x10/0x10
[  398.800483][T11139]  ? __kasan_check_write+0x14/0x20
[  398.805700][T11139]  ? _raw_spin_lock_irq+0x95/0xf0
[  398.810800][T11139]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  398.816584][T11139]  ? ksys_write+0x1e4/0x250
[  398.821317][T11139]  ? zap_other_threads+0x2c1/0x2f0
[  398.826501][T11139]  do_group_exit+0x210/0x2d0
[  398.831114][T11139]  __x64_sys_exit_group+0x3f/0x40
[  398.836240][T11139]  x64_sys_call+0x7b4/0x9a0
[  398.840759][T11139]  do_syscall_64+0x4c/0xa0
[  398.845233][T11139]  ? clear_bhb_loop+0x30/0x80
[  398.849942][T11139]  ? clear_bhb_loop+0x30/0x80
[  398.854661][T11139]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  398.860593][T11139] RIP: 0033:0x7f943b99c799
[  398.865211][T11139] Code: Unable to access opcode bytes at 0x7f943b99c76f.
[  398.872327][T11139] RSP: 002b:00007fff5bfcef38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  398.880905][T11139] RAX: ffffffffffffffda RBX: 00007f943ba320b0 RCX: 00007f943b99c799
[  398.888942][T11139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  398.896939][T11139] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f943ba32050
[  398.905060][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5bfd01f0
[  398.913223][T11139] R13: 00007f943ba32050 R14: 00005555730f24e8 R15: 00007fff5bfd12c0
[  398.921279][T11139]  </TASK>
[  398.924313][T11139] ---[ end trace 0000000000000000 ]---
[  399.026638][T11376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  399.034239][T11376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  399.042781][T11139] list_del corruption. prev->next should be ffff88813d8cd800, but was ffff88813d8cd4d0. (prev=ffff88811600e3d0)
[  399.054848][T11139] ------------[ cut here ]------------
[  399.060432][T11139] kernel BUG at lib/list_debug.c:61!
[  399.065955][T11139] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  399.072044][T11139] CPU: 0 PID: 11139 Comm: syz-executor Tainted: G        W          syzkaller #0
[  399.078408][T11715] device veth0_vlan entered promiscuous mode
[  399.081169][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  399.081182][T11139] RIP: 0010:__list_del_entry_valid+0x10f/0x130
[  399.094556][T11715] device veth1_macvtap entered promiscuous mode
[  399.097213][T11139] Code: e8 be 9f 88 02 0f 0b 48 c7 c7 60 82 ca 85 48 89 de e8 ad 9f 88 02 0f 0b 48 c7 c7 c0 82 ca 85 48 89 de 4c 89 f9 e8 99 9f 88 02 <0f> 0b 48 c7 c7 40 83 ca 85 48 89 de 4c 89 f1 e8 85 9f 88 02 0f 0b
[  399.097232][T11139] RSP: 0018:ffffc900007cfa48 EFLAGS: 00010246
[  399.135408][T11139] RAX: 000000000000006d RBX: ffff88813d8cd800 RCX: 3fb4c2b656776200
[  399.143437][T11139] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[  399.151438][T11139] RBP: ffffc900007cfa68 R08: ffffc900007cf747 R09: 1ffff920000f9ee8
[  399.159603][T11139] R10: dffffc0000000000 R11: fffff520000f9ee9 R12: dffffc0000000000
[  399.167598][T11139] R13: dffffc0000000000 R14: ffff88813d8cd4d0 R15: ffff88811600e3d0
[  399.175939][T11139] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  399.185065][T11139] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  399.191673][T11139] CR2: 000000110c2989c5 CR3: 000000010fba8000 CR4: 00000000003506b0
[  399.199756][T11139] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  399.207757][T11139] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  399.211825][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  399.211840][   T28] audit: type=1400 audit(1774676315.967:3723): avc:  denied  { write } for  pid=275 comm="syz-executor" path="pipe:[7845]" dev="pipefs" ino=7845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  399.215839][T11139] Call Trace:
[  399.215847][T11139]  <TASK>
[  399.215855][T11139]  __dentry_kill+0x25d/0x670
[  399.215894][T11139]  dentry_kill+0xc0/0x2a0
[  399.215914][T11139]  dput+0x42/0x80
[  399.215934][T11139]  incfs_free_mount_info+0x60/0x200
[  399.269040][T11139]  incfs_kill_sb+0x1b8/0x220
[  399.273664][T11139]  deactivate_locked_super+0xb5/0x120
[  399.279030][T11139]  deactivate_super+0xaf/0xe0
[  399.283704][T11139]  cleanup_mnt+0x474/0x500
[  399.288113][T11139]  __cleanup_mnt+0x19/0x20
[  399.292519][T11139]  task_work_run+0x1e1/0x250
[  399.297132][T11139]  ? __cfi_task_work_run+0x10/0x10
[  399.302255][T11139]  ? free_nsproxy+0x21f/0x270
[  399.306938][T11139]  do_exit+0xa35/0x2660
[  399.311111][T11139]  ? __cfi_do_exit+0x10/0x10
[  399.315723][T11139]  ? __kasan_check_write+0x14/0x20
[  399.321008][T11139]  ? _raw_spin_lock_irq+0x95/0xf0
[  399.326302][T11139]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  399.331847][T11139]  ? ksys_write+0x1e4/0x250
[  399.336454][T11139]  ? zap_other_threads+0x2c1/0x2f0
[  399.341573][T11139]  do_group_exit+0x210/0x2d0
[  399.346178][T11139]  __x64_sys_exit_group+0x3f/0x40
[  399.351327][T11139]  x64_sys_call+0x7b4/0x9a0
[  399.355826][T11139]  do_syscall_64+0x4c/0xa0
[  399.360236][T11139]  ? clear_bhb_loop+0x30/0x80
[  399.364904][T11139]  ? clear_bhb_loop+0x30/0x80
[  399.369572][T11139]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  399.375468][T11139] RIP: 0033:0x7f943b99c799
[  399.379868][T11139] Code: Unable to access opcode bytes at 0x7f943b99c76f.
[  399.386881][T11139] RSP: 002b:00007fff5bfcef38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  399.395378][T11139] RAX: ffffffffffffffda RBX: 00007f943ba320b0 RCX: 00007f943b99c799
[  399.403340][T11139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  399.411299][T11139] RBP: 0000000000000009 R08: 0000000000000000 R09: 00007f943ba32050
[  399.419291][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff5bfd01f0
[  399.427720][T11139] R13: 00007f943ba32050 R14: 00005555730f24e8 R15: 00007fff5bfd12c0
[  399.435696][T11139]  </TASK>
[  399.438708][T11139] Modules linked in:
[  399.442750][T11139] ---[ end trace 0000000000000000 ]---
[  399.448297][T11139] RIP: 0010:__list_del_entry_valid+0x10f/0x130
[  399.454829][T11139] Code: e8 be 9f 88 02 0f 0b 48 c7 c7 60 82 ca 85 48 89 de e8 ad 9f 88 02 0f 0b 48 c7 c7 c0 82 ca 85 48 89 de 4c 89 f9 e8 99 9f 88 02 <0f> 0b 48 c7 c7 40 83 ca 85 48 89 de 4c 89 f1 e8 85 9f 88 02 0f 0b
[  399.474897][T11139] RSP: 0018:ffffc900007cfa48 EFLAGS: 00010246
[  399.480959][T11139] RAX: 000000000000006d RBX: ffff88813d8cd800 RCX: 3fb4c2b656776200
[  399.489178][T11139] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[  399.497249][T11139] RBP: ffffc900007cfa68 R08: ffffc900007cf747 R09: 1ffff920000f9ee8
[  399.505306][T11139] R10: dffffc0000000000 R11: fffff520000f9ee9 R12: dffffc0000000000
[  399.513373][T11139] R13: dffffc0000000000 R14: ffff88813d8cd4d0 R15: ffff88811600e3d0
[  399.521436][T11139] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  399.530444][T11139] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  399.537107][T11139] CR2: 000000110c2989c5 CR3: 000000010fba8000 CR4: 00000000003506b0
[  399.545182][T11139] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  399.553171][T11139] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  399.561182][T11139] Kernel panic - not syncing: Fatal exception
[  399.567350][T11139] Kernel Offset: disabled
[  399.571745][T11139] Rebooting in 86400 seconds..