last executing test programs:

2m4.812743903s ago: executing program 32 (id=9):
openat(0xffffffffffffff9c, &(0x7f00000075c0)='./file1\x00', 0x1c3b41, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000007600)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000007640)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000007680)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f00000076c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007700)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000007740)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000077c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000007800), 0x4000087, 0x2, 0x0)
close(0x3)
syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640)={[{@quota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f00000006c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f0000000b80)='a', 0x200000c1, 0x9000)
socket$inet6(0xa, 0x2, 0x3a)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'batadv_slave_0\x00'})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000dc0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000e00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000f40)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r6, &(0x7f0000001040)="0e0412b60f0c0df0f2747782bb714a766118ff5aa329fa", 0xfdef)

1m52.764853357s ago: executing program 0 (id=69):
syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x80401c, &(0x7f0000005b40)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000006280)="$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")
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120110010768fd408107e8552b71010203010902120001040300250904c903004d996d01930479378e1105ecb5adf1c88626fcf72b7e816e6db6a6201c0725bd9426"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="180000009100000000000000010a000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x7, 0x1000, &(0x7f0000000440)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x7c)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0xa82086, 0x0, 0x31, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

1m50.778806211s ago: executing program 0 (id=80):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x802, &(0x7f0000001080)={[{@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@rodir}, {@fat=@showexec}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@numtail}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@shortname_winnt}, {@rodir}, {@utf8no}, {@fat=@flush}]}, 0x29, 0x33e, &(0x7f00000006c0)="$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")
r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xfd, 0x2a8, &(0x7f0000000400)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001040)='.\x00', 0x101000, 0x108)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0xc, 0x8b}, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000d80)="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")
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2ac0ff00000000180200000a0000010000000000000000180200000a00000100000000000000008500000017000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004100000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000180)={0x6, 'ip6gre0\x00', {0x4000000}, 0x1c24})
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000002c0), 0x4)
sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0xc091}, 0x4002)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000003c0)='bridge0\x00', 0x10)
write(r5, &(0x7f0000000e80)="842a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
getdents64(r1, &(0x7f0000001b80)=""/4104, 0x1008)

1m49.866615284s ago: executing program 0 (id=87):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001c40)={0x1, [{0x1, 0x0, 0x80000005, 0x0}, {0x7, 0x0, 0x91, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x474c, 0x0}, {0x1, 0x10, 0x8, &(0x7f0000001e00)="8702"}, {0x2, 0x0, 0xc, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x400, 0x0}, {0x0, 0x0, 0xfffffffc, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x2e0, 0x0}, {0x1, 0x0, 0x40000, 0x0}]})
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000001e40)={0xbc, 0x0, 0x4})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000001ec0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
setns(0xc9, 0x40000000)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffe, @loopback}, 0x6, 0x0, 0xffffffff}}, 0x2e)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001700)=@filter={'filter\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x300, 0x0, 0x230, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @local, [0xff000000, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 'veth0_to_bond\x00', 'caif0\x00', {}, {0xff}, 0x89, 0x9, 0x1, 0x2}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x800, 0x9], 0x8, 0x2, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @empty, @private2, @loopback, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private1, @dev={0xfe, 0x80, '\x00', 0x28}, @dev={0xfe, 0x80, '\x00', 0x27}], 0x6}}, @common=@mh={{0x28}, {'(\v', 0x1}}]}, @REJECT={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @remote, [0xffffffff, 0xff, 0x0, 0xff], [0xff, 0x0, 0x0, 0xff000000], 'veth0\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x89, 0x6, 0x0, 0xe}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x1, 0x81}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0x0, 0x0, 0xff, 0xff000000], 'wg1\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x5c, 0xb, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@frag={{}, {[0x8, 0x8], 0x8, 0x10, 0x2}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xd3)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4c142, 0x0)
sendfile(r6, r6, 0x0, 0xe3aa6ea)
ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000100)={'veth1_to_hsr\x00', {0x2, 0x0, @local}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000540000001500020000000000bf010000000000008500000056000000b70000000000000095"], &(0x7f0000002700)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="001122334455667788a918dbf57e", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m49.821152869s ago: executing program 33 (id=87):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001c40)={0x1, [{0x1, 0x0, 0x80000005, 0x0}, {0x7, 0x0, 0x91, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x474c, 0x0}, {0x1, 0x10, 0x8, &(0x7f0000001e00)="8702"}, {0x2, 0x0, 0xc, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x0, 0x0, 0x400, 0x0}, {0x0, 0x0, 0xfffffffc, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x4, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x2e0, 0x0}, {0x1, 0x0, 0x40000, 0x0}]})
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000001e40)={0xbc, 0x0, 0x4})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000001ec0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0)
r3 = socket(0x200000000000011, 0x2, 0x0)
setns(0xc9, 0x40000000)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0xfffe, @loopback}, 0x6, 0x0, 0xffffffff}}, 0x2e)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001700)=@filter={'filter\x00', 0xe, 0x4, 0x4a0, 0xffffffff, 0x300, 0x0, 0x230, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @local, [0xff000000, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 'veth0_to_bond\x00', 'caif0\x00', {}, {0xff}, 0x89, 0x9, 0x1, 0x2}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x800, 0x9], 0x8, 0x2, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @empty, @private2, @loopback, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x37}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private1, @dev={0xfe, 0x80, '\x00', 0x28}, @dev={0xfe, 0x80, '\x00', 0x27}], 0x6}}, @common=@mh={{0x28}, {'(\v', 0x1}}]}, @REJECT={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x41}, @remote, [0xffffffff, 0xff, 0x0, 0xff], [0xff, 0x0, 0x0, 0xff000000], 'veth0\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x89, 0x6, 0x0, 0xe}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x1, 0x81}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0x0, 0x0, 0xff, 0xff000000], 'wg1\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x5c, 0xb, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@frag={{}, {[0x8, 0x8], 0x8, 0x10, 0x2}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xd3)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x4c142, 0x0)
sendfile(r6, r6, 0x0, 0xe3aa6ea)
ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, &(0x7f0000000100)={'veth1_to_hsr\x00', {0x2, 0x0, @local}})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000540000001500020000000000bf010000000000008500000056000000b70000000000000095"], &(0x7f0000002700)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="001122334455667788a918dbf57e", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m48.179070717s ago: executing program 1 (id=102):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000840)='fdinfo/3\x00')
close(0x3) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x25d) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x482, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x1007, 0x41, 0x0, 0x83, "00000000000000000000ffff00"})
r2 = syz_open_pts(r1, 0x40)
r3 = dup3(r2, r1, 0x80000) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000140)=0x2, 0x4)
bind$inet(r4, &(0x7f00000004c0)={0x2, 0x5e21, @empty}, 0x10)
connect$inet(r4, &(0x7f00000028c0)={0x2, 0x4e24, @loopback}, 0x10) (async)
r5 = socket(0x8000000010, 0x2, 0x0)
write(r5, &(0x7f0000002900)="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", 0xfc) (async)
poll(&(0x7f0000000200)=[{r3, 0x80}], 0x1, 0x100) (async)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000240)={0x5, 0x7ff, 0x213c, 0x7fffffff, 0x6, "ba5d02d80d23f543af6ff1c21cb901de869d6b"}) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async)
syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x35da, 0x2, 0x7, 0x367}, 0x0, 0x0, 0x0) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syz_tun\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r9, r7, 0x25, 0x0, @void}, 0x10) (async)
syz_emit_ethernet(0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6012000800103aedfd8000000000000000000000000000bbfe8000000000000000000000000000aa86009078010601000300000002000000"], 0x0) (async)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x400040, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0)

1m48.102132135s ago: executing program 1 (id=104):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x8)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x275a, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c)
r4 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x81, 0xffffffff, 0x20000}, 0x10)
write(r4, &(0x7f0000000480)="e50100001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5)
syz_emit_ethernet(0x80, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x4c, 0x0, 0x148, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x8000000, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'xfrm0\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)
recvmmsg(r3, &(0x7f0000000440), 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f00000002c0)=r2, 0x8)
mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})
umount2(&(0x7f0000000200)='./file0\x00', 0xb)
syz_usb_connect(0x0, 0x63, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010169c0320904000007058202000200090400010408"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x8) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x275a, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) (async)
socket(0x10, 0x2, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x81, 0xffffffff, 0x20000}, 0x10) (async)
write(r4, &(0x7f0000000480)="e50100001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) (async)
syz_emit_ethernet(0x80, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000400)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x4c, 0x0, 0x148, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x8000000, 0x0, 0x2, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'xfrm0\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) (async)
recvmmsg(r3, &(0x7f0000000440), 0x1, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f00000002c0)=r2, 0x8) (async)
mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async)
umount2(&(0x7f0000000200)='./file0\x00', 0xb) (async)
syz_usb_connect(0x0, 0x63, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010169c0320904000007058202000200090400010408"], 0x0) (async)

1m46.339149756s ago: executing program 1 (id=123):
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xf, 0x8a, 0x6, 0x6, 0x3, 0x3, 0xc0, 0x18a, 0x40, 0x3c5, 0x2, 0x401, 0x38, 0x1, 0x6b7, 0x0, 0x5}, [{0x3, 0x1ff, 0x7ff, 0x907, 0x8, 0x8, 0x34f, 0x4}], "488a7252a031ce860004fb9550098b3aa7c3f745144581d773a0dfd5be6dc4b690f1b60fc511ef16ce606e5688b99ee331fdaaca297fae92934fec6d9c6354f8a09236e5114634790043ee3556bf769eef59b1a01bc0b3bf1d15900ba323df8fee4c3f48580b1584b542e82b2ba25d9dff4580148c2a435064bb9948d912622ed6efb20c0e58b66bd5f6af2a5b316e5f4cb86717c050d17655af04280bf261e058b54b7711f1465facf6fc3d199bdf83393188a19f69b9fd68f520", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x933)
io_setup(0x3ff, &(0x7f0000000040)=<r3=>0x0)
io_submit(r3, 0xf000, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)='m', 0xfffffdfc}])
io_destroy(r3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00'}, 0x94)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000050020c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf8, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
syz_usb_connect$midi(0x46f8427d0bd255fe, 0x3c, &(0x7f0000000000)=ANY=[], 0x0)

1m45.534627698s ago: executing program 1 (id=132):
r0 = add_key(&(0x7f00000005c0)='asymmetric\x00', 0x0, &(0x7f0000000600)="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", 0x559, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000b80)={r0}, 0x0, 0x0, 0x0)
r1 = add_key(&(0x7f0000000bc0)='asymmetric\x00', 0x0, &(0x7f0000000c00)="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", 0x1d8, 0xfffffffffffffffd)
r2 = add_key$keyring(&(0x7f0000000e00), &(0x7f0000000e40)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r3 = add_key$keyring(&(0x7f0000000e80), &(0x7f0000011500)={'syz', 0x1}, 0x0, 0x0, r2)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000011540)='asymmetric\x00', &(0x7f0000011580)=@keyring={'key_or_keyring:', r2})
keyctl$link(0x8, r1, r3)
keyctl$unlink(0x9, r0, r1)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x410, &(0x7f0000000200)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db3230"], 0x1, 0x1060f, &(0x7f0000000ec0)="$eJzs3EuLW2UYB/AnE6c3ax2kF93oAREmYEIzvaAgMmqLFmwpXhauNJOkIW2SM0zS6di1rupHcCuIuPMzuPEbuC4uBHEhuKtUcs5J6diLtk2bceb3g/R/zpv3PHnfQzZP0kkAO9ZC8ucfpTgQeyOiHBH7I7Lj+YgoTSYt5/F8RLwUEXO3PUrF+K2BXRGxLyIOjIvnNUvFUyf/un7jmxfOvHHtu+uV+q/ffj27XQOz9kpE9Ffz4yv9PNNOnheL8cZ6N8v+8fUi8yf6l4rzNM8r7ZWswpXGZF4jy2OdfH66enk4zgu9RnOcne6FbHx1kL/gcL0zqZNdcLGxlp232itZdodplp2r+bo2irw6HOV1WkW9z7PyMRpNMh9vb7Tz/axeyrI5GBXjed201d4Y53qRxctFM+21snWsPPRt3vLe7w4ubyTr7bVhNx0kJ2r112r1k9X6Wtpqj9rHq41+6+TxZLHTG0+rjtqN/nInTTu9dq2Z9ivJYqfZrNbryeKp9kq3MUjq9dqx2tHqiUpx9Gry7rmPk14rWRzn293B5VG3N0wupGtJfkUlWaode72SvFxPPjx7Pjm/HKfPnv/o01OfnHvr7Jl3ikl3LCtZXDq6tFStH60u1Stbc/+7ivoPuP8PTt97/+V4DPsvPdrl7HTeQAAP7F79f0n/DzxGs+7/F2bc/8/9e/8/aeGitZLccf9ulh/kbm9dW6z/v1//e7/+//drO3v/D037xiPxBgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2LF+mf/hvexgIT9/uhh/phh6LiKORMThiDgUETfvohy7NtU8GBGl4vhu8+f/sYYfS5FVGF+zu3jsi4jl4nHj2cd9FwAAAGD7+v6nL76MKI8Ps3/enPWCeJKKD232TKte9pHPU9OqdjArtjGlaocmJaficETML/w2pWpHImJu/2dTqvaflDfFntuilMfck1wNAADwZGzuBKbWvQEAALDlfDXrBTAb2fe1xf/FL74L3p1H8YXg3k1nAAAAwP/Niz/f+hN9AAAAYPvK+n+//wcAAADbW/77fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/s3MvOWrDcByA/5SmQB8qqnhchVXVJQsO0SN02QO0t+mOM1RCnIPZzRFGMMLxIGCYzcQIxHyflNiO4JcEiYXtxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnNNdNZ/+W/752zRnvWmmzN0AAAAAp6yq+TRV+nX7Uz7+JR/6FhHjiBhFxDAiTvXd2/FhL7EVg7Svnfp8dXQN/yNSwvY7nbx9jIgfeXv4ev7fAQAAAG7VcjGZRbS31bT7vqvxBuRBm26pvDTk875U2iCF/S6UNnyKLGIUEVX/vlDaOCLeff6ZWy/+/3qFTrd3klx094pWdHdjdwAAwG057AkU670BAABwdX5d+gK4jDTNl5/Fz3PBnbrIE4K9gxYAAABwvY7ftt/xmC8AAADcvtT/f7b+Xx4VeP36f2H9PwAAALgi9fp/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnNOqmk+Xi8msac5600yZuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR/bnHQVCIAzCYO/6vtPg/Y8lDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/tzdwIhEARhsO/8z2kx/7CkQWMQoQoWPmaYhwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsL+3NsmDIRxHH7tJErcJiOkt/iYgYYKwQh8SEiWPAMDsBANFa3FIrACCDho6UzB8zT/n05X3AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB7Oj298RER2ecj88iHq7/D5eAr8nXTDL6vmW2O+/rnlpPtbpTyN8b/RUQUkbXwGwCA9pX3TbFYVvNO2m7aXtp+2nJaV7NXPhoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMzt38BLFFwcA/O3qrD9/nTqqEEGHuuSmZhl46SB4D4K6iW4irRW6BxUv/gVRp732L+St/oX+gaBDCR46eCjoEkSxu7P6llRWgplBPx/4znx1d9+8twvDfue9WQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiTg51wqZuXQgijg0d5y8dv24vH7d+//DTaja/3312J22w1kYQQnqzUa7cyHEvRrW9uPV2o12trfSTl9DV9PVlSxGQo/QiL0h9JYZP4LFHK/sQEAMC5k6TR+nb5Jdmdb/2vNBvC7ze99f/1KA+n1P/7zZEkNEfG9psjY782PjTiY8X1/0RmIyyMoZMeqDZWX1TXN7durqwuLNeWa8+mpian70zfvnd3stq+VlJ1xQQAAIB/U0kjrv/Ls3/P//8f5eH0+n+sGw/nHj+KjzVwsev/Ex1N+uXdEwAAgIvt8tUf349bfVmqVMLGQqOxNtHZHv492dnm0NUzG0ojrv8HZvPuFQAAAJCFg51Sz/z/UpSHPuf/x99u78VtDoQQhtP5//HF5/Wl7IZTaFncTpz3GAEAAMjXcBrx/H/SXv9fPlzyUA4h3LjWydOfAeyr/v/8+kHPTevx+v+p7IZYSOWZzvvR3s+EMDiTd48AAAA4z/5Lo1Xs7yW782s/X81VrP8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjDjh2jRA9EAQDOZjb/X4kLVmrlBUQvsGIhiI2HEBcETyCCeACxtfQOlt5hawUbC8stvIHMJKPLWqRZEmS/DybvkQyZl0mTFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFazw588xMOozsvm3Mvn9VmMrwsx+njY3I4j5oMui/4b5rbk4PfVstNaAAAAWBEh9/dFUbxXT8cxluPU/1d5TmxJH9fqPDevi31/js/3b1u5/7853bn6XmhUrxNvOrm4PN/r7Al7NgmtU9ZbZwzTzqdfAyG9kPLkdmNWpf0c3E2nR/9S+n85JQMAy7ebY5Pk76EY9/ssDICVMWxGMdf/h3G/NQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB04SsAAP//keBapg==")
r4 = openat(0xffffffffffffff9c, &(0x7f0000012140)='./file1\x00', 0xa0242, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r4)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
memfd_create(&(0x7f0000000500)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
r6 = open(&(0x7f0000000540)='./file0\x00', 0x66842, 0x0)
fallocate(r6, 0x0, 0x0, 0x8800000)
r7 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x882)
ioctl$EVIOCGMASK(r7, 0x80104592, &(0x7f0000000340)={0x1, 0xe4ff71c170d132d5, &(0x7f0000000380)="fccdccc6aefa"})
ioctl$EVIOCGSW(r7, 0x8040451b, &(0x7f00000003c0)=""/133)
accept4(r4, 0x0, &(0x7f00000004c0), 0x80000)
write(r5, &(0x7f00000001c0)='0fc5:1227:b\nih', 0xe)
creat(&(0x7f0000000480)='./proc\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000012180)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000121c0)='./proc\x00', 0x4)
ioctl$XFS_IOC_GOINGDOWN(r4, 0x8004587d, &(0x7f0000000000)=0x1)

1m45.049218668s ago: executing program 1 (id=133):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000200)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000240)='GPL\x00'}, 0x80)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)=""/18, 0x12})
openat2(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x8}, 0x18)

1m44.761844617s ago: executing program 1 (id=137):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x804800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1229, &(0x7f00000005c0)="$eJzs3E1rXFUYB/AnY9q81Lyotdou9IAbcXFpsnAlSJAUJANKbYRWEG7NjQ4zzpS5Q2BErK7c+jlcuxP8Btn4Gdxl02UX4pXc6dQkpsZCmynp77fIfbjn/HPO4TIDZ5gze+/99HV7u8y280E0pqaicSci3U+RohFjb2yMrjdvbaw1m+vXU7q2dmPl3ZTS4pu/ffbtTERc+PSXxV9nYnf58717q3/sXtq9vPfXja9aZWqVqdsbpDzd7vUG+e3OYtpqle0spY87RV4WqdUti/6B9iJtvxMRw5R3txbm7/SLskx5d5jaxTANemnQH6b8y7zVTVmWpYX54JHOndxl8+f7VVVFVNW5OB9VVVVzMR8X4sVYiMX4PiJeipfjlbgYr8aleC1ej8t1r9OYPgAAAAAAAAAAAAAAAAAAADw//uv8/1Isn3D+f26ykwcAAAAAAAAAAAAAAAAAAIAz4pObtzbWms316ynNRnR+3Nnc2RxdR+3L+386UcTVWIo/oz79PzKqr33YXL+aasvxQ+fug/zdnc0X6vzaOL9S/5zAg/x03TbOr4zy6XB+Jub389vRqvOrsRQXjx9/9dj8bLz91oF8Fkvx+xfRi05s1WP/k/9uJaUPPmoeyV+p+wEAAMBZkKWHjt2/Z9mj2kf5h/vrkz8fOLK/no4r05NdOxHl8Jt23ugU/brojIvZf915ekWc4lhPtoi4V9XFzOGmxv/8P/sP4HEGbcTEl3ygmHo2pvEEivGL4VmZz0SKuTh8Z6JvS5yS8dM/P+mJAAAAAAAAAAAA8Fie8vcKp6Pol0fHfH8ySwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFABAAD//9+2v1o=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events.local\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000001d00)={'#! ', './file1', [], 0xa, "78083487354d736d72b8cb12d3151bd5e84783615e26619277c7730244e5f93572651631a6a84dac6c8b7c9a34d9cd8ae2dc68e3959c1ab5af89bf3096c3d6fbd43ee838754836e4d490fc5a6d66caa46e8070121b5198df4857"}, 0x65)
mlock2(&(0x7f0000213000/0x1000)=nil, 0x1000, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000018c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x40000000, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000018c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x40000000, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
close(r4) (async)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000001c00)={0x11, 0x17, r8, 0x1, 0x7, 0x6, @local}, 0x14)
getsockname$packet(r7, &(0x7f0000001c80)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001cc0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="38000000550001050000000000c4000007008209", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0xd5a481077750d15d}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="38000000550001050000000000c4000007008209", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0xd5a481077750d15d}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001980)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000001ac0)={'syzkaller0\x00', @multicast})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), r11) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), r11)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x4800) (async)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x4800)
openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x480100, 0x0) (async)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x480100, 0x0)
close(r13)
socket$unix(0x1, 0x5, 0x0)

1m44.726063181s ago: executing program 34 (id=137):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x804800, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1229, &(0x7f00000005c0)="$eJzs3E1rXFUYB/AnY9q81Lyotdou9IAbcXFpsnAlSJAUJANKbYRWEG7NjQ4zzpS5Q2BErK7c+jlcuxP8Btn4Gdxl02UX4pXc6dQkpsZCmynp77fIfbjn/HPO4TIDZ5gze+/99HV7u8y280E0pqaicSci3U+RohFjb2yMrjdvbaw1m+vXU7q2dmPl3ZTS4pu/ffbtTERc+PSXxV9nYnf58717q3/sXtq9vPfXja9aZWqVqdsbpDzd7vUG+e3OYtpqle0spY87RV4WqdUti/6B9iJtvxMRw5R3txbm7/SLskx5d5jaxTANemnQH6b8y7zVTVmWpYX54JHOndxl8+f7VVVFVNW5OB9VVVVzMR8X4sVYiMX4PiJeipfjlbgYr8aleC1ej8t1r9OYPgAAAAAAAAAAAAAAAAAAADw//uv8/1Isn3D+f26ykwcAAAAAAAAAAAAAAAAAAIAz4pObtzbWms316ynNRnR+3Nnc2RxdR+3L+386UcTVWIo/oz79PzKqr33YXL+aasvxQ+fug/zdnc0X6vzaOL9S/5zAg/x03TbOr4zy6XB+Jub389vRqvOrsRQXjx9/9dj8bLz91oF8Fkvx+xfRi05s1WP/k/9uJaUPPmoeyV+p+wEAAMBZkKWHjt2/Z9mj2kf5h/vrkz8fOLK/no4r05NdOxHl8Jt23ugU/brojIvZf915ekWc4lhPtoi4V9XFzOGmxv/8P/sP4HEGbcTEl3ygmHo2pvEEivGL4VmZz0SKuTh8Z6JvS5yS8dM/P+mJAAAAAAAAAAAA8Fie8vcKp6Pol0fHfH8ySwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFABAAD//9+2v1o=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events.local\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000001d00)={'#! ', './file1', [], 0xa, "78083487354d736d72b8cb12d3151bd5e84783615e26619277c7730244e5f93572651631a6a84dac6c8b7c9a34d9cd8ae2dc68e3959c1ab5af89bf3096c3d6fbd43ee838754836e4d490fc5a6d66caa46e8070121b5198df4857"}, 0x65)
mlock2(&(0x7f0000213000/0x1000)=nil, 0x1000, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000018c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x40000000, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000018c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x40000000, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x0, 0x0)
close(r4) (async)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'bridge0\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000001c00)={0x11, 0x17, r8, 0x1, 0x7, 0x6, @local}, 0x14)
getsockname$packet(r7, &(0x7f0000001c80)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001cc0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="38000000550001050000000000c4000007008209", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0xd5a481077750d15d}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e00)=ANY=[@ANYBLOB="38000000550001050000000000c4000007008209", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0xd5a481077750d15d}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001980)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000001ac0)={'syzkaller0\x00', @multicast})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), r11) (async)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000001b00), r11)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x4800) (async)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x4800)
openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x480100, 0x0) (async)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x480100, 0x0)
close(r13)
socket$unix(0x1, 0x5, 0x0)

1m43.125352105s ago: executing program 5 (id=152):
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = eventfd2(0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000d00)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000d40)=[&(0x7f0000000d80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0x200, r1, 0x0, 0x0, 0x1000000006, 0x0, 0x3, r1}])
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0xca02})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x20}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x2f8)
socket$netlink(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000780)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000007c0)={'veth0_to_batadv\x00', 0x400})
preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/23, 0x17}], 0x1, 0x0, 0x1)

1m42.931105075s ago: executing program 5 (id=153):
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socket$inet(0x2, 0x3, 0x2)
r0 = socket$igmp(0x2, 0x3, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000009c0)={0x2, &(0x7f0000000a00)=[{0x28, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r1, &(0x7f0000000a40), 0x400000000000159, 0x40840)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000280), 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf25010000001c0002800c00018008000100080000000c000180080001000000008004000180"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4)
getsockopt$inet_mreqn(r0, 0x0, 0x1b7ff8b8ff44a146, &(0x7f0000000140)={@private, @initdev, <r6=>0x0}, &(0x7f0000000180)=0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x4076cbba9945d516, &(0x7f0000000200)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', <r10=>0x0})
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000006c0)={'lo\x00', <r12=>0x0})
r13 = gettid()
sched_setscheduler(r13, 0x5, &(0x7f0000000a40)=0x3)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r14, 0x89f1, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', r12, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x1, 0xfffd, 0x8, 0x4, 0x0, @empty, @private}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'ip6gre0\x00', &(0x7f0000000780)={'syztnl1\x00', <r15=>0x0, 0x4, 0x1, 0x8, 0x8, 0x8, @mcast2, @rand_addr=' \x01\x00', 0x40, 0x20, 0x1c000000, 0x1}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xcc, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000002c0)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x3, 0x16, 0xfffffffe, 0x1}, 0x3c)
r16 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r16, 0x0, 0xd4, &(0x7f00000003c0)=0xe, 0x4)

1m42.888803539s ago: executing program 5 (id=154):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0)
setns(0xc9, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, 0x13, 0x301, 0x0, 0x25dfdbfa, {0x1}}, 0x14}}, 0x20000000)
recvmmsg(r2, &(0x7f00000003c0), 0x4000087, 0x2, 0x0)
capset(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x80340, 0x168)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
getpid()
recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f00000004c0)={0x80, 0x6, 0x301, 0x0, 0x0, 0x101, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0xc)
mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x0, 0x0)
getsockopt$inet6_int(r5, 0x29, 0x4c, 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0xf2b2, 0xfffc, 0xfff, 0xa36e, 0x7, "ec0b23334bd9903a"})
r6 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}})
ioctl$NILFS_IOCTL_GET_SUINFO(r5, 0x80186e84, &(0x7f0000000440)={&(0x7f00000003c0)=[{0xb32, 0x2}], 0x1, 0x10, 0x800, 0x5})

1m41.338199118s ago: executing program 5 (id=155):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/image_size', 0x20202, 0x110)
write$P9_RSTAT(r0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x16c)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000cc0)='./mnt\x00', 0x1400)
r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4c, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES16=r2, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000200)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0xa6, &(0x7f00000009c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef4}, 0x94)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="12000000010000000808d23a1ccc26463cc327b79f22d2430000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e80)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="4926120635a22ebca4d05c5333538dc92d72cabcb2ec662eb04ba0220a589ab92619f9cf348541d1f03bcec8b48f66304107ce7a35444d494f243880fff3f7e688b5b3d738d84b98447221719b0bb095da1cd0a2bf1d0a9fa668e26c42a28cbef331340411e2812531ffe08a0704f3122cf4b930a725c6d5434c6acbe59a059347714a7bb963b264dc64890532e8766cf4c30d0a726e598f416a4771b91e10917058a96a1ef37b4a6f5d7c249a39fa1f4de78890f834557744a898970208acef4997c9411ace3809e8012ec32947b622d7387645620b8235eb8bcbe2a5521fc329206a88272f468ea00c5167cbea", @ANYRES32, @ANYBLOB="ec8b26fec8138ef03aa777e39a85135ef3b5d06b9d00ecd616570e759baacf754197af15c315655f21130aa745f955e20af9690393cc036a60d4a8d3acb42f809ac25b24dad1e878ff292a5c5b8b9a411be5e8264317f64b2545e7e43f056f2854b06b1ec5973ae4e7a366c93ccd4a5ca8f021af6e56ecc82cc9d420958d44c9f2", @ANYRES32=r1], 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r5, &(0x7f0000000b80), &(0x7f0000000bc0)=@tcp6=r3}, 0x20)
sendmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000c80)="aa", 0x1}], 0x1}}], 0x1, 0x81)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_buf(r6, 0x6, 0xb, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000640)=0xc)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000006c0)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt\x00', 0x1ff)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mount(&(0x7f0000000780)=@filename='./dev/sda1\x00', &(0x7f00000007c0)='./mnt\x00', &(0x7f0000000800)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f0000000840)='./mnt\x00')
openat$sysfs(0xffffffffffffff9c, 0x0, 0x10200, 0x42)

1m41.283865023s ago: executing program 5 (id=156):
mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil)
madvise(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x4)

1m41.12066206s ago: executing program 5 (id=157):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000019c40)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x203, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, 0x0)
capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000000)=0x9, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
write(r4, &(0x7f0000000140)="2600000022004701050007008980e8ff02006d20002b1f00c0e9f7094a51f10101033500b088", 0x26)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getgroups(0x4, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000440), 0x0)
close(r6)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000019c80)={0x6, 0xc, &(0x7f0000019d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000019dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8, 0xffffffffffffffff, 0x2000000}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019e00)={r7, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000019e80)="040003076804268c989e", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m41.114391261s ago: executing program 35 (id=157):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000019c40)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x203, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, 0x0)
capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x200002, 0x200003, 0x801, 0x4, 0x7})
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000000000)=0x9, 0x4)
recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
write(r4, &(0x7f0000000140)="2600000022004701050007008980e8ff02006d20002b1f00c0e9f7094a51f10101033500b088", 0x26)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getgroups(0x4, 0x0)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000440), 0x0)
close(r6)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000019c80)={0x6, 0xc, &(0x7f0000019d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000019dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8, 0xffffffffffffffff, 0x2000000}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019e00)={r7, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000019e80)="040003076804268c989e", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m40.53419988s ago: executing program 8 (id=158):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1010040, &(0x7f0000000240)={[{@nolazytime}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@auto_da_alloc}, {}, {@bh}]}, 0xfe, 0x59c, &(0x7f00000002c0)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./file1\x00', 0x101042, 0x15)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000140), 0x3, 0x42f, &(0x7f0000000940)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d80)='memory.stat\x00', 0x275a, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x40241, 0x0)
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000e40)='./file1\x00', 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0x1505, &(0x7f0000001540)="$eJzs3QnYjtXWOPC19t43L4knybzXXjdPMmySJEOSDEmSJEmmhCRJkpB4yZSEJGROModkCsk8T5mT5EiSJCQk2f9LnT7fOZ3v6zv/c76/8z/v+l3XfT17Xfe99vCsx3MPl/d9v+kwqEq9qhXrMDP8Q/DXl1QASAGAvgCQBQAiACiZtWTWS/szaEz9xwYR/1wPTr3SMxBXktQ/bZP6p21S/7RN6p+2Sf3TNql/2ib1T9uk/kKkZVun5bpGtrS7/ePP/1N+fZHn//8fkvN/2ib1/3dzOsPfc7TU/9/JxRDC35ch9U/bpP5pm9Q/bZP6p21S/7RN6i9EWnalnz/LdmW3K/35E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRNpwLlxkA+K19peclhBBCCCGEEEKIf56Q/krPQAghhBBCCCGEEP/7EBRoMBBBOkgPKZABMsJVkAmuhsyQBRJwDWSFayEbXAfZIQfkhFyQG/JAXrBA4IAhhnyQH5JwPRSAG6AgFILCUAQ8FIVicCMUh5ugBNwMJeEWKAW3QmkoA2WhHNwG5eF2qAB3QEW4EypBZagCVeEuqAZ3Q3W4B2rAvVAT7oNacD/UhgegDjwIdeEhqAcPQ314BBpAQ2gEjaHJ/1X+C9AFXoSu0A1SoTv0gJegJ/SC3tAH+sLL0A9egf7wKgyAgTAIXoPB8DoMgTdgKAyD4fAmjICRMApGwxgYC+PgLRgPb8MEeAcmwiSYDFNgKkyD6fAuzICZMAveg9nwPsyBuTAP5sMC+AAWwiJYDB/CEvgIlsIyWA4rYCWsgtWwBtbCOlgPG2AjbILNsAW2wsewDbbDDtgJu2A37IFPYC98CvvgM9gPn/+d+Wf/Kr8jAgIqVGjQYDpMhymYghkxI2bCTJgZM2MCE5gVs2I2zIbZMTvmxJyYG3NjXsyLhISMjPkwHyYxiQWwABbEglgYC6NHj8WwGBbHm7AElsCSWBJLYSksjWWwDJbDclgey2MFrIAVsSJWwkpYBavgXXgX3o3VsTrWwBpYE2tiLayFtbE21sE6WBfrYj2sh/WxPjbABtgIG2ETbIJNsSk2w2bYAltgS2yJrbAVtsbW2AbbYFtsi+2wHbbH9tgBO2BH7ISd8AV8AV/EF7EbVlLdsQf2wJ7YE3tjH+yDL2M/fAVfwVdxAA7EQfgavoav4xA8g0NxGA7H4VhejcRROBpZjcVxOA7H43icgBNwIk7CSTgFp+I0nI7TcQbOxJn4Hs7G9/F9nItzcT4uwAW4EBfhYlyMS/AsLsVluBxX4EpchStxDa7FNbgeN+B63ISbcAtuwY/xY9yO23En7sTduBs/wU/wU/wUB+B+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwJJ7Ck3gaT+MZPIvn8Byex/N4AS/gRbx46R+/usQoo9KpdCpFpaiMKqPKpDKpzCqzSqiEyqqyqmwqm8qusqucKqfKrXKrvCqvIkWKVazyqXwqqZKqgCqgCqqCqrAqrLzyqpgqpoqr4qqEKqFKqltUKXWrKq3KqOa+nCqnyqsWvoK6Q1VUFVUlVVlVUVVVVVVNVVPVVXVVQ9VQNVVNVUvdr2qr7tgbH1SXKlNPDcT6ahA2UA1VI9VYvY6PqqZqCDZTzVUL9bgahkOxlWrqW6unVBs1CtuqZ9RofFa1V2Oxg3pedVSdVGf1guqimvmuqpuaiN1VDzUFe6peqrfqo2ZgZXWpYlXUq2qAGqgGqdfUfHxdDVFvqKFqmBqu3lQj1Eg1So1WY9RYNU69pcart9UE9Y6aqCapyWqKmqqmqemXvlrVTDVLvadmq/fVHDVXzVPz1QL1gVqoFqnF6kO1RH2klqplarlaoVaqVWq1WqPWqnVqvdqgNkagNqstaqv6WG1T29UOtVPtUrvVHvWJ2qs+VfvUZ2q/+lwdUH9SB9UX6pD6Uh1WX6kj6mt1VH2jjqlv1XH1nTqhTqpT6nt1Wv2gzqiz6pz6UZ1XP6kL6md1UQUFGrXSWhsd6XQ6vU7RGXRGfZXOpK/WmXUWndDX6Kz6Wp1NX6ez6xw6p86lc+s8Oq+2mrTTrGOdT+fXSX29LqBv0AV1IV1YF9FeF9XF9I26uL5Jl9A365L6Fl1K36pL6zK6rC6nb9Pl9e26gr5DV9R36kq6sq6iq+q7dDV9t66u79E19L26pr5P19L369r6AV1HP6jr6od0Pf2wrq8f0Q10Q91IN9ZN9KO6qX5MN9PNdQv9uG6pn9Ct9JO6tX5Kt9FP67b6Gd1OP6vb6+d0B/287qg76c76Z31RB91Vd9OpurvuoV/SPXUv3Vv30X3B6H76Fd1fv6oH6IF6kH5ND9av6yH6DT1UD9PD9Zt6hB6pR+nReoweq8fpt/R4/baeoN/RE/UkPVlP0VP1NN1b99Uv63561v8g/+2/kd//l9G36K36Y71Nb9c79E69S+/We/QevVfv1fv0Pr1f79cH9AF9UB/Uh/QhfVgf1kf0EX1UH9XH9DF9XB/XJ/RJ/aP+Xp/WP+gz+qw+q3/U5/V5feHP7wEYNMpoY0xk0pn0JsVkMBnNVSaTudpkNllMwlxjspprTTZznclucpicJpfJbfKYvMYaMs6wiU0+k98kzfWmgLnBFDSFTGFTxHhT1BQzN/7D+X80vyamiWlqmppmpplpYVqYlqalaWVamdamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lsOpsuposJAJBqUk0P85LpaXqZ3qaP6WteNv1MP9Pf9DcDzAAzyAwyg81gM8QMMUPNUDPcDDcjzAgzyowyY8wYM86MM+PNeDPBTDATzUQz2Uw2U81UM91MNzPMDDPLzDKzzWwzx8wx88w8s8AsMAvNQrPYLDZLzBKz1Cwzy8wKs8KsMqvMGrPGrDPrzAazwWwym8xS89t/0NxhdphdZpfZY/aYvWav2Wf2mf1mvzlgDpiD5qA5ZA6Zw+awOWKOmKPmqDlmjpnj5rg5YU6YU+aUOW1OmzPmjDlnzpnz5ry5YC6Yi+bipcu+SEUqMpGJ0kXpopQoJcoYZYwyRZmizFHmKBEloqxR1ihbdF2UPcoR5YxyRbmjPFHeyEYUuYijOMoX5Y+S0fVRgeiGqGBUKCocFYl8VDQqFt0YFY9uikpEN0clo1uiUtGtUemoTFQ2KhfdFpWPbo8qRHdEFaM7o0pR5ahKVDW6K6oW3R1Vj+6JakT3RjWj+6Ja0f1R7eiBqE70YFQ3eiiqFz0c1Y8eiRpEDaNGUeOoyT+1/xDO5HjMd7XdbKrtbnvYl2xP28v2tn1sX/uy7Wdfsf3tq3aAHWgH2dfsYPu6HWLfsEPtMDvcvmlH2JF2lB1tx9ixdpx9y463b9sJ9h070U6yk+0UO9VOs9Ptu3aGnWln2ffsbPu+nWPn2nl2vl1gP7AL7SK72H5ol9iP7FK7zC63K+xKu8qutmvsWrvOrrcb7Ea7yW62W+xW+7HdZrfbHXan3WV32z32E7vXfmr32c/sfvu5PWD/ZA/aL+wh+6U9bL+yR+zX9qj9xh6z39rj9jt7wp60p+z39rT9wZ6xZ+05+6M9b3+yF+zP9qINly7uL53eyZChdJSOUiiFMlJGykSZKDNlpgQlKCtlpWyUjbJTdspJOSk35aa8lJcuYWLKR/koSUkqQAWoIBWkwlSYPHkqRsWoOBWnElSCSlJJKkWlqDSVprJ06aR5G91Ot9MddAfdSXdSZapMVakqVaNqVJ2qUw2qQTWpJtWiWlSbalMdqkN1qS7Vo3pUn+pTA2pAjagRNaEm1JSaUjNqRi2oBbWkltSKWlFrak1tqA21pbbUjtpRe2pPHagDdaSO1Jk6UxfqQl2pK6VSKvWgHtSTelJv6k19qS/1o37Un/rTABpAg2gQDabBNISG0FAaRsPpTRpBI2kUjaYxNJbG0TgaT+NpAk2giTSRJtNkmkpTaTpNpxk0g2bRLJpNs2kOzaF5NI8W0AJaSAtpMS2mJbSEltJSWk7LaSWtpNW0mtbSWlpP62kjbaTNtJm20lbaRttoB+2gXbSL9tAe2kt7aR/to/20nw7QATpIB+kQHaLDdJiO0BE6SkfpGB2j43ScTtAJPEWn6DSdpjN0hs7ROTpPP9EF+pkuUqAUl8FldFe5TO5ql9llcSkuQzcA+I84p8vlcrs8Lq+zLrvL8RcxOecKukKusCvivCvqirkbfxeX7l7GlXXl3G2uvLvdVXCl3V/G1dzdrrq7x9Vw97qq7q6/iGu6+1wt97Cr7R5xdVxDV9c1dvXcw66+e8Q1cA1dI9fYtXRPuFbuSdfaPeXauKd/Fy90i9xat86tdxvcXvepO+d+dEfdN+68+8l1dd1cX/ey6+decf3dq26AG/i7eLh7041wI90oN9qNcWN/F092U9xUN81Nd++6GW7m7+IF7gM32y12c9xcN8/N/yW+NKfF7kO3xH3klrplbrlb4Va6VW61W/Mfc13hNrnNbovb4z5x29x2t8PtdLvc7l/iS+vY5z5z+93n7oj72h10X7hD7pg77L76Jb60vmPuW3fcfedOuJPulPvenXY/uDPu7C/rv7T2793P7qILDhhZsWbDEafj9JzCGTgjX8WZ+GrOzFk4wddwVr6Ws/F1nJ1zcE7Oxbk5D+dly8SOmWPOx/k5yddzAb6BC3IhLsxF2HNRLsY3cnG+iUvwzVySb+FSfCuX5jJclsvxbVyeb+cKfAdX5Du5ElfmKlyV7+JqfDdX53u4Bt/LNfk+rsX3c21+gOvwg1yXH+J6/DDX50e4ATfkRtyYm/Cj3JQf42bcnFvw49ySn+BW/CS35qe4DT/NbfkZbsfPcnt+jjvw89yRO3FnfoG78IvclbtxKnfnHvwS9+Re3Jv7cF9+mfvxK9yfX+UBPJAH8Ws8mF/nIfwGD+VhPJzf5BE8kkfxaB7DY3kcv8Xj+W2ewO/wRJ7Ek3kKT+VpPJ3f5Rk8k2fxezyb3+c5PJfn8XxewB/wQl7Ei/lDXsIf8VJexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Yt/F23sE7eRfv5j38Ce/lT3kff8b7+XM+wH/ig/wFH+Iv+TB/xUf4az7K3/Ax/paP83d8gk/yKf6eT/MPfIbP8jn+kc/zT3yBf+aLHBhijFWsYxNHcbo4fZwSZ4gzxlfFmeKr48xxljgRXxNnja+Ns8XXxdnjHHHOOFecO84T541tTLGLOY7jfHH+OBlfHxeIb4gLxoXiwnGR2MdF42LxjXHx+Ka4RHxzXDK+JS4V3xqXjsvEZeNy8W1x+fj2uEJ8R1wxvjOuFFeOq8RV47viavHdcfX4nrhGfG9cIr4vrhXfH9eOH4jrxA/GdeOH4nrxw3H9+JG4QdwwbhQ3jpvEj8ZN48fiZnHzuEX8eNwyfiJuFT8Zt46fitvET//h/tS4e9wjfil+KQ7hHj0vOT+5IPlBcmFyUXJx8sPkkuRHyaXJZcnlyRXJlclVydXJNcm1yXXJ9ckNyY3JTcnNyS3JEKqmB49eee2Nj3w6n96n+Aw+o7/KZ/JX+8w+i0/4a3xWf63P5q/z2X0On9Pn8rl9Hp/XW0/eefaxz+fz+6S/3hfwN/iCvpAv7It474v6Yr6xb+Kb+Kb+Md/MN/ct/OP+cf+Ef8I/6Z/0T/k2/mnf1j/j2/lnfXv/nH/OP+87+k6+s3/Bd/Ev+q6+m0/1qb6H7+F7+p6+t+/t+/q+vp/v5/v7/n6AH+AH+UF+sB/sh/ghfqgf6of74X6EH+FH+VF+jB/jx/lxfrwf7yf4CX6in+gn+8l+qp/qp/vpfoaf4Wf5WX62n+3n+Dl+np/nF/gFfqFf6Bf7xX6JX+KX+qV+uV/uV/qVfrVf7df6tX69X+83+o1+s9/st/qtfpvf5nf4HX6X3+X3+D1+r9/r9/l9fr/f7w/4A/6gP+gP+S/9Yf+VP+K/9kf9N/6Y/9Yf99/5E/6kP+W/96f9D/6MP+vP+R/9ef+Tv+B/9hd98OMSbyXGJ95OTEi8k5iYmJSYnJiSmJqYlpieeDcxIzEzMSvxXmJ24v3EnMTcxLzE/MSCxAeJhYlFicWJDxNLEh8lliaWJZYnViRWJlYlQsizLQ75Qv6QDNeHAuGGUDAUCoVDkeBD0VAs3BiKh5tCiXBzKBluCaXCraF0KBPKhkdCg9AwNAqNQ5PwaGgaHgvNQvPQIjweWoYnQqvwZGgdngptwtOhbXgmtAvPhvbhudAhPB86hk6hc3ghdAkvhq6hW0gN3UOP8FLoGXqF3qFP6BteDv3CK6F/eDUMCAPDoPBaGBxeD0PCG2FoGBaGhzfDiDAyjAqjw5gwNowLb4Xx4e0wIbwTJoZJYXKYEqaGaWF6eDfMCDPDrPBemB3eD3PC3DAvzA8LwgdhYVgUFocPw5LwUVgaloXlYUVYGVaF1WFNWBvWhfVhQ9gYNoXNYUvYGj4O28L2sCPsDLvC7rAnfBL2hk/DvvBZ2B8+DwfCn8LB8EU4FL4Mh8NX4Uj4OhwN34Rj4dtwPHwXToST4VT4PpwOP4Qz4Ww4F34M58NP4UL4OVyUn1kTQgghhPgf0X+wv/t/kaP+3O4BAFdvz3X4r/dvzP5ru1f63C0TAPBUtw4P/rZVqpSamvrnY5dqiPLPBYDE5fx0cDleBi3gCWgNzaH4f+xP+U9j9VKdzvN/1z9AlLwFMvw5DL/lZ4S/7v+mv7n+Xmrk7P+2fw1Rci5AwfyXcy4N9lt8uf8S/0X/OZr+Qf8ZvhgH0Ow/5WSCy/Hl/ovBY/A0tP6LI4UQQgghhBBCiF/1UmXb/dH97aX789zmck56uBz/rftzIYQQQgghhBBC/Gt5tlPnJx9t3bp5O2n8bzVCll/f6n+V+UjjX72Bqf8Cn5Yr/c0khBBCCCGE+Ge7fNF/pWcihBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKkXf8vfp3Yb2P90d8aFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIf5d/Z8AAAD//zIvOGc=")
r3 = openat(0xffffffffffffff9c, &(0x7f0000002a80)='./file1\x00', 0x183042, 0x15)
pwrite64(r3, &(0x7f0000002ac0)='2', 0xfdef, 0xe7c)
r4 = openat(0xffffffffffffff9c, &(0x7f0000002b00)='./file1\x00', 0x42, 0x1ad)
sendfile(r4, r4, 0x0, 0xe3aa6ea)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000e00)={'syzkaller1\x00', 0xc201})
write$tun(r2, &(0x7f0000000e40)=ANY=[], 0xfdef)
write$binfmt_script(r1, &(0x7f0000000e80), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628)
fdatasync(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
getrandom(&(0x7f0000000ec0)=""/286, 0x11e, 0x100000000000001)
pwrite64(r0, &(0x7f00000008c0)='2', 0xfdef, 0xc00)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x8441, 0x1ac)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x129042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fallocate(r5, 0x8, 0x4000, 0x8000)

1m40.517217312s ago: executing program 3 (id=160):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x40240)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000240)={0xffffffffffffffff, 0x1, 0x1, 0x1, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000340)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x7b, 0xa, 0xff00}, [@call={0x71, 0x0, 0x18}, @exit, @map_fd, @jmp]}, &(0x7f0000000380)='GPL\x00', 0x2, 0xffa0, &(0x7f00000003c0)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000024c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x200000c4}, 0xa4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002540), 0x8000, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
socket(0x10, 0xa, 0xd)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/fscaps', 0x0, 0x42)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x0)
socket$unix(0x1, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000480)=0x800001, 0x4)
bind$inet6(r3, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5000000, 0xe, 0x0, &(0x7f0000000680)="c9f7b98600"/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
listen(r3, 0x2)
r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/tcp6\x00')
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x44, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev}}}}]}]}, 0x44}}, 0x0)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
bind$inet6(r6, &(0x7f0000000800)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r6, 0x2)
preadv(r5, &(0x7f0000000840)=[{&(0x7f0000000880)=""/225, 0xe1}, {&(0x7f0000000980)=""/106, 0x6a}, {&(0x7f0000000a00)=""/149, 0x95}, {&(0x7f0000000ac0)=""/60, 0x3c}], 0x4, 0x7, 0x20000000)
syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x8, 0x2, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}]}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x28, 0x2c, 0x0, @remote, @local, {[@routing={0x1, 0x4, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0]}]}}}}}, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)

1m40.288239086s ago: executing program 3 (id=162):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000000)={0x3, 0x36, 0xf, 0x7, 0xd, "2a5ed3ae62c8e0c1ccaca883b74e787c91409d"}) (async)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]})
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r4, 0xee01, 0x0) (async)
keyctl$setperm(0x5, r4, 0x4221030) (async)
keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) (async)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r4, 0xc5, 0x58}, 0x0, &(0x7f0000000100)="18d63284fa6b189420b06b4c116c557c83b71fcab8bd65e02bcfc8286f2d21dba1c49221f7a87bc6b46a94e9d0b2c98eb8f393339baf8943a2efd89adc4c8cec03ed856f241b3256806fcf4a894365f8e3decd00b67d2676173c300e84f47153bc9c3469404dfdd0e5d9eaa69aa8394d87fbccc1e698636d0116ddc763ad246aee20fa9c01a37c776c3b0b7ea71f0043812e82fadce0c4e917f90016cc3bea733b49de569acc3b53c7fa21376222dd069987cb48762654d93af58216fa8bdc339a25679aa4", &(0x7f0000000200)=""/88)
lseek(r2, 0x3, 0x3)

1m40.226706682s ago: executing program 3 (id=163):
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = eventfd2(0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000d00)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000d40)=[&(0x7f0000000d80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0x200, r1, 0x0, 0x0, 0x1000000006, 0x0, 0x3, r1}])
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0xca02})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x20}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x2f8)
socket$netlink(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000780)={'pimreg0\x00', 0x7c2})
preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/23, 0x17}], 0x1, 0x0, 0x1)

1m39.927335682s ago: executing program 8 (id=165):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1000040, &(0x7f0000000080), 0x1, 0x5a3, &(0x7f00000000c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x42, 0x81)
truncate(&(0x7f00000006c0)='./file1\x00', 0x2fffffd)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)={[{@grpid}, {@noacl}, {@nodioread_nolock}, {@dioread_lock}, {@stripe}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@orlov}, {@nouser_xattr}]}, 0x1, 0xbd0, &(0x7f0000000880)="$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")
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000001480)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000014c0)=0x8)
sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000001500)=0x20000002)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000001580)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001600), 0x651, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r3, &(0x7f0000001640)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
recvmmsg(r1, &(0x7f0000001680), 0x10106, 0x2, 0x0)
r4 = fsopen(&(0x7f00000016c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x80)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
r7 = openat$cgroup_procs(r5, &(0x7f0000001700)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f0000001740), 0x12)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)={0xc4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xc4}}, 0x0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)
mkdirat(0xffffffffffffff9c, &(0x7f0000003ac0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000003b00)='./dev\x00', &(0x7f0000003b40)='devtmpfs\x00', 0x4010, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000003b80)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000003bc0)='./dev/ttyUSB0\x00', 0x12df00, 0x0)

1m39.923180993s ago: executing program 3 (id=166):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8,umask=00000000000000000100003,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c696f636861727365743d6575632d6a702c6572726f72733d72656d6f756e742d726f2c757466382c666d61736b3d30303030303030303030303030303030303030303133332c646d61736b3d30303030303030303030303030303030303030303030332c74696d655f6f66667365743d3078303030303030303030303030303030362c6572726f72733d72656d6f756e742d726f2c00e7f7a64e12768f24588c031e3a7d52e686581692b31c66f5320a14e587a7c28feef0f667bc0421879f8dd03f06fa51770cf06aece55ad1185a9caffc331fae3067bf"], 0x3, 0x152b, &(0x7f0000000900)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==")
creat(&(0x7f0000001e40)='./bus\x00', 0x182)
mount(&(0x7f0000001e80)=@loop={'/dev/loop', 0x0}, &(0x7f0000001ec0)='./bus\x00', 0x0, 0x1084, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001f00)='./bus\x00', 0x8840, 0xa2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./debug/failslab/times\x00', 0x540, 0x0)
readv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/98, 0x62}], 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001f40)='./bus\x00', 0x1c1042, 0x110)
write(r2, &(0x7f0000001f80)="d4", 0x1)
sendfile(r2, r0, 0x0, 0x3ffff)
mount$fuse(0x0, &(0x7f0000001fc0)='./file0\x00', 0x0, 0x80, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x0, 0x1, 0xfffffffffffffffd, 0x80000000})

1m38.78741075s ago: executing program 3 (id=169):
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r0 = open$dir(&(0x7f0000000000)='./dev\x00', 0x121000, 0x14)
mkdirat(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000001dc0)={0x8, &(0x7f0000001d80)=[{0x0, 0x1d, 0x2, 0xb}, {0x1, 0x80, 0xfc, 0x3}, {0x8, 0x9, 0x3, 0x2}, {0x7, 0x8, 0x2, 0x6}, {0x7, 0x9f, 0x4, 0xc}, {0xa, 0x10, 0x9, 0x9b9c}, {0x9, 0x5, 0x1, 0x4}, {0x1, 0xe0, 0x1, 0xfffffffd}]}, 0xffffffffffffffef) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r1 = getpid() (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001840)=ANY=[@ANYBLOB="0000001371d9773afd0a00", @ANYRES16=r2, @ANYBLOB="010000000000ffffffff3900000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001200000560000001c000d8018000180140005004d000200fe000200150ccd00324f0800"], 0x44}, 0x1, 0x0, 0x0, 0x4000065}, 0x4000004) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, 0x0, 0x0) (async)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[], 0x1, 0x14fe, &(0x7f0000000240)="$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") (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e00), 0x80102, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = eventfd2(0xe5c, 0x80000)
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000001e40)={r7, 0xffff9047, 0x2, r7})
ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000001e80)={r7, 0xffff9047, 0x2, r7})
sched_setscheduler(r1, 0x2, &(0x7f0000001740)=0x6) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001bc0)=ANY=[@ANYBLOB='-'], 0x27) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001780)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r9, &(0x7f0000001840), 0x400000000000041, 0x0) (async)
recvmmsg(r8, &(0x7f0000001880), 0x80002c1, 0x2, 0x0) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001940)=ANY=[@ANYBLOB="79bc0000000000367a0000007f00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000b5ae68b0af7c05bf57825e84000000000000c40000", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r1], 0x50) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

1m38.7861225s ago: executing program 3 (id=170):
syz_usb_connect(0x0, 0x63, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208185000070501020002000705820200020009040001040806"], 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xffffffff, 0x4)
sendto$packet(r1, &(0x7f0000000080)="114353", 0x3, 0x4008015, &(0x7f00000000c0)={0x11, 0x1c, 0x0, 0x1, 0x4}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r2 = getpid()
syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaa81bbaaaaaaaaaaaa08060001080006040000bbbbbbbbbbbbffffffffab7be8a941e600000000"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000440), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000500)={r0, &(0x7f0000001c40)='[\x9c%:\x00\r\xf4Pw\xde|<\xb8\"nsf\xe8\xc2\xa5\xe3\xa7\xa7$\xa7\xae<V\x0e_\xaaW\xd1\x92=b\xce\xaaX\x12\xbe2Vl\xb8Bt\x95\xa1\b\xdf\xba*\xef\x12\bL\x85\x0e\x9d\xf4I3\xcd\xa8e\n\xe4\xd8g\xb6f\xa406e\xf9\x12`(\xe9\x9f(\xb6\x1a\xd7\x18\xe5\xdc\xae\xda(\x92\xef\xebn\xe2\xc1H0\x15\x13#\'\xf1\xe5H\xb8!\x91cA?!\x1e\xabx\x95?\xc0z\xc9P\xaa\xfd\xe9\xa5\x95\xa2g\x83G\xcd\xc9\xe9\xca\x84k\xdc;\xcf\x12\xd3\x89^\v\xf6k\xc1\x85\xbb\x15\xf2\xaa\x00\xc7\xff', 0x169002, &(0x7f0000000580)={@align=0xffffffffffff8000, {0x6, 0xf}}, 0x8, &(0x7f00000005c0), &(0x7f0000000600)=0x4})
fgetxattr(0xffffffffffffffff, &(0x7f00000006c0)=@known='security.selinux\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000100)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x2010000, &(0x7f0000000a80)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000ac0)='./file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x0, 0x80)
getdents64(r5, &(0x7f0000001d00)=""/4096, 0x1000)

1m38.78138787s ago: executing program 36 (id=170):
syz_usb_connect(0x0, 0x63, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c032090400000208185000070501020002000705820200020009040001040806"], 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000000)=0xffffffff, 0x4)
sendto$packet(r1, &(0x7f0000000080)="114353", 0x3, 0x4008015, &(0x7f00000000c0)={0x11, 0x1c, 0x0, 0x1, 0x4}, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r2 = getpid()
syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaa81bbaaaaaaaaaaaa08060001080006040000bbbbbbbbbbbbffffffffab7be8a941e600000000"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000440), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000500)={r0, &(0x7f0000001c40)='[\x9c%:\x00\r\xf4Pw\xde|<\xb8\"nsf\xe8\xc2\xa5\xe3\xa7\xa7$\xa7\xae<V\x0e_\xaaW\xd1\x92=b\xce\xaaX\x12\xbe2Vl\xb8Bt\x95\xa1\b\xdf\xba*\xef\x12\bL\x85\x0e\x9d\xf4I3\xcd\xa8e\n\xe4\xd8g\xb6f\xa406e\xf9\x12`(\xe9\x9f(\xb6\x1a\xd7\x18\xe5\xdc\xae\xda(\x92\xef\xebn\xe2\xc1H0\x15\x13#\'\xf1\xe5H\xb8!\x91cA?!\x1e\xabx\x95?\xc0z\xc9P\xaa\xfd\xe9\xa5\x95\xa2g\x83G\xcd\xc9\xe9\xca\x84k\xdc;\xcf\x12\xd3\x89^\v\xf6k\xc1\x85\xbb\x15\xf2\xaa\x00\xc7\xff', 0x169002, &(0x7f0000000580)={@align=0xffffffffffff8000, {0x6, 0xf}}, 0x8, &(0x7f00000005c0), &(0x7f0000000600)=0x4})
fgetxattr(0xffffffffffffffff, &(0x7f00000006c0)=@known='security.selinux\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000100)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x2010000, &(0x7f0000000a80)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000ac0)='./file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='.\x00', 0x0, 0x80)
getdents64(r5, &(0x7f0000001d00)=""/4096, 0x1000)

1m36.8276604s ago: executing program 8 (id=179):
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f0000000040), 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRES64=r0, @ANYRESOCT=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x2, 0x8, 0x2, "815f4e90", "9bbd4796"}}, 0x0}, 0x0)

1m33.258165416s ago: executing program 8 (id=192):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/vlan/vlan1\x00')
r3 = socket(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000380)={0x1, 'vlan1\x00', {}, 0x5832})
syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00')
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x4, <r4=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000fb010000f8ffffffb703080000000000b7040800000000008500004c0100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x6}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0xfffffffc}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
close(0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
unshare(0x400)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r6, &(0x7f0000000380), &(0x7f00000003c0)=""/3, 0x2}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x10, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000580)=r9, 0x4)
sendmsg$unix(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1f, 0x4)

1m33.254596296s ago: executing program 8 (id=195):
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
r1 = eventfd2(0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000d00)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000d40)=[&(0x7f0000000d80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0x200, r1, 0x0, 0x0, 0x1000000006, 0x0, 0x3, r1}])
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0xca02})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x238, 0x258, 0x258, 0x238, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x20}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x2f8)
preadv(r0, &(0x7f0000000700)=[{&(0x7f0000000480)=""/23, 0x17}], 0x1, 0x0, 0x1)

1m33.253119526s ago: executing program 8 (id=197):
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x102)
mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x2, 0x0)
r0 = open$dir(&(0x7f0000000240)='./dev/file0\x00', 0x8181, 0x20)
mkdirat(r0, &(0x7f0000000200)='./file1\x00', 0x78)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000180)='./mnt\x00')
syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00')
mount(&(0x7f0000000900)=@filename='./dev/sda1\x00', &(0x7f0000000940)='./mnt\x00', &(0x7f0000000980)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f00000009c0)='./mnt\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r2, &(0x7f0000000080)='2', 0xfdef, 0xc00)
ftruncate(r2, 0x3)

22.84398068s ago: executing program 37 (id=197):
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./dev\x00', 0x102)
mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x2, 0x0)
r0 = open$dir(&(0x7f0000000240)='./dev/file0\x00', 0x8181, 0x20)
mkdirat(r0, &(0x7f0000000200)='./file1\x00', 0x78)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000180)='./mnt\x00')
syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00')
mount(&(0x7f0000000900)=@filename='./dev/sda1\x00', &(0x7f0000000940)='./mnt\x00', &(0x7f0000000980)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f00000009c0)='./mnt\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
pwrite64(r2, &(0x7f0000000080)='2', 0xfdef, 0xc00)
ftruncate(r2, 0x3)

14.177223018s ago: executing program 4 (id=323):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000004740)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a30004fb620d0000040000000300000000080000f2df16d6106978731c34848c4c3ab47b2962180cee4ff501cb013c81b948b1ccd5203da117eec9dde44eb2fd9f3f25a78f0cda9a41b795dc73aacb16fb6c505823f0fdb6cb6f57e996fc31b499977dc7f214e315174e550240a4c041febb1346501a865caf467f853a7bec0e5d48d0e6880aee466393586662d652d2d4addb7bc013fcb9b0d5d2e7045fe110b30fc8e4166838fc9dd5c8ee4a475267399da3b0038997e26c741bc6f0e7869144331abddf3e2a446531bf074e6134341be17f8ca9d7c9a6d7bb24f21e239d2e3c757cc74203ed3d70d2ff"], 0x1bb)
r2 = openat(0xffffffffffffff9c, &(0x7f0000003480)='./sys/class/devcoredump/disabled\x00', 0x2, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000040)={0x43, 0x9, 0x1, {0x4, 0xc, 0xaf, 0x5, 0x7, 0x6, 0x2b, 0x3, 0x10005}}, 0x43)
read$FUSE(r2, &(0x7f00000056c0)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0}, 0xfffffffffffffdff)
setgid(r3)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
readv(r0, &(0x7f0000003300)=[{&(0x7f0000000b00)=""/90, 0x5a}, {&(0x7f0000000b80)=""/144, 0x90}, {&(0x7f00000011c0)=""/90, 0x5a}, {&(0x7f0000001240)=""/187, 0xbb}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x6)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590)
add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0x0)
r4 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x20000406, &(0x7f0000000440)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@errors_continue}, {@resuid}, {@bh}, {@noload}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000000600)="$eJzs3Mtv3NQaAPDPTvPoM2lvde/t494GCiKikDRpgS5YAAKpGxASLMoypKEqnbaoCRKtKpoiVJaIvwBYIiGxYgMbkAABG0BsYY+QKtRNC0hokGfsZCaZmUwmbUI7v5/k5Bz7+PEd+3jsOR4H0LWG8/9bIuKniBiMiGRxgeHqvxvXLk79fu3iVBLl8nO/JZVy169dnCqKFvNtzjMjaUT6ZhJ7Gqx35vyFU5Ol0vS5PD82e/qVsZnzFx48eXryxPSJ6TMTR44cPjT+yMMTD7UVx6VlpmdxXd/9+tm9u46+8M7TU+V48ZsPkzzuWBRH1VBb621lOIajnFsY21f5e++ql/7PsjUi+vN0smGdN4a29UREtrt6K+1/MHpiYecNxlNvzGe+WKcNBG6Z7LNp+5KxPfn/dP7zC7gTJdo4dKniEz+7/y2Gtbz+WG9XH8/+Tlfiv5EP3z1TrZs0u5cdqt6x9zSZ/98Nxg0sJMuDy6x/S0Qcm/vj3WyIht9DtJC0XRIAYN5n2fXPA42u/9K6a5tteR/KUEQciIgdEfGviNgZ6XyZ/0TEf1e4/uFF+aXXPz9sXOEiVyS7/ns079sqhuqUIq5kPre1En9v8tLJ0vTBvE5Gorc/y4+3WMfnT/74drNpwzXXf9mQrb+4Fsy349cN/fXzHJ+cnVxFyHWuXo4kNjSKP5nvCchqYFdE7O5g+Vmdnbz/g71ZetvmpdOXj7+Fm9DPVH4/4r7q/p+LRfEXkuqamvVPjg1EafrgWHFULPXt91eerc331qTr4h9oL6aBToNt4OrliE0Nj/88/qIZFP21M3n+yy1tr+PKz281vadZuv+TODZXWyI//jcuVFt2/Pclz1fSffm41yZnZ8+NR3yaj6gbP7GwtCJflM/iH9lfH3/1vjjNznF/vZfPtycisoP4fxHx/4jYl2/7XRFxd0TsbxH/10/c83LrGurw+L8JsviPt9r/EUNJbX99B4meU1990mz97Z3/DldSI/mY2vNfX5PltruBq60/AAAAuB2klT7oJB2teX67sDM2paWzM7MHhuPVM8erfdVD0ZsW33QN1nwfOp5/N1zkJxblD0XE9sqTRhsr+dGps6Wt6xQzULW5pv1XzwVpOjpanfZLs4degDvHivrRah86++jjm78xwJrye03oXto/dC/tH7qX9g/dq1H7vxRxYx02BVhjnX7+L35gALjtlOveTwl0Fff/0L20f+hKS38Sn79uJTsndP6T/9KOo6t5Y8CtT5QHO589mk+aW/kCe9orXLz9ou0lt1c4iSjCSVvE1SAR6cKYP/O3SVbG9FbL9LW/qWufSJct89hytdG7ondiDDSojX15oj8i2l3OpTWr1eIMkXjLJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFv7OwAA//8aJOrz")
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000003380)={0x5, <r5=>r4, 'id1\x00'})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003440), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000034c0)={&(0x7f0000005580)=ANY=[@ANYBLOB="89bd2e469cc576a3577383271fa565a728b8122c66c8da9f12c3f443a8dc2889003578aef4c004ddee86e736782552b266b2f2059ba6f19585547fdb354672ba3389a7c1a8e6e35100c2d70bbf86bc1a80df9062d13bf7e2afad7d8dcd494826dca2132756240ced4d474c9cd21bd2eb70cf99222133cbbe656699f09d494183d621a40a797cae69742f979b00", @ANYRES16=r6, @ANYBLOB="000126bd7000fedbdf256a0000000500d2000c0000000a000600ffffffffffff00000500d2000b000000"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003540)={'syzkaller0\x00'})
getrlimit(0x4, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
r7 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r7, 0x0, 0x8, 0x0)
r8 = fsopen(&(0x7f00000036c0)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
r9 = fsmount(r8, 0x0, 0x1)
fchdir(r9)
r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000003700)='.\x00', 0x0, 0x0)
getdents64(r10, &(0x7f0000003740)=""/4095, 0xfff)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000003580)=ANY=[@ANYBLOB="06000000040000004300000005"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000035c0)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000003600), &(0x7f0000003640)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003680)={r12, &(0x7f00000036c0), 0x0}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)

13.192573268s ago: executing program 4 (id=335):
getrusage(0x1, &(0x7f00000001c0))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xc4, 0x7ff00003}]})
syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80782, 0x0)
write(r1, &(0x7f0000000080)="0e3b", 0x2)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd27, 0x25dfdc03, {0x2, 0x80, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2000}}, 0x1c}}, 0x4040000)

10.174395908s ago: executing program 4 (id=352):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000340)="fe7d9ad23d3389b5d66337d18dbc0495eb16162f781772b20de75c9b04721ec2c8447e2ca17df85341d44a7b352a3f25365bb370f3f4526cae95a8f3faac784b24aec7ed7fb46b3fef6b46eb3ad8206a3fe5fd69576dcf61a59bfd56d5b2ace25608c8c76628b7645c0e93762d6df06eae51f673d6a68a02aac765b951822da11e1f3318a369ab41d7aebd5dbebf83eeb1eb707a9ef2385c73b5b0bb47af867ea3c4e94a9130565429007d2933c8bb75bb52f9ad3be341caf35b8791a1d849edb18168373f6b5d8dcfad88f0208add9f2ce666b2c0e34610ff5d8df9624ce2c3228c97cafa3a0d2e6230ef25b1b38726f287389f6ae3cf369521d67ab69084ac91b4840a2e1695c8cbdbf2a2e4d0ec146e3d7eafbdcc7aed0f1ec6cb435ca230e63836f92af1b984f6f8e33d7d8ea82b8c4c775ea9fa98d7c37079278e53696efaef151472081fe31eee067fbd46b0e0aeaf1d35b0d010e61ae6bc25615aa0a3145817cf2f05aee7af69fa8fcbc062cb2265f0e44ed854152cf0e58887c323a2d9847f0fc86d777bd9ccd2061258760fb2c737f7bd17f437a7614768f581255b79360fe37b510483eca4e876d6b26a7ebad42f32d9c820f34471d1f6c37dc60d50cc7bd55db5561eb95f56d75222db88f59adf4563607746eb317b3f581def60a7894784fd00168b1e1b0f367bac82bed4934e754daa41117efc3f1d467418307f7bf7064177ad59f7f9da4b653e3a1617b1b884998575bd4342f3e45b1b1af0d3645f449e764f65e18e82804d586203fb83ed8316827e21d95d9196e38016e76b0c5229d484417b9d35c355328997425f9426cba4f7ca131cabbe0da1f0dfaf5d48815a683a85e74a800049e265f08cb92b8890e7a1b8bccf0c05ff02ea832b10a0919161472b95ea766c1bb3c6e85afe8cf573031bd9261081c0ccb38aa49bbe7ab4b6ac2957e3a3ed4d824115ec644076a067514ab2aa1feafbbd288395c087829b965b912c7d01d7e7ff63b4ec745e463f517ce8b700e51f19a75a7fc4faa829b283af0ea24ef5a98e39fedb0ca04c1803e576355d8940cfd62683bedee0a6a4fe6a11fc2573e602ead483792933e98341a0b57e8a7b24af2beb987fe8f8eff613446bcb32136f38ba46d63a162028e5874ec26e87e5cc301c848f934ee7bd24b0e052c882424a6aa7086fa4abbd0ca4bad69d74af7ae6b73529f6e49e54e13abf96ee0f4da2de8d054eecdcf73f27e3279506101dfba68496d7c4f025b382a026aeb4b34a838daa150f7788ff3a8bf91eef05649efa6e1c34e34914a1677c23fef71517017e12646b524adcaf6587bd0f72c95f13aedce2b901bc5846cf6c003261141a79c67e8b4fb7257767e96eafa6586de75f6ec38756c5f9de5608bef36391cdb7252b00d08f76c1df21709aa34649af3c1284bb233686d75bfc7f367ab9492e2845ad095080e4f2e9f0ac0f3aa0fe4e86e840a1fb000b56dd9eff37218578c54c58663dfe75e60b8a315e9962d01dbe13213e71a66ad1a502924feff117de099c91ff352fdd91e6c9b7639b268467aaed34bafdb2d077c015b820ce4cdaaf6837da56f802d8e1f3a8bdf87dd8b24c2196b67648082388906b540888925ab1743b3500c2ff0b46492d03a392811ccab1d4becd74bc25c9b9d083065e947770df455e46361ba2d324a26ff213c99bcc37189f0ca459c481a9f614cc6e722d44e82d7124bc016e19197bb101b66058b709c8309a4590cfda021335abe25552ee515924971a73128e84d9b6a46b4df07595ce9af286e936fdbe5399a88877fc77c24dc9e825d83329e66e319e11076796494c48d5439a19c3e3569ddd206e81e04fca6ea040871a1ab3b05c62f9df4b38fb745bfab532a8041f09663effe57bd40334487fc8b17540288c04bd7672aff5beaf40906a472b0305cccba2371e9fad9a9470765bb2305bf2e4c4e40c66ccc3a7582eee9b63ce0bf563e1783f5412c86d497c3dc50b77ab6e5d9c708c1825a9983260e5e114c78e899498abac0225c787be7879a41230d543a087b82f557815c5c1801edd242bf0760230744100a6930c5efcc6a2aa6ae27d4f7aaaa3336352f86ace98d371b5b89da626c6102ee858f295c24f8a4bf46dd4702f6a8e2b6af356cd7d228f308a140d973d22f7b62a9fda1d8baa6450494aab9a3652a944cf43472f4dfb4a39f2adf064fa8055377fce7fb8fcef2eb1827931a6def4a3194cd7e80ebed2310e3f4046b481ecd8bbbf6da99618a144656eba89da2d9dc4d64177533aaf02c8f6dabbee31dc84a27025a0ad6676d9d2452b1eecf678dbdcd81dee3483d412715cbe873890e3fb0692de920f00be6bed1149d99626c17adb1071d0db8e88ede32fdc1cae00ad8b61a4f62e452a319514bea6ae5741f734d13169d0b5bb78762b7489f0eafcc055050904e14da0187820b5051e9834fbad4df34dc72ac2d544cfc533fa4dd158033cfee4d78e2d6b9097dfb8fee5a14ab9482cf89a2cb062370baf15ae3e58768efe069c4939b514b43e3203afb77c8a50eb938361b87a29300428d2f240bf67a4c5d689b871b9540afdb8530c28a165b0e0aeee8897b053417ffd8b848c6752c049f5089e310ca5d845449dc319fd58ec3ac830553b44889f8b7a622d0e2282b615c14d04c41d23d4dbfc1fc1291fcfee8b09076fecf63bba74ec080e7489d399495eb86cb9a324159a8c77723895f3dddb52cada076afb749d951668e3fd65c06056e57504240d509f597004a8b2bd23fe119ab4de86ba9bdd40c1ab7a22e32f5371de04642631d4295ccf7cd5aee1cdbcd1cdab397c8eb3dbeec1fb8279ad3b025fbbba11a6009a504671a258e942e51b61a77d09ee134ca45f6d41937e4cf7bb6df47f58a52a07493b85594ec511a6e3771b610bbad3f1d869227ab2e7f1cb5191268fbfb440cbdb6e0a4f42bb690bd7282982223f51287bb271f0b34f6876dec906e11d5900dd8d746a60f5bcd1e1ecb4e95e6caf2f3508d058aa5a561f50a364680b72c7eeedefd4c50dc744752cfae404953312186d0ecdaa0f2523a025250bd88627e8e5696bf6663ab4527d76b39535a17a77755624d9cdbd26b981cb989abf74701f0c3fd90c509f43119b2997a1ce39afb427d6467a145f3585365f9423b2481a545f8de1085eada1f3febf07705f13883939a330e8e3080db9aae75f9b64dcabf8e77bc424c8572243f4884b732f97489a94e4ca2c631fa30575a489118feca83b84280b4b0dc4828ab21d28253eaa3ad11b557cd22c6f550f1b16b0e85869012333f3a7de88baaead953ebe9e59505294f910910f6958219abea50abc00b7af8dd0e80734b15791fe08b0a3d663329180900b8da223a8b96c4acfe788fd231380636e670c801026e5a70ae326c520859cf7f315c2c705cd2fe93b03849c754e881c152662dad3b18bd481d4149370377a2a6467f77bf3a10613c76cbb3467ae2050ba9bc19ce7ba7fa6bb94c9effbb8f9be98ba3b395ec2c6c7b0eae4a59256d28902d3663b3d7e0573c2699b929e3e560ed37aea16d337748c471d99dd18b6ac4fd330a75a1b9d0096863a2a756b47a76c8510db8dab54870454df30e934bc56ea333d3b310bd2602873b524c56e7263d66168ccf687e765ba058f072aa2d06ca545b14c4f021e36dcd8e87d9492e590d60ee268d90a345be8979d7a586bf7522f495703b1c142637fd907b1390aa5c2da7547747544d5def5c41d9856bbd8bc87da4712fb716eca122e4703ea09dee7723bd8898732f718b0f89c0ab585d5c667d262201209c1373bc0642c06bfb59fb097c897538d221902b34adaf5b1c93758b8d9d15870af72e7ff7b561aa016dd56598bf46bf73edad04920fdd462c3a7e6ae6d7f4901a338f2c294ef7ad9a46e4097d07d7661611f2b98cd4222ba8723c07acae025ca26b5eb3fdd536058902b0373acfd6581d51ecb2f21f99ee68a54e64692607ad0bcefb09bf6ad6999e8e32c31ae529a679009c0bd97676cdfc2d2f0b869c77a977ae525c176ee1bb2dc0a10d62d95545cbbc91e3c734d5a408acd0b9b33abc0fb4e29e4340bcd11a0058b37fa76ba2354c7b70709eb979ee2452aeae6c05538f8cf88fb1eea5c43918df31104ac748251818ae1c2169f6ceb2c11da191a614435df8c576f96f65a081aced6f9e1cb7833a37fdd457c64e3b64d8588b8cb79eee58b2bc9a689ad0d87315a43e55afc7a11dcfa42ce8779792d20794cbd650b0492dce5e5b36fe61e59feba9afc70348517318c73f5463164c862c18467faaa5127ed35a0ffad61b25934b288277245d3c6d1397c57fa12bb0e78e0e69e3549e420007bda60f811f557df49eca081cbbf3d97839f9b809c40c06c71e50098e990186c04cb2a582a06aa36d1a66ba2809bb20c072d43815307d15f2bdd407d88a2e7f7521c76c1561582527dc464f401cef7efbf7535a7c6f5b5f02bbd2db00511451c8b53b3b6dd205e898e8a2614ff14fd3239c350fc76a1885e62ca40ab32517b0320bd82f36b7991c824f5e9ee61515b4a172efd928dbb972359e4f7b66f897828fad02c41bec4c381f0e73ee069e543b9348af8566ee9dbef2889d17182581493b52447ec3dfbab8ddd82be256bf320668dfc1c833e464e6c4cd7224df01a6813584dff4d377340efe9ead9a2127b918c6a61f9cab58339b938f8ad14b2d1eccf397292a04023fad1c4fa5dcd73b8fec6f75a1fcbcd62758945348afa76e52fad09b67d0e4bf137979d996c7ae48ecef64c704bc74bc167f7460b97e2ab97fd629f893ee20986102881715205cf43f6cd3de47df192130533ee7472ce8eeab223216dc7cf0e56fe76adc2249a90c8e436d4f41a2d4e5805834b047941c6db1e0e096658a458316aa69ad6179aebbd1f879f546843efbaa276fc2fc2fb8f66dd92448de820e755739e2c447c9598b4b3630ebb2565398e4cbea0da438171f6d955bde1fe7ba8f073bdb23f293e5daf69efadcf868c221d8802fc7478182e86c1f75f6fc895b6e1c52cb1c93c06033e9ff1cb24c7ed32c29f09957297e72a44d6d472c55e74db927d7c87c0712742d34b398d9f7d96331d08df8534e17c27717399c2688ea4e3feefe87f8c65efc3d8a6b4140460cf353827d8974afa1fd41840561ebeb51f8e1cfbe44e411d52f12478e401d4d223020a02ea887983485caf8ce36dbfb03c2e2996a5ce6f10b28ffa5c9723b95757e87b5bcaa006ec2b45c69a8aa17675b5e05b5f33c7cc5781132607fb4e86ef0a96b483baff00bfd03cd2b471a31615bf59720d203a6124c4c986569c087a34ae159c459e5b5af481a7ded13fb7c17102859717da49c6ef42956f2912180edd741c304ed587f2ea5c90d9b28aad30c3f105b4e5acf7e563d96a89d0d9255d0256504e041e10a880ab907c669ac1f86685b1f5448ff0d45300cc6dfe0b5f6b1ccc5db782a6065931f47f5766005ed48cbb92deaae661435a4c6f47d70196dfebcceb316a3bc0a1da56092cecff0113519743762810c271ed0d9b66a5abb817886ba2c8d533dcfc56cf23ddf3b15694751346fddbc7e5e647f6015b75833e8d8b7d9fa4b2dcda59698698bea7664ea1c8a2492012f8630d81d1ba13bde6fbec3ec0774752a63e5eae03191189a7858d69f991a6dd042c52058f13339ff2562007a7d25ea6fb94ac30b2af7baa770acf4943051412f36080f4854a8b14a534d2efc05a8b1b63dec308b51eb47d327871b336a687d7e9ac9e8cd519af6051de1673b3aca82ae2dcb9e0f340471c15660e7de9abc3ec31638d3e196044e07455e65da013feb4e46a3456c4f6a5c2bcec5de6c4bdd07434e630988fa3e94713d0e461afd91be0a65bd95b88d3313e37705f74a1aeb05e1b05fda7dd94a91db724c801835ae27fbe8359581752713a1770178b64fd1f445df34e2399a26f178151d42ba8314edd60fcc6626e6874f538ebcc326e7b8e8d326940482d5f3e72bb6aae70fddb70f8aa425e2c55eafa6adba5b00cccdc722ba1e85bb09f2791f58a7b58b06c039391667eaf9a623f9f170db2065d36d16904746aa55fbfac0b13ce31622632be60deb3fa4dac394be416b51ca988cf1cbabee22f36441cdc25afcbb8677b49eb2942d7e96c6ec9a8cd200467f4d5cd7f60e5db60e3ea517a96e4248f9bbd9386f162488b580fe6f731839736c7e9e3382bd8fdaa5976ec331fb7dacacad203f40ba6fb26d18c28695673f44393d66763bec7d78cbeb3c512a40a649472b5c5efb3cf6fc485a9375afb43deaf8b4eb3799e727092d65a2484507c9a828ce4e81b7fc54bb72543a2f1086f7556dd90bd87db353ea35613d2b640768b17d7991da0e5ca4ed3439652594c3e74cfbc45b3740381ba1b2f6cc7bb8fa623f22e1cae95b2a6079d3e2bd47d1b434c1ef16bf66adf5a774cc5a69bbdb523559b3d84fddb8446deced42cf77e5472616ff9056f52d15942c07b1f664d09cb11a25a69ff166e60fc41de395d2d65cd345822610cf0c82e6e29effb82fc47c077256f9ba72bcbb45d1273b32d25240eeff3d9dec3a798e5c3c97fdd59720bd7b7692588446e538eb7c1b30f94a0b051304c7d00788accf4529ab3a7a5d7c9a7510ab746820f8ea0a4916cb2f30d2eb97073125b6189dce432fc029e097b3b6f99c50d2b62b12d82dda4e99b51ca470c69f76951a1b98fb4ac7b4fb5e68b381c3f59b78d69d867829018ffdfe703f477e6ea8c7848cefe01cf4b7b212bfb7603623dd1409f96f3c105147347be39f6a7173a7e921aceda0f9a56c1d8cd43949c9420499a9d454740563eaf340e10b2ed0f21ceacff8c68b6af1e16018b36f010dc0fe0f7e0e04a7b9ba0edd00961b8e470c2ae27467242104858f27e61ef22ef498d098f64a0822eac1ec3523a221355727e82a66d1130401f027233603838f33f511a0b9d24854cdf1175b9293e88c0f361f1f4a4fe2c36beed05cfebba4f7c0a98c8c7eba2cca3debe087c4f73f8ce0f45e0846c3bd8f4e4a50f162c8af253490c30a5e152ec256f8a0be9953bffd2a560aff0638e8a2b2d361bd5ce708121d734ca6c46ac5f8ada7d07771e3cff2d5fd32f1ef027a03f0e4fccc5f28b0d590c58a05268fb9e6dc655f4b37c263e55b3ed8b84b93e096454db6f98cb0eb6902aa41e67ad9a9425c6c09964c9d6b30af272b00721787b85e4ad5281ea4e863e05e6bbec4ce556b68af2b5695bd77465df9855946be3620596cb0cb58c9907dbd79ede5dbcf8184aae8783c6fc7c326f0e3af900f944faf97b72c45e10ef4568f0af028081f1570e0ff42e69b1b4aa9a6238568a5d6e7dc80c5a30dc06320999634dcaf10b135f29779d2763fc508784d52df9d5b7b3d03bccceba8b7996336ff37ee188b038f0350758583c3b5198e14622ebf34c7a37afeeee68655ba112b63ccbe8f35fb71c42ece046af757fc2b26e553443f612a1b2258e24ac4ee8e45038171ab22e7fc845d07b01bfd321447ecc1fb301dc45dfd069c8f3fe2fb796d71ac118ee36e6c0e6093d77c062121b1f8893f5bf203c4e40a0167580f002f2f263aa001ae088fb0b9ee38d3985dfc66c29925f04ba4be726010614e064d2dbd6a2b0d8f42b5fa5671a0a13caee83401f165530f82b9608b2a07060500a9119c78f58d49646408451382ba7d36fc3dd558abe5b020ce9a8062d25f5baa0a2c587a94330366ba8ea1968fa2b393dbf167a5c117510634e23a781691c88521f40d012debc5e753ae27d5a8f20f5ad8deca5ee76244e99e0791037798bb9757444d833612d8817d2c617c064a891a3e36205172ec08cf28ceddb30f1b0326ac5fccd4a361c20e5c3b580712d0b731f47b6f396189b86ee0673adeae0912d4ac5748d8bfcc49554c86a4f5b75b189392e893c38cab17c7cc112ee1d24124531e434f35353ff3b6c80c729bda88d94bcef2f52c693c9f04281c8095b6ba97fc59338d3c5c9e4c8ff58b8ad7bf6b99007a3278fc42e35923334c3f94389a2ded9a4146ac334bcde92bfbcce7339d42927be9b0c3a4060f50fc1c669ff8bad9122f601e23c46aba8e863a032f9e38f51911407a420fed89b1acdae80e575afb8d2459aed183a6e31087c98d22f04301905848e4f0b0bdfb6a270345df01fee31e5f3f6dc54f1f6a540f0ef880466e33c6e200ea71189eb8bf7959ad371f041afc3ad7dc553e220cc9f51b564795755ac83f24ad1fa440bd4d3b6ff824e2bb9850a52b7aa7178a04cbfdf3c7b05431dcd7ee2a7bbb076f0110f8b78593ec3da0d2a4ce5c60720bd11339903fece63d488c5f396a3488896f64d0e32ecb7e254dc7da13f686ae046f8700ac798845c2a7ca10a1105f279cbc10ddf2922766ff4e9479e7b4250dd1c6b79f31acc36ba4904f1f5c49cfeb8f4dd1be0005de5e8bac42c1ab0ffb73a5b417e0acd654c8cc43271e8632b759c4a65f3cf89a2380dc4f3236debaa55f8f303fac034c88bf8409d3b1364b04249329ac8102f39428f553baa1f4c1ea8dfa125f727c16c8997f25ef4c248819bb0f3038fe8f61daefa2083df33a8b8ea41c05633e1ae03cd9d2a7f6ed927d9d6c8f2841ac3f836ce96e0a7ccc3c35cb0b7a2800eb63459126f206612f6f8a52196c63a2c38ef74f490fc9342c2bada1cddff08e4d6a338bee6557df08c51fdf5c7adaf9d207533f07e953e4dc1c1e1d965a87cba038ea31ac35574233494d680066734fee4b8b1791689754115979d01b70e1f8a782f859728f92e18d1dab30c0259992c8be138f149007ae926e918f0fef4615de20abe05727d76b35c6c7792802b9dc2461328d0f50c89c5a9bc28f55a644abeac7d0598f29ecb964afcafd88b8b2638beb977522dd71a42507d28e5ff28c55984dfa27316b97cf9462c865f08d5b0e6bd91c0f736291454f5a585c74658db66301bf0003d4bb297e6d8c8b6c3dcdb23e26293797c55fdc408c6401345fafb00b396273bfeafe62c5b13ce678f6e45f14314247901a0055908d34c96183c072a1cc0f3dad7cd6ab35069cb640768f69d7fa91429ff95182a6e52a5e015934d015385ee8b452b18319793bc25e53a7c32b986ddcfd34860c7dade064e215226133b5fbdf597e40857e9d04813f2c81eab02d26d497235237afe98e1d4c9138c322f89b09bc5d1c66e7fc931a086f4426f8fcfc1a0594ffa18f3c4d757d8789ba889df9884fb72ad93d7aeafa1c01b722ae8cef3748ddce569128c4d8cf5f6041a538bf0329b32c81006df7ce1dadc43a55ae1c48a2ddbe596aa45e3c1bb4a53bab323de4dbc689afdb7211a2112ac4cabefd253fec4306e1f82912ec1aac7d79b58aaed8cb91a911029b9098a46dfc20c2fecd8b790395a06787abcae09b4656db2b09dbc6b5f95c8a28a6ffd8a1bccef21396feefa5bac9e5c09540c255e9cd74c8376b2547e03f15247296dd399ad11f98a53856cedf8dcf4f44373c86649326713984df0395a57bf7fff9d155b7f5f02af534df22a26cb12c3ec2513fbadf44e3a91539ef026b0ccfb8da88279b1ada8637a2f31041e872f61a3974902af46fe33ea85f6ce722eadca45ddbf0d777f603b59af0e70b3c32b74b066afe0a5eb596d661c6dbcf4b743c5984fe58f238ffc8b7c3933161beff91edd7ad53b3a26af18e73708a48e420321d864ec580c9acedcf3d35a462e44bae01674865c6bf829f46b469c8fc7b91c326ab94cd1ff9655d0fd1a63d45ce28e529f09b20b3947ecd15fef700c32a032ffdac483b99b23fe73a7d3e580b48a6e2751b6566581fc0a1139ac39acf3937624c017e900827e3ae0fcf30751430cb8925b6e67ce9a61a721c55234521953f0c35bd3e10d578c478b8c99eef693632a0c1617d91c869b20f6892b1b5dde7734dd27f48d09992c9d636490e9b61b940272dca23cd07a043396efc05a4a35b61aeb8688d1c53568ccdc02bdcd56964d0cb318662fe520b2de1d31f09416c89c937388a32fce8ba7bec6b7d8519137f24f259a626372c15319ad27420af9859ab82abf636e18aac9f571b8418602bc8206da79b1dc870096796760ef4508da06f36981d690f98753c61d69f92282f9d94569be5fb050ec52224502984d2ce463cf0a3379e6f5b19329b15c8dca56a3dce515c0950ed7744f46dcc1643c807e6cab88496463a21171cf5e10fedda8cc7524a4e56adfc19cda29276cb50d99626dc6c21da24e2adbc94d80d9568c8e5891ceac716588477b0a3ce448f8f883be35ed9a09a033a50ca7d58fe58386c7fb3a8089ea4d532ae1e5af1415b80feca86ddc2bdfaf3ce9e1748e871c5bad53272aab5e5f4fee1af89c7c642af2f727ad55cd0c512dc2ae452362326b231abbe1da6080999b9eddc2dae24f1a56c8784204eedccd1cdc142069b794dc59462980b4fb5cc108661d5ea9fddff6ae0ff930694c4bb738be540761d2d2176e5ff9cb067aa3d031b636e5e0c12d39d7b516393d9fdeb9a4eed3dfe8dd9f7e35af681bdd82ac8509b4201b61ac10e865315998a6febe79aced1b72432b3ab01caa6bc4384cc2fdd0c1ce9a3a663aa5ac8da561e8a88e5d313cde57f1aa2642d08a6a7bf1bf65cbcfae8772c79bad6f4962bf2f8a91a971f51f236a7a7ee4b82d79ac0e2c5c3f516006b5a217b90f3b1e30795b715e40a1d44dd5a81bc6ab071d0a53f96100389a477dd64a899654d950aec6a717ed0631415d46a63f2809fd18e88a8bd862e3242a4a484a651aeb5e8680f93216b8887527a537095f3d47e0030de40d4576ca7f09ec57185300a65437a37ce09ba082e492cd9c862a85ff9dc305a5463d1d65b2e61edf07e67e03c3ab8528965f79034700ff42dda3a778058b68ed09886239411c16b027f99505e1892e3403d4084110f4215fea11d265516f67eedb9e80776f5634eeb2ecab8c2af6248571b7a1cd988ec948226157d034c72f877ea75266ee0d8228307936adbf8ffc6ecd4afcf3dfb1c55f1b9c78f83a399f069b15a0513e80cd9473b1574048f5aef718bab5a6a3b40217277175c90d19c7fcef7f1544ab8095e9b0d243326114b76dc1bf231ddae87258a098096faa66df065875c45e6cb989d850e2247002f69ca7c078726c8358d056f01ff5ff6fe44e7b33b3a0a2d5c851871db97353ffeff0b551e9715679bcf3cecba7da1c01018acba78bf900d1d3adc639038faff295ebb2fb134a6e92749563026919ea26dd666702f6df139fe6ddc11cc0f2c1cece03aaf1f76530551d30371ade8d725e28b3afe9ff30c94a77118008e7f0c9146168985828ea38af2eaa3c4f85bfc2fb89f0ef8bec5b72ff4fc4ae29e38e91a7eade68c41e860b0bdde162110e18b5e36ef7184b50f781fc93d1e0c00400615d6c9338ac9ad31afe2c9c3fd79fec075cf361722f657cb37665839c528dac1a769bbe29e4980e7376e75fedda5bf88503eb7f335f8025efed8970e5203c4679b90c250f91e91f35548bddf352cfc7dd9e7ba3abd31cb7c4cc8a0d726eaa2f311ea05ea9ed9200", 0x2000, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002340)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002380)=[@text16={0x10, 0x0}], 0x1, 0x55, 0x0, 0x0) (rerun: 64)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002700), r4)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2501000000140002007767320040000024000300"/70], 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4004040) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2840, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (rerun: 64)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002540)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000002580)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe5, 0x40, 0x2d, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xe}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x47, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x91, 0xff]}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f00000026c0)=[@textreal={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) (async)
setreuid(0x0, 0xee00)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async)
ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f0000000180)={{0x0, 0x1, 0x4, 0xc, 0x5, 0xe4, 0x40, 0x7, 0x0, 0x2f, 0x16}, {0x200000, 0xffe, 0x3, 0x4, 0x40, 0x5, 0x7d, 0x81, 0x5, 0x3, 0x2, 0x8}, {0xeeef0000, 0x50000, 0xf, 0x3, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa8, 0x4, 0x9}, {0x5000, 0xeeee0000, 0x9, 0x6, 0x1, 0x8c, 0xb, 0xff, 0x8, 0x3, 0x8}, {0xdddd1000, 0xdddd9000, 0x2, 0x3, 0x3, 0x6, 0xed, 0x80, 0x7, 0x2, 0xdb}, {0x61ff8, 0x50000, 0x10, 0x7, 0xb1, 0x4, 0x21, 0x81, 0x9, 0xff, 0x1}, {0x2318f800, 0x8000000, 0x4, 0x7, 0x2, 0x5, 0x7, 0x3, 0x5, 0x82, 0x1, 0x70}, {0x70000, 0x1000, 0xb, 0x5, 0xf, 0x27, 0x1b, 0x74, 0x2, 0xc, 0xb0, 0x9}, {0x2ffc, 0x1000}, {0xdddd0000, 0x7ff}, 0x80000031, 0x0, 0xa000, 0x2024, 0x5, 0x500, 0x3000, [0xf90000000000, 0x100000000, 0x80, 0xfff]})
bind$bt_sco(r3, &(0x7f0000000080), 0x8)
listen(r3, 0x0) (async)
r12 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r12, 0x402c542c, &(0x7f00000002c0)={0xfffff2d4, 0x200ffffe, 0xb, 0xfffffff7, 0x3, "05002804000000d510f90e3600", 0x0, 0x7ff}) (async, rerun: 32)
readv(r12, &(0x7f0000000300)=[{&(0x7f00000023c0)=""/218, 0xda}], 0x1) (rerun: 32)
ioctl$TIOCSTI(r12, 0x5412, &(0x7f00000024c0))

9.168703981s ago: executing program 4 (id=361):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = syz_mount_image$ext4(&(0x7f0000003640)='ext4\x00', &(0x7f0000003680)='./file0\x00', 0x800, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@data_journal}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@usrjquota, 0x5}, {@dax_never}, {@nomblk_io_submit}, {@nodiscard}]}, 0xff, 0x47b, &(0x7f0000003780)="$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")
syz_mount_image$ext4(&(0x7f0000003c00)='ext4\x00', &(0x7f0000003c40)='./file0\x00', 0x800, &(0x7f0000003c80), 0x26, 0x763, &(0x7f0000003cc0)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x10)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000044c0)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000004c00)={0x1, &(0x7f0000004c40)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x20448, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
removexattr(0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000002c0))
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f0000000200)={[{@noload}, {@resgid}, {@inlinecrypt}, {@usrquota}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x491, &(0x7f0000000540)="$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")
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x450a02, 0x80)
write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000400)=ANY=[], 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000a40)='.\x00', &(0x7f0000000a80)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
ftruncate(0xffffffffffffffff, 0x1)
mount$bind(0x0, &(0x7f0000000ac0)='./file0\x00', 0x0, 0x100000, 0x0)
syz_clone(0xb21e0180, 0x0, 0x41, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x89901)

8.438870066s ago: executing program 9 (id=364):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)="30313a38303a87b46bce80b14863323a30", 0x11)
setns(r1, 0x80)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200139"], 0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000280)=0x7, 0x4)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0})

7.867594024s ago: executing program 4 (id=370):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c3601, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "febdb6b9020197a02df680f5c495f22b"})
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x1)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000300)={0x8f, 0x0, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)

6.812283702s ago: executing program 2 (id=375):
unshare(0x2068000)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x16, &(0x7f00000008c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
clock_settime(0xa00, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x42, 0x0)
mount$fuseblk(&(0x7f0000000640), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x488, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,\x00'])
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, 0x0, 0x0)
setpriority(0x0, 0x0, 0x200002a14b56)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'wlan0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtclass={0x68, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x68}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000040)=<r6=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./debug\x00', &(0x7f0000001080)='debugfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./debug/lru_gen\x00', 0x2, 0x0)
write(r7, &(0x7f0000001100)='+ 1 0 4', 0x7)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000100)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r6, 0x1, &(0x7f0000000140)={{0x77359400}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x25}]})

6.492248925s ago: executing program 2 (id=381):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000840)='./file0\x00', 0x808012, &(0x7f0000000880)=ANY=[], 0x3e, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f00000003c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_create1(0x80000)
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000004c0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000500)=0x7, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f00000007c0)=0x468, 0x4)
getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000800))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4)
setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f00000000c0)=0xe, 0x4)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0xe22, 0x5, @empty}, 0x1c)
mkdir(&(0x7f0000000140)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./sys_mnt\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)

6.380250237s ago: executing program 6 (id=382):
r0 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000))
syz_mount_image$erofs(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2800080, &(0x7f00000009c0)=ANY=[], 0x0, 0x20e, &(0x7f0000000a00)="$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") (async)
syz_mount_image$erofs(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x2800080, &(0x7f00000009c0)=ANY=[], 0x0, 0x20e, &(0x7f0000000a00)="$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")

6.044590171s ago: executing program 4 (id=383):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000c40)={0x3, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x2, 0x5, 0x0, 0x8, 0x7, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x1b, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}]}, 0x38}, 0x1, 0x7}, 0x100)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29)
connect$inet(r3, &(0x7f00000004c0)={0x2, 0x4e20, @multicast2}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000500)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000540), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000580)=0x1800, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000b40)=0x800, 0x4)
sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000000, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r3, 0x0, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{<r7=>0xffffffffffffffff, &(0x7f0000000000)='!\xf8\x00', 0x40000, &(0x7f0000000080)={@_ha_fsid={[0x40]}, {0x7, 0x9, 0x9, 0x5a}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xffffffff}, {[0xfffffffd, 0x2, 0x5b6232c3, 0xb]}, 0x7fffffff, 0x84, &(0x7f0000000140)=""/132})
close_range(r7, r7, 0x2)
r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x0, 0x2)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b80), 0x8502, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000bc0)=0xf)
ppoll(&(0x7f0000000c00)=[{r9}], 0x1, 0x0, 0x0, 0x0)
fsmount(r8, 0x1, 0x0)

6.033374492s ago: executing program 38 (id=383):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000c40)={0x3, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x2, 0x5, 0x0, 0x8, 0x7, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x1b, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @private0, 0x2}}]}, 0x38}, 0x1, 0x7}, 0x100)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1414aa0000000000000000000000000000000900000008000000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000000000000000000000000000000000000700000000000000fcffffffffffffff00000000000000000900000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000100000000000002000000200000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x29)
connect$inet(r3, &(0x7f00000004c0)={0x2, 0x4e20, @multicast2}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000500)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000540), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000580)=0x1800, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000b40)=0x800, 0x4)
sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000000000000000000000000000bbac1414bb000000000000000000000000ffffff2b6b57a470b83fce00000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000000, 0x4, 0xad, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
write(r3, 0x0, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{<r7=>0xffffffffffffffff, &(0x7f0000000000)='!\xf8\x00', 0x40000, &(0x7f0000000080)={@_ha_fsid={[0x40]}, {0x7, 0x9, 0x9, 0x5a}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0xffffffff}, {[0xfffffffd, 0x2, 0x5b6232c3, 0xb]}, 0x7fffffff, 0x84, &(0x7f0000000140)=""/132})
close_range(r7, r7, 0x2)
r8 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0)
fsmount(r8, 0x0, 0x2)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b80), 0x8502, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000bc0)=0xf)
ppoll(&(0x7f0000000c00)=[{r9}], 0x1, 0x0, 0x0, 0x0)
fsmount(r8, 0x1, 0x0)

6.020500323s ago: executing program 6 (id=385):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x1, 0x18, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0]})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2f, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x978b2fc81fde99a9, 0x5, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x81, 0x100}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x1, r0, r0, r0, r0], &(0x7f0000000380)=[{0x0, 0x4, 0x5}, {0x3, 0x1, 0x10, 0x9}], 0x10, 0x2}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r1, r0}, 0xc)
r2 = syz_open_dev$mouse(&(0x7f00000004c0), 0x0, 0x4000)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000500)={@local, @private, <r4=>0x0}, &(0x7f0000000540)=0xc)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', <r5=>r4, 0x4, 0x7, 0x43, 0x8, 0x12, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x1, 0x7800, 0xab, 0x6}})
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000740)={r0, &(0x7f0000000640)='\\]\x00', 0x680c01, &(0x7f0000000680)={@align=0x5, {0x3, 0xf, 0xffff, 0xffffffffffffffdc}}, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0xe18d}) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000740)={<r6=>r0, &(0x7f0000000640)='\\]\x00', 0x680c01, &(0x7f0000000680)={@align=0x5, {0x3, 0xf, 0xffff, 0xffffffffffffffdc}}, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0xe18d})
ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000780)={0x2, 0x7f})
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x0, 0xffff, 0xff0, 0x2, 0xb4b, 0xffffffffffffffff}) (async)
ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x0, 0xffff, 0xff0, 0x2, 0xb4b, <r7=>0xffffffffffffffff})
sched_setscheduler(r7, 0x3, &(0x7f0000000840))
sendmmsg$unix(r2, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, &(0x7f00000018c0), 0x0, 0x40}}], 0x1, 0x4) (async)
sendmmsg$unix(r2, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, &(0x7f00000018c0), 0x0, 0x40}}], 0x1, 0x4)
symlinkat(&(0x7f0000001940)='./file0\x00', r6, &(0x7f0000001980)='./file0\x00')
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001a00), r6)
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000001c40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a40)={0x19c, r8, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xe}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x2c}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_batadv\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xb}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x9}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x18}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
mount(&(0x7f0000001c80)=@sr0, &(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)='exfat\x00', 0x262000, &(0x7f0000001d40)='GPL\x00')
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001d80)={'/dev/syzrnull', 0x0}, 0x2e240, 0x0) (async)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001d80)={'/dev/syzrnull', 0x0}, 0x2e240, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000001dc0), 0x200802, 0x0) (async)
r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001dc0), 0x200802, 0x0)
ioctl$SET_BITMAP_FILE(r9, 0x4004092b, r10)
socket(0x25, 0x1, 0x1) (async)
r11 = socket(0x25, 0x1, 0x1)
connect$unix(r11, &(0x7f0000001e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
connect$unix(r11, &(0x7f0000001e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
recvmmsg(r6, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/71, 0x47}, {&(0x7f0000002f00)=""/78, 0x4e}], 0x3, &(0x7f0000002fc0)=""/254, 0xfe}, 0x2ab4}, {{&(0x7f00000030c0)=@xdp, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003140)=""/130, 0x82}, {&(0x7f0000003200)=""/174, 0xae}, {&(0x7f00000032c0)=""/96, 0x60}, {&(0x7f0000003340)=""/109, 0x6d}, {&(0x7f00000033c0)=""/231, 0xe7}], 0x5, &(0x7f0000003540)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f0000004540)=@tipc=@name, 0x80, &(0x7f0000004a40)=[{&(0x7f00000045c0)=""/197, 0xc5}, {&(0x7f00000046c0)=""/72, 0x48}, {&(0x7f0000004740)=""/224, 0xe0}, {&(0x7f0000004840)=""/201, 0xc9}, {&(0x7f0000004940)=""/204, 0xcc}], 0x5}, 0x10}, {{&(0x7f0000004ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004b40)=""/135, 0x87}, {&(0x7f0000004c00)=""/61, 0x3d}, {&(0x7f0000004c40)=""/57, 0x39}, {&(0x7f0000004c80)=""/174, 0xae}, {&(0x7f0000004d40)=""/31, 0x1f}, {&(0x7f0000004d80)=""/165, 0xa5}, {&(0x7f0000004e40)=""/73, 0x49}, {&(0x7f0000004ec0)=""/117, 0x75}, {&(0x7f0000004f40)=""/55, 0x37}], 0x9}, 0x40}], 0x4, 0x2, &(0x7f0000005140)={0x0, 0x989680}) (async)
recvmmsg(r6, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/71, 0x47}, {&(0x7f0000002f00)=""/78, 0x4e}], 0x3, &(0x7f0000002fc0)=""/254, 0xfe}, 0x2ab4}, {{&(0x7f00000030c0)=@xdp, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003140)=""/130, 0x82}, {&(0x7f0000003200)=""/174, 0xae}, {&(0x7f00000032c0)=""/96, 0x60}, {&(0x7f0000003340)=""/109, 0x6d}, {&(0x7f00000033c0)=""/231, 0xe7}], 0x5, &(0x7f0000003540)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f0000004540)=@tipc=@name, 0x80, &(0x7f0000004a40)=[{&(0x7f00000045c0)=""/197, 0xc5}, {&(0x7f00000046c0)=""/72, 0x48}, {&(0x7f0000004740)=""/224, 0xe0}, {&(0x7f0000004840)=""/201, 0xc9}, {&(0x7f0000004940)=""/204, 0xcc}], 0x5}, 0x10}, {{&(0x7f0000004ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004b40)=""/135, 0x87}, {&(0x7f0000004c00)=""/61, 0x3d}, {&(0x7f0000004c40)=""/57, 0x39}, {&(0x7f0000004c80)=""/174, 0xae}, {&(0x7f0000004d40)=""/31, 0x1f}, {&(0x7f0000004d80)=""/165, 0xa5}, {&(0x7f0000004e40)=""/73, 0x49}, {&(0x7f0000004ec0)=""/117, 0x75}, {&(0x7f0000004f40)=""/55, 0x37}], 0x9}, 0x40}], 0x4, 0x2, &(0x7f0000005140)={0x0, 0x989680})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005640)={r6, 0xe0, &(0x7f0000005540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000005380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000053c0)=[0x0], &(0x7f0000005400)=[0x0, 0x0, 0x0, 0x0], <r12=>0x0, 0xb9, &(0x7f0000005440)=[{}], 0x8, 0x10, &(0x7f0000005480), &(0x7f00000054c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000005500)}}, 0x10)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000005680)={0x1b, 0x0, 0x0, 0xccc8, 0x0, 0x1, 0x5, '\x00', r5, 0xffffffffffffffff, 0x4, 0x1, 0x47c0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000005780)={0x1f, 0x9, &(0x7f0000005180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}, [@ldst={0x3, 0x3, 0x1, 0x9, 0x2, 0x6, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000005200)='syzkaller\x00', 0xf, 0xbf, &(0x7f0000005240)=""/191, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000005300)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000005340)={0x3, 0x10, 0x7, 0xffffffff}, 0x10, r12, 0xffffffffffffffff, 0x3, &(0x7f0000005700)=[r13, r6, r0, r2], &(0x7f0000005740)=[{0x1, 0x3, 0xd, 0x4}, {0x0, 0x4, 0x4, 0x6}, {0x0, 0x5, 0x2, 0x9}], 0x10, 0x2}, 0x94)
timer_create(0x3, &(0x7f0000005840)={0x0, 0x2b, 0x5, @tid=r7}, &(0x7f0000005880))
ioctl$AUTOFS_IOC_ASKUMOUNT(r10, 0x80049370, &(0x7f00000058c0))
ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000005900))
ioctl$KVM_GET_TSC_KHZ_vm(r6, 0xaea3) (async)
ioctl$KVM_GET_TSC_KHZ_vm(r6, 0xaea3)

5.984504147s ago: executing program 6 (id=386):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0), &(0x7f0000000300)=ANY=[], 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200012, &(0x7f0000000440), 0x4, 0x5a4, &(0x7f0000000480)="$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")
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18080004000600000000000000140000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000e80)={r3, &(0x7f0000000ec0), &(0x7f0000000f00)=""/155}, 0x20)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000002440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x133e, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x0, 0x50, 0x7, {0x8, 0xb, 0x1, 0x0, 0x1, 0x22, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x2318}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x9, 0x5, {0xa, 0x25, 0x25, 0x5, 0x1, 0x64}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x3, 0x1, 0x70, {0xa, 0x25, 0x25, 0x5, 0xf7, 0x7}}}}}}}}]}}, &(0x7f00000024c0)={0x0, 0x0, 0x10, &(0x7f0000002500)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x2, 0x9, 0x69, 0x3}]}, 0x1, [{0x101, &(0x7f0000002540)=@string={0x101, 0x3, "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"}}]})
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000fc0)={r3, &(0x7f0000001000), &(0x7f0000001040)=""/4095}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000002100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002180)={{r3}, &(0x7f00000021c0), &(0x7f0000002200)}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x16, 0xc, &(0x7f0000002300)=ANY=[], &(0x7f0000002340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002380)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000002400)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x0, 0x1f8, 0xffffffff, 0x0, 0x0, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id=0xfffe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xe8001, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0x2})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000ec0))

5.56637663s ago: executing program 2 (id=387):
r0 = socket(0x10, 0x80000, 0x5)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_team\x00', &(0x7f0000000140)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}})
bind$netlink(r0, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x12001, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'sit0\x00', 0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000006, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x3, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
geteuid()
getresuid(&(0x7f00000006c0), &(0x7f0000000700)=<r6=>0x0, &(0x7f0000000740))
quotactl$Q_GETFMT(0xffffffff80000400, 0x0, r6, &(0x7f0000000780))
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000007c0)={0x0, 0x21, 0x2}, &(0x7f0000000800)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000840)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r7, 0x1, &(0x7f0000000880)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x40010, 0xffffffffffffffff, 0xfc778000)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)=<r8=>0x0)
timer_create(0x4, &(0x7f0000000900)={0x0, 0x24, 0x5, @tid=r8}, 0x0)
inotify_init()
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r10, 0x4188aec6, &(0x7f0000000980)={0x0, [{0x2, 0x8, 0x1979, &(0x7f0000000b40)='M'}, {0x2, 0x10, 0x8, &(0x7f0000000b80)="9519"}, {0x1, 0x0, 0x7, 0x0}, {0x3, 0x0, 0xf8, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xd, 0x0}, {0x2, 0x0, 0xc96, 0x0}, {0x1, 0x0, 0x80000200, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0xfe000000, 0x0}, {0x0, 0x0, 0x3ff, 0x0}, {0x2, 0xffffffffffffff16, 0x71eb, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x7ff, 0x0}]})

5.500376147s ago: executing program 2 (id=388):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000406a05310300010000000109022400010000000009040000010300000009211001000122170009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x17, {[@local=@item_012={0x2, 0x2, 0x0, '(V'}, @global=@item_4={0x3, 0x1, 0x8, "db58f3d7"}, @main=@item_4={0x3, 0x0, 0xa, "704b21d5"}, @global=@item_4={0x3, 0x1, 0x3, "c7aea0c7"}, @global=@item_4={0x3, 0x1, 0x3, "bda91b2c"}]}}, 0x0}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0xc800)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0) (async, rerun: 64)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x50) (rerun: 64)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r3, <r4=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000680)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.270057s ago: executing program 0 (id=384):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xc03, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[], 0x3, 0x105d7, &(0x7f0000001140)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000011740)='./file1\x00', 0x42, 0x0)
fadvise64(r2, 0xf4ffffff, 0x1, 0x4)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000000), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
madvise(&(0x7f00001e7000/0x1000)=nil, 0x1000, 0xe)
mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0)
r5 = fsopen(&(0x7f0000000200)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=<r7=>r6, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r8, r7, 0x15, 0x0, @val=@iter={0x0}}, 0x20)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt(r9, 0x400000000000003a, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800))
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)

4.868573481s ago: executing program 9 (id=396):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000300)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000ac0)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000b00)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000b40)=0x5)
sched_setscheduler(r0, 0x1, &(0x7f0000000b80)=0x7)
openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/self/make-it-fail\x00', 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa224000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpid()
syz_pidfd_open(r3, 0x0)
prlimit64(r3, 0x6, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000cc0)=@abs={0x0, 0x0, 0x80}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000d40), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000d80), 0x4000087, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28}, 0x28)
socket$xdp(0x2c, 0x3, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwrite64(r4, &(0x7f0000000e80)='E', 0x1, 0x4fed3)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000ec0)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x100000001, 0x3})
socket$inet6(0xa, 0x1, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000001140)='./file0/../file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x13}, 0x19)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d000000000300000001000000000000000100000004000000030000000000000000000005000000000000002e", @ANYRES8], &(0x7f0000002500)=""/4090, 0x5e, 0xffa, 0x1}, 0x28)

4.868149181s ago: executing program 7 (id=397):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000004fe0000000012000002000000010000000000000000000004000000000000"], 0x0, 0x3e}, 0x20)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={&(0x7f0000001d80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) (async)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0xa, 0x400000000008d}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x5)
sched_setscheduler(r1, 0x1, &(0x7f0000000700)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000780)=@abs={0x0, 0x0, 0x80}, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f0000000800), 0x651, 0x0) (async)
recvmmsg(r2, &(0x7f0000000840), 0x4000087, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0xa7c, r4}, 0x38) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000066"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000100000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000002b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}) (async)
r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='wchan\x00')
preadv(r9, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/128, 0x80}], 0x1, 0x5b, 0x0)
pwritev2(r8, &(0x7f0000000400)=[{&(0x7f0000000440)="92ee7b", 0x3}], 0x1, 0x4, 0x11, 0x15)
write$binfmt_misc(r8, &(0x7f0000000480)="c65e14feb0bf28d3479926b43a46e238bd47563f37de6e51f2af39991d3c98e72fe39223dab03da56f89580c555dffdb85c224b30b4294cf508e8d31b44c7c58a3e5e4875bae0cbd1844b085f1d766b87dc076b015608ed046ccce835d92c2bef8b24d42b3e35962d7673dfaed9364c17acc188dcd53620f137e0bbf49ff8fcbb70841a23d69b87fd1e411c8ff2e24d1c0aebf777f3ec64c8df68351146c89df565e82370c43b5a5fff4cd7c050a174c0378b9ba794dd77bb0e871", 0xbb) (async)
r10 = getegid()
fsmount(r8, 0x0, 0x78) (async)
setresgid(r7, r10, 0xee00) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x3c) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001dc0)={0xd, 0x4, &(0x7f0000001e80)=ANY=[@ANYBLOB="180600000000000000000000b000000000000000005952f855f275530b00006d"], &(0x7f0000001ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94)

892.430319ms ago: executing program 6 (id=398):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x801c0, 0x189)
syz_emit_ethernet(0x16, &(0x7f0000000080)={@multicast, @remote, @void, {@llc={0x4, {@snap={0xaa, 0x0, "af", "1a0c65"}}}}}, 0x0) (async)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xa, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
fcntl$setsig(r0, 0xa, 0x21) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x5d, {0x0, "48b8008000000000000066ba6100b8555ad4abef2fad21e6e60c0020000f23f86592927716b9800000c00f3235000800000f30d035000100000f006080000f47dff2b00f30"}}], 0x8d}) (async)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000002c0)={[{0x80000004, 0x5, 0xcb, 0x8, 0x7c, 0x2, 0x80, 0xe3, 0x3, 0x80, 0x8, 0x2, 0xe}, {0xe, 0xfffd, 0x3, 0x0, 0x9, 0x3, 0x8, 0x4, 0xd, 0x13, 0x3, 0xc8, 0x1}, {0x1ff, 0x5, 0xc, 0x0, 0x26, 0x4, 0x81, 0xfb, 0x4, 0x4, 0x0, 0xfe}], 0x9}) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x9, @control_area=0x2e, 0x4, 0x7, 0x9}}], 0x38}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000440)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000480)={{0x0, 0xffffffff, 0x8, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffffffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x80050033, 0x0, 0x2000, 0x20, 0x0, 0x500, 0xfee00900})
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000005c0)={0xe0003, 0x0, {[0x8, 0x7, 0x4, 0x8, 0x3, 0x8, 0x4, 0x4]}})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32)
fcntl$setlease(r0, 0x400, 0x1) (rerun: 32)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
close_range(r0, r5, 0x0)

817.263027ms ago: executing program 9 (id=399):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)={0x30, 0x19, 0x1, 0xfffffffc, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00'}, @nested={0x14, 0x9, 0x0, 0x1, [@nested={0x8, 0x50, 0x0, 0x1, [@generic="ac35cc8d"]}, @typed={0x8, 0x14e, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1, 0x0, 0x0, 0x4000041}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x5, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000200))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x1e6eb000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mincore(&(0x7f0000596000/0x3000)=nil, 0x3000, &(0x7f0000000300)=""/217)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000006970000000000c00028008000100440a1e4aabb0414400"/40, @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0)

708.630667ms ago: executing program 7 (id=400):
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000f100"/20, @ANYRES32=0x0, @ANYBLOB="0317000041000000140012800b0001006d616373656300000012028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
getpid()
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001080)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000010c0)={r5, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r5, {0xb, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4)

692.854999ms ago: executing program 0 (id=401):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1004, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2008800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f00000045c0)={0x15, {{0x29, 0x0, 0x34000000, @remote}}}, 0x88)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000004680)={'syz1\x00', {0x8, 0x2, 0xb8d9, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffb, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xd7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5398, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004b00), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004b40), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000004b80)={0x60000, 0x18000, 0x9fef19c9430e26b8})
r6 = fsopen(&(0x7f0000004bc0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r7, 0x5501)
unlinkat(r7, &(0x7f0000004c00)='./bus\x00', 0x200)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000004c80)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000004d40), 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000004e00)}], 0x1}}], 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004e40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r9 = dup(r8)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000004e80)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000004ec0)=[@text32={0x20, &(0x7f0000004f00)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000004f40)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)

662.657272ms ago: executing program 6 (id=402):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r0, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0x168})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r1=>0x0})
ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x9, 0x2003)
r2 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bfe000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=[@nested_set_state_pages={0x140, 0x28, {0x1, 0x2c, @unmapped=0xf0000008}}, @uexit={0x0, 0x18, 0x9}, @nested_create_vm={0x12d, 0x18, 0x3}, @cpuid={0x64, 0x18, {0xfffffff8, 0x8b}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18}], 0xa0})
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000200)={[{0x6, 0x4, 0x2, 0x7, 0xa, 0x5, 0x8, 0x8, 0x4a, 0x7, 0x6, 0x7f, 0x1}, {0x6, 0x8, 0x6, 0x81, 0x2, 0x61, 0x80, 0x1, 0x3c, 0x0, 0x28, 0x4, 0x1}, {0xb, 0x1, 0x4, 0x3, 0xa, 0x5, 0x18, 0x7, 0x6, 0x4, 0x8, 0x6, 0xd}]})
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
read$FUSE(r3, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
sched_setaffinity(r4, 0x8, &(0x7f0000002300)=0xa)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt(r5, 0x3, 0x4, &(0x7f0000002340)="33c591075185b1067643110fe421ca686afbc1e901ba1b0ec6304ba35268fd15513be2113a601b7a181443e2ee23c674978734a285abd687f5ee738600f8d488c176a35cd722b710f93cdd0747f43ff28670081561503fa6ccccc3efb07862c9756ba94a035c5a3792bd9188a9381864691daf65889e1de2fa02b7b575fef28df5182685843add5bd8a2e41a49a30aec04248abbe53e0be80c0128310efad68733525a4ec9850e1ca7c5e1792b9c23d26594a9f23c08cb822c9385f6bb3ce6796423378a0678ad41faeb115ec02e61f857bb0e", 0xd3)
accept$unix(0xffffffffffffffff, &(0x7f0000002440), &(0x7f00000024c0)=0x6e)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x6, &(0x7f0000002500)=""/47)
mount$overlay(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580), 0x1400, &(0x7f00000025c0)={[{@uuid_on}, {@uuid_auto}, {@redirect_dir_nofollow}, {@redirect_dir_nofollow}]})
r6 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000002600)='bpf_lsm_binder_set_context_mgr\x00')
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002640)=r6, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000002740)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x1c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}]}, 0x1c}, 0x1, 0x0, 0x0, 0x54880}, 0x2404c000)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r0, 0x4020aed2, &(0x7f0000002780)={0x9f852cc3212722ad, 0x10000})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002800), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r8, 0x10, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80840}, 0x8040)
syz_genetlink_get_family_id$batadv(&(0x7f0000002900), r7)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002940)='cpuacct.usage_all\x00', 0x0, 0x0)
sendmsg$AUDIT_SET(r9, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x3c, 0x3e9, 0x800, 0x70bd26, 0x25dfdbfc, {0x42, 0x1, 0x1, r1, 0xd, 0x6bf, 0x850, 0x6, 0x0, 0xa64, 0x1}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x8004)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002a80)='./binderfs2/custom0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000002ac0)={0x73622a85, 0x80b, 0x2, 0x1})
ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000002b00)=0x7)
write$FUSE_INTERRUPT(r9, &(0x7f0000002b40)={0x10}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000002cc0)={'ip6tnl0\x00', &(0x7f0000002c40)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x3, 0x4, 0x20, @remote, @private1, 0x40, 0x7, 0xffff, 0x81}})

580.7512ms ago: executing program 7 (id=403):
ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x40}], 0x1, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0, 0x0)
r0 = openat$binderfs_feature(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/features/extended_error\x00', 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)
r1 = eventfd2(0x0, 0x80800)
r2 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000003c0)={0x10000015})
epoll_pwait(r2, &(0x7f0000000400)=[{}], 0x1, 0x10000, 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000440), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="e0dbfc145c15d2e35146dde1ec9c9dbf56e3c0a045475b4686fc90909fa008bcb551d5a7e30551fdf240f5e6805b2c2f7c0dcd0db8353dc1a346926435", 0x3d, 0xfffffffffffffff8)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000700)={r3, 0xe7, 0xac}, &(0x7f0000000740)={'enc=', 'raw', ' hash=', {'sha512-arm64\x00'}}, &(0x7f00000007c0)="489fea20a55736b026afc23ac1a56ced28e1a2dc632f35eeac59c057529f5e39f6097debc3676a917fd019998b83518904c55099a313c834956d7170bbf84564d4b6805fd48f4fb5a783ab9f2dd1baaaa70ec4a8735ae9c5e6f53b1494b619d2ec03065a7d9c63d5b144223ac51862b2ebf12970bed9abea69b9cdcd22ebb1e5f7ae63d48e7efb2bd948116f8972b2e70e088f5c660ed66869cf1c1d34a620fcaa1bd784c32d6c672d03b27aaf61e90f68852dc1c7a8581ad889dba84e3647fc98603a7daf68e974dca79b1186d2db7d38ad24f8be031aa20cf218f96379c46516453c1a3e6d71", &(0x7f00000008c0)="342c5cb6ac177dfd217327c144af6e3aa755f5d05934fafc623cd6deeb5395fedf5e0766b22a77ee07963a9e8706f9a46a5c3118a8675e1ff250bd26a224395347e447ce8de414c5077c60c35c5c4edd02addbaed036b8a4f8769607c1f4af541de0790b3b61b20f9f8be1e828f40848e04f5521bc33649b0fe16c687e981fdb567cf1b74e48c3649e3dc61d4a2e2afd66cefbc1cf5c9dccf4079f4d09ae040dd9bfdfdc7338a7e29030839d")
r4 = syz_ublk_setup_io_uring(0xc1c, &(0x7f0000000000)={0x0, 0x2ed3, 0x1000, 0x0, 0xdd}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100))
syz_io_uring_setup(0x2cef, &(0x7f0000000140)={0x0, 0xf4a4, 0x15006, 0x3, 0x33d, 0x0, r4}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
r5 = accept4(r0, 0x0, &(0x7f00000002c0), 0x80800)
getsockopt$IP_SET_OP_GET_FNAME(r5, 0x1, 0x53, &(0x7f0000000300)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000340)=0x2c)
epoll_create1(0x80000)
syz_clone3(&(0x7f0000000580)={0x2800080, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)
fgetxattr(r4, &(0x7f0000000380)=@known='system.advise\x00', &(0x7f0000000600)=""/250, 0xfa)

545.102034ms ago: executing program 7 (id=404):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2}, &(0x7f0000000fc0))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000001000)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000001040)={{0x0, 0x3938700}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_mount_image$ext4(&(0x7f0000001080)='ext2\x00', &(0x7f00000010c0)='./bus\x00', 0x38880, &(0x7f0000001100), 0x1, 0x51a, &(0x7f0000001140)="$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")
truncate(&(0x7f0000001680)='./file1\x00', 0x20fdfffffe)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setns(0xc9, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000e80)={0x5, {{0x2, 0x4e1d, @empty=0xe0009eff}}, {{0x2, 0x4e24, @local}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x0)

13.007919ms ago: executing program 9 (id=405):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/net/ipv6/fib_multipath_hash_policy\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x450, 0x0, 0x1f0, 0x288, 0x3b8, 0x3b8, 0x158, 0x1f0, 0x288, 0x320, 0x3b8, 0x6, 0x0, {[{{@uncond, 0x0, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x80, 'kmp\x00', 'abc\x00', 0x3}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4b0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000540)={0x1})
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000580)={[{0x8000005, 0x0, 0x0, 0x0, 0xfc, 0x2, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x6, 0x0, 0x0, 0x5}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x5, 0xa6}]})

12.052949ms ago: executing program 2 (id=406):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071103100000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x4e)

10.641459ms ago: executing program 2 (id=407):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe22, 0x0, @empty}, 0x1c)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
setuid(0xee00)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x84, &(0x7f0000000200)=ANY=[], 0x0)
ioctl$TIOCMIWAIT(r0, 0x545c, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
syz_usb_connect(0x0, 0x75, &(0x7f0000000900)=ANY=[@ANYBLOB="1201100337a84240ce0a0216c750010203010902630001080058020904b1400067d366170a240103000a00020102052406000105240007000d240f0103000006001b1524120000a317a88b045e4f01a607c0ffcb7e392a1524120800a317a88b045e4f01a607c0ffcb7e392a000000000000000000"], &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0})

10.178749ms ago: executing program 6 (id=408):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, 0x0, 0x20008090)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setrlimit(0x1, &(0x7f0000000200)={0x3a49, 0x8})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000200), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x3}, 0x50)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0)

9.816589ms ago: executing program 9 (id=409):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x4076cbba9945d516, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='fd\x00')
getdents64(r6, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r7=>0x0})
syz_clone(0x2000, &(0x7f0000000440)="1b0db2b8081319f6264a4f08a917cdc39c96f03e3277645161ad7194b79787d99ddc94167aae663711b1e3204800b10a4d093afb034606ff01dce1df239fb24c9042ac612becfbf2d786a1f82cfa7526e0196a6d025ac0cbc32693547547d19dc267cb2f672db214983e0eb0879e0e3fe192cb3535b5d27f67618eac", 0x7c, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)="7c2e0fb153d64a2f1100aa655c4f470fc773c461865b61d72117bfd9bb17ff6a203945e4cc1ae481e039ef38e9d67a39998d0f98d23946eed5956db5f1caa2b02113457bd4e0f0724490e60941e27140e38974d89249c2a1a1ba98cc5783f23362cb84adbf10a71dec093953ec49f08fd762c7737b228566bcc87cc9492660e5e88747b2fab40caa31f2")
sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000001500080029bd9e9fe7a45fcdf7f4c9e46df2e3befad4fcc4b855337230f7048da08de4e20706246376535f6cd7c6714e2d1aaea8e34404e408735ede3c1d31e8039d83ca3f493865958651cd2261565b0a7a4ac3ccbafeed85d9daa34b16c2fc9ad7856681e2b6becb5a78eb75db0354fd13cf4c44f305d4db670d04175b7aaf16c493ff1fd5066b361fade33d72c0ad5313", @ANYRES32=r7, @ANYBLOB="08000a0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x2000884c)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf25150000002000018014000200766c616e30000000000000000000000008000300020000002000018014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000300000000001400020076657468305f6d6163767461700000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5c0001801400020062617461647630000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="f6ff000026ccb013f7d61508cdbc64cbaf1dcb7fb9f2f9fba6f67ab690b43c4acc97200af1ea29b799190b2884c0e288209f6842a99f7e52a517856a58efdb69b284150cc20bb6145ded0331bac2a52580a2c8d09f899659bef7705afc1a63fccbaf0e82ab54fb07ac08ac34861ec58d2e88010ecde5278698f26fd634a07b", @ANYRES32=0x0, @ANYBLOB="280001801400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x104}, 0x1, 0x0, 0x0, 0x40805}, 0x4001)
socket$nl_route(0x10, 0x3, 0x0)

7.575619ms ago: executing program 7 (id=410):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af0ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201})
ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl1\x00', <r3=>0x0, 0x8, 0x8000, 0x1, 0x7, {{0x14, 0x4, 0x1, 0x2d, 0x50, 0x64, 0x0, 0x0, 0x4, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x18, 0x3, [{0x4, 0x12, "b808c0a94cc16aeba8b7d24caf05a740"}]}, @end, @rr={0x7, 0x1f, 0x3c, [@local, @remote, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @noop]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x11}, @exit, @exit]}, &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x46, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0xe, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x1, 0x2, 0x1ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[r0, r0], &(0x7f0000000500)=[{0x4, 0x5, 0x2, 0x9}, {0x3, 0x4, 0x7, 0xb}, {0x0, 0x1, 0x8, 0x1}, {0x0, 0x3, 0x0, 0x9}, {0x4, 0x2, 0x8, 0x9673ce27ccdd2c5}], 0x10, 0x401}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, <r4=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r6 = dup(r5)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, 0x0, 0x0)
sendto$inet(r6, &(0x7f0000000640)="e3f845b7552ef505f9be204727ea83c69231df8f6661eb7b9655fb12148f0df9610d85f4ced0a169567eef95c2ff405049974737e149433bb52968cc331392a9347602a35fc3bb4443c5de25dd9b87b114726bae9ec6f423c3b8963c24c6dc7a6ca3cb103201dc2ecbc1833ff42fb4d7a92f47b8acf2bd2536765634acbd18eadfb65411cd9a77219920e26cc6f7582c1ea61535772255a73160be8a738e974f483e9345fdb53d29bc97ffa01af6b102bae186f167f72a22ce27ee339b9c427fa8b74e53e2b751c635d6c7", 0xcb, 0x4000080, &(0x7f0000000740)={0x2, 0x4e20, @remote}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000800)={'gre0\x00', <r7=>r3, 0x7800, 0x1, 0x80, 0xffff16a2, {{0x1e, 0x4, 0x2, 0x10, 0x78, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@cipso={0x86, 0x61, 0xffffffffffffffff, [{0x5, 0xa, "6599526270eb6466"}, {0x5, 0xd, "9cf6638a145e75b89f9cfa"}, {0x7, 0xa, "499bb948c5d0e970"}, {0x0, 0x3, 'Z'}, {0x1, 0xf, "07bca712d9020cc65bda761497"}, {0x2, 0xc, "3d4a3fdfb791d7b925ab"}, {0x5, 0xb, "49bed73f8000ff9d12"}, {0x2, 0x5, "eead51"}, {0xe, 0xc, "0d95ad6867ef4d369829"}]}]}}}}})
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000900), 0x480800, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xfffffffd, '\x00', r7, r8, 0x4, 0x3, 0x2}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1, r0}, 0xc)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r9, 0x0)
recvmmsg(r9, &(0x7f0000000700), 0x400023c, 0x300, 0x0)

4.8748ms ago: executing program 0 (id=411):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000000), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
setpriority(0x0, 0x0, 0x2a14b58)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@loopback, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x141, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000fef000/0xf000)=nil, 0xf000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
r2 = getpid()
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000240), 0x400000000000041, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='smaps\x00')
madvise(&(0x7f0000553000/0x2000)=nil, 0x2000, 0x15)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$xdp(0x2c, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, 0x0, &(0x7f00000002c0))
sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200070908007000fedbdf2521090b004e224e27fc", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x400000000000000, 0x0, 0x4000}, 0x20000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000400)={{0x77359400}, {0x77359400}}, 0x0)

372.56µs ago: executing program 9 (id=412):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x4e24, 0x0, 0x4e24, 0xf, 0xa, 0xa0, 0x20, 0x1080d180d8320b35}, {0x7fffffff, 0x800, 0x5, 0x800, 0x8, 0x9, 0x431, 0x8000000000000000}, {0x1, 0x17e, 0xffffffffffffffff, 0x4}, 0x4, 0x6e6bbb, 0x0, 0x0, 0x4, 0x1}, {{@in6=@loopback, 0x4d2, 0x2b}, 0x2, @in6=@mcast1, 0x3506, 0x3, 0x0, 0x9, 0x7fff, 0xd, 0x72}}, 0xe8)
syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
getresuid(&(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000200), &(0x7f0000000240))
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x81000, &(0x7f0000000a40)={[{@commit={'commit', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, r2}}, {@mblk_io_submit}, {@barrier_val}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@noblock_validity}, {@data_err_ignore}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@flag='posixacl'}]}, 0x9b, 0x513, &(0x7f0000000b40)="$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")
write(r1, &(0x7f0000000980)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./cfg\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)

0s ago: executing program 7 (id=413):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000080000000500000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x3e, r4}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r4, &(0x7f0000000380), &(0x7f00000003c0)=""/35}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r5=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20)
sendto$inet6(r3, 0x0, 0x0, 0x24004030, 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000380)={0xffffffffbffffc04, 0x0, 0x2, r8, 0x11})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000800)={0x27800000000, 0x0, 0x1, r8, 0x1})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000840)={0x27800000000, 0x0, 0x8, r8, 0x5})
r9 = eventfd(0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000580)={0x1, r9})
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000005c0)={0x1, r9})
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000290000/0x4000)=nil)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
io_setup(0xeae7, &(0x7f00000002c0)=<r10=>0x0)
io_submit(r10, 0x2, &(0x7f00000007c0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r4, &(0x7f0000000600)="cea1703382f76ead8d8926dd88d53b33c03fea374198a17012cff5996141740b4a53d43c8f2040bf0fb2466380cbebafc3d4e982c1b5834d9031dc1332bc0e723b692d32528f2669a9b9329d63e6a3ab8949f5d0a190c3750038aca129798e9c601d57a7b6c21da4837205c6b2b143d2226b1e138dfaa079bad1d02aa17dcfe0d679d4d4685bc5c5100489d00da074681047298e7b9315a2f175b8c4e023d2ebbad4480291f2c19775059ef1cb0edfbf0eccd7269017b2b617eaa79a82ec00d854298723ed25f63a247009f8411876cef242749c6ccb9fce737f1cf5132801f8bd7126d9", 0xe4, 0x7, 0x0, 0x2, r9}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x6, 0x9, r4, &(0x7f0000000740)="49e54f7cb3365daef6e84d591246acfeaa119049f65e1ab7bc746652", 0x1c, 0x1, 0x0, 0x1, r9}])

kernel console output (not intermixed with test programs):

287]  ? filldir+0x660/0x660
[   46.634841][  T287]  ? debug_smp_processor_id+0x17/0x20
[   46.640412][  T287]  __x64_sys_getdents64+0x7b/0x90
[   46.645707][  T287]  x64_sys_call+0x592/0x9a0
[   46.650380][  T287]  do_syscall_64+0x4c/0xa0
[   46.655996][  T287]  ? clear_bhb_loop+0x50/0xa0
[   46.660674][  T287]  ? clear_bhb_loop+0x50/0xa0
[   46.665662][  T287]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   46.671961][  T287] RIP: 0033:0x7f54981eaef3
[   46.676394][  T287] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   46.696203][  T287] RSP: 002b:00007ffdaa8eede8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   46.705419][  T287] RAX: ffffffffffffffda RBX: 000055556af52910 RCX: 00007f54981eaef3
[   46.713673][  T287] RDX: 0000000000008000 RSI: 000055556af52940 RDI: 0000000000000005
[   46.721751][  T287] RBP: 000055556af52940 R08: 00007f549841ce20 R09: 0000000000000001
[   46.729802][  T287] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556af52914
[   46.737936][  T287] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffdaa8f1090
[   46.745944][  T287]  </TASK>
[   46.755553][   T45] attempt to access beyond end of device
[   46.755553][   T45] loop0: rw=2049, want=45112, limit=40427
[   46.768712][   T30] audit: type=1400 audit(1793594502.276:236): avc:  denied  { getopt } for  pid=618 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   46.808198][  T623] set_capacity_and_notify: 4 callbacks suppressed
[   46.808222][  T623] loop3: detected capacity change from 0 to 256
[   46.827556][  T623] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   46.919442][  T571] usb 2-1: device descriptor read/64, error -71
[   46.926153][   T30] audit: type=1400 audit(1793594502.436:237): avc:  denied  { read } for  pid=630 comm="syz.5.85" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   46.947350][  T632] loop3: detected capacity change from 0 to 512
[   46.957412][  T633] binder: 630:633 ioctl c0306201 200000000880 returned -22
[   46.969230][   T30] audit: type=1400 audit(1793594502.466:238): avc:  denied  { open } for  pid=630 comm="syz.5.85" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   46.997281][  T633] loop5: detected capacity change from 0 to 512
[   47.004207][   T30] audit: type=1400 audit(1793594502.466:239): avc:  denied  { ioctl } for  pid=630 comm="syz.5.85" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   47.033614][   T30] audit: type=1400 audit(1793594502.466:240): avc:  denied  { set_context_mgr } for  pid=630 comm="syz.5.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[   47.055396][   T30] audit: type=1400 audit(1793594502.506:241): avc:  denied  { create } for  pid=630 comm="syz.5.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   47.059568][  T571] usb usb2-port1: attempt power cycle
[   47.105772][  T632] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   47.124782][  T632] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   47.137393][  T632] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.86: corrupted xattr block 33
[   47.149693][   T20] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   47.151796][  T632] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop3 ino=15
[   47.173288][  T635] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.180984][  T635] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.188724][  T635] device bridge_slave_0 entered promiscuous mode
[   47.196434][  T635] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.203943][  T635] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.207274][  T645] loop5: detected capacity change from 0 to 256
[   47.217969][  T646] netlink: 92 bytes leftover after parsing attributes in process `syz.5.90'.
[   47.227531][  T635] device bridge_slave_1 entered promiscuous mode
[   47.236376][  T645] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[   47.284659][  T635] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.292283][  T635] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.299579][  T635] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.306691][  T635] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.328321][  T653] netlink: 12 bytes leftover after parsing attributes in process `syz.5.91'.
[   47.368452][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   47.386442][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.399461][   T20] usb 5-1: Using ep0 maxpacket: 16
[   47.406849][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.444747][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   47.446389][  T658] loop1: detected capacity change from 0 to 256
[   47.459865][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.471803][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.489471][  T571] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[   47.499380][  T658] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   47.508130][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   47.521048][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.528106][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.535761][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.538850][  T653] loop5: detected capacity change from 0 to 40427
[   47.544222][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.558368][  T653] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12
[   47.567899][   T20] usb 5-1: unable to get BOS descriptor or descriptor too short
[   47.577023][  T653] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   47.604176][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.616868][  T660] loop3: detected capacity change from 0 to 512
[   47.637591][  T660] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   47.642110][  T635] device veth0_vlan entered promiscuous mode
[   47.653006][   T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   47.666689][  T664] netlink: 108 bytes leftover after parsing attributes in process `syz.1.96'.
[   47.678413][   T20] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   47.684168][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   47.698231][   T20] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   47.700268][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   47.721713][  T664] netlink: 64 bytes leftover after parsing attributes in process `syz.1.96'.
[   47.730002][   T20] usb 5-1: config 1 interface 1 has no altsetting 0
[   47.738951][  T660] EXT4-fs (loop3): 1 truncate cleaned up
[   47.749851][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   47.761714][  T660] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback.
[   47.786416][  T306] device bridge_slave_1 left promiscuous mode
[   47.796437][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.867029][  T672] loop5: detected capacity change from 0 to 256
[   47.874980][  T306] device bridge_slave_0 left promiscuous mode
[   47.888481][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.897463][  T306] device veth1_macvtap left promiscuous mode
[   47.904595][  T306] device veth0_vlan left promiscuous mode
[   47.999472][  T571] usb 2-1: device not accepting address 5, error -71
[   48.337872][  T678] loop5: detected capacity change from 0 to 1024
[   48.374784][  T678] EXT4-fs (loop5): Invalid log block size: 4294967295
[   48.406182][   T20] usb 5-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[   48.415601][   T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   48.422440][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   48.424694][   T20] usb 5-1: Product: syz
[   48.439233][   T20] usb 5-1: Manufacturer: syz
[   48.445318][   T20] usb 5-1: SerialNumber: syz
[   48.448838][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   48.462073][  T635] device veth1_macvtap entered promiscuous mode
[   48.474955][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   48.504614][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   48.523188][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   48.550379][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   48.560340][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   48.600664][  T680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.101'.
[   48.611749][  T680] netlink: 16 bytes leftover after parsing attributes in process `syz.5.101'.
[   48.665068][  T688] netlink: 'syz.1.102': attribute type 12 has an invalid length.
[   48.696758][  T697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.103'.
[   48.701960][  T699] netlink: 457 bytes leftover after parsing attributes in process `syz.1.104'.
[   48.717059][  T699] xt_l2tp: v2 tid > 0xffff: 134217728
[   48.759535][   T20] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor
[   48.773404][  T703] loop5: detected capacity change from 0 to 256
[   48.778303][   T20] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[   48.786646][   T20] usb 5-1: selecting invalid altsetting 0
[   48.802983][   T20] usb 5-1: USB disconnect, device number 6
[   48.808365][  T703] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   49.030152][  T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   49.129468][  T571] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   49.315866][  T349] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   49.359694][  T571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   49.370793][  T571] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[   49.461463][  T571] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   49.579480][  T349] usb 4-1: Using ep0 maxpacket: 16
[   49.629616][  T571] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   49.639864][  T571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.648218][  T571] usb 2-1: Product: syz
[   49.653612][  T571] usb 2-1: Manufacturer: syz
[   49.663180][  T571] usb 2-1: SerialNumber: syz
[   49.779607][  T349] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 7
[   49.780503][  T736] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   49.792216][  T349] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   49.847894][  T738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.118'.
[   49.910998][  T742] xt_l2tp: v2 tid > 0xffff: 134217728
[   49.912055][  T747] UDC core: couldn't find an available UDC or it's busy: -16
[   49.917566][  T743] netlink: 457 bytes leftover after parsing attributes in process `syz.1.104'.
[   49.926062][  T747] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   49.980105][  T571] usb-storage 2-1:1.0: USB Mass Storage device detected
[   49.989364][  T571] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   50.022620][  T571] usb 2-1: USB disconnect, device number 6
[   50.059573][  T349] usb 4-1: string descriptor 0 read error: -22
[   50.066346][  T349] usb 4-1: New USB device found, idVendor=0499, idProduct=1034, bcdDevice= 0.40
[   50.075620][  T349] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.120067][  T349] snd-usb-audio: probe of 4-1:1.0 failed with error -2
[   50.128215][  T349] snd-usb-audio: probe of 4-1:1.1 failed with error -2
[   50.136596][  T349] snd-usb-audio: probe of 4-1:1.2 failed with error -2
[   50.153329][  T752] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   50.167129][  T752] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   50.178814][  T752] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.119: invalid indirect mapped block 1023410176 (level 0)
[   50.193488][  T752] EXT4-fs (loop4): Remounting filesystem read-only
[   50.200492][  T752] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt.
[   50.215840][  T752] EXT4-fs (loop4): Remounting filesystem read-only
[   50.222775][  T752] EXT4-fs (loop4): 1 truncate cleaned up
[   50.228746][  T752] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000007,jqfmt=vfsold,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none.
[   50.320429][  T571] usb 4-1: USB disconnect, device number 5
[   50.360366][  T758] binder: BC_ACQUIRE_RESULT not supported
[   50.366227][  T758] binder: 757:758 ioctl c0306201 200000000580 returned -22
[   50.427939][  T760] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue. Quota mode: writeback.
[   50.445166][  T760] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   50.543896][  T766] EXT4-fs (loop6): INFO: recovery required on readonly filesystem
[   50.554034][  T766] EXT4-fs (loop6): write access will be enabled during recovery
[   50.559853][   T20] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   50.564278][  T766] JBD2: no valid journal superblock found
[   50.578491][  T766] EXT4-fs (loop6): error loading journal
[   50.615706][  T768] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.028743][  T780] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   51.043110][   T20] usb 5-1: Using ep0 maxpacket: 16
[   51.083071][  T782] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   51.095307][  T782] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.111762][   T30] kauditd_printk_skb: 124 callbacks suppressed
[   51.111777][   T30] audit: type=1400 audit(1793594506.626:366): avc:  denied  { read } for  pid=781 comm="syz.3.129" name="usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   51.146623][   T30] audit: type=1400 audit(1793594506.626:367): avc:  denied  { open } for  pid=781 comm="syz.3.129" path="/dev/usbmon7" dev="devtmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   51.173993][   T30] audit: type=1400 audit(1793594506.626:368): avc:  denied  { ioctl } for  pid=781 comm="syz.3.129" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   51.204466][   T30] audit: type=1400 audit(1793594506.686:369): avc:  denied  { accept } for  pid=781 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   51.209697][   T20] usb 5-1: unable to get BOS descriptor or descriptor too short
[   51.309579][   T20] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 213, changing to 7
[   51.559483][   T20] usb 5-1: string descriptor 0 read error: -22
[   51.567299][   T20] usb 5-1: New USB device found, idVendor=0e41, idProduct=414a, bcdDevice= 0.40
[   51.589479][   T20] usb 5-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[   51.632614][  T811] F2FS-fs (loop1): Invalid segment/section count (24 != 24 * 5)
[   51.642394][   T20] usb 5-1: 1:1 : bogus bTerminalLink 6
[   51.649999][  T811] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   51.670128][  T811] F2FS-fs (loop1): Test dummy encryption mode enabled
[   51.680194][  T811] F2FS-fs (loop1): invalid crc value
[   51.689464][  T811] F2FS-fs (loop1): Found nat_bits in checkpoint
[   51.715546][  T811] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   51.724095][  T811] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   51.739782][  T811] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   51.754055][  T811] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   51.841303][   T30] audit: type=1400 audit(1793594507.356:370): avc:  denied  { map } for  pid=751 comm="syz.4.119" path="socket:[17928]" dev="sockfs" ino=17928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   51.867607][   T30] audit: type=1400 audit(1793594507.356:371): avc:  denied  { read } for  pid=751 comm="syz.4.119" path="socket:[17928]" dev="sockfs" ino=17928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   51.893643][  T825] ip_tables: iptables: counters copy to user failed while replacing table
[   51.939918][   T30] audit: type=1400 audit(1793594507.416:372): avc:  denied  { getopt } for  pid=751 comm="syz.4.119" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   51.945595][  T829] set_capacity_and_notify: 8 callbacks suppressed
[   51.945612][  T829] loop3: detected capacity change from 0 to 128
[   52.065351][  T285] syz-executor (285) used greatest stack depth: 20800 bytes left
[   52.115875][  T837] loop6: detected capacity change from 0 to 128
[   52.138380][  T837] EXT4-fs (loop6): Test dummy encryption mode enabled
[   52.152686][  T837] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none.
[   52.170564][  T837] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   52.215757][  T839] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.224344][  T839] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.240237][  T839] device bridge_slave_0 entered promiscuous mode
[   52.248845][  T839] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.257064][  T839] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.266114][  T839] device bridge_slave_1 entered promiscuous mode
[   52.343889][  T839] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.351564][  T839] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.359567][  T839] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.367417][  T839] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.382851][  T306] device bridge_slave_1 left promiscuous mode
[   52.389834][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.398602][  T306] device bridge_slave_0 left promiscuous mode
[   52.405627][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.417538][  T306] device veth1_macvtap left promiscuous mode
[   52.431716][   T20] usb 5-1: USB disconnect, device number 7
[   52.439493][  T306] device veth0_vlan left promiscuous mode
[   52.455919][   T30] audit: type=1400 audit(1793594507.966:373): avc:  denied  { mounton } for  pid=836 comm="syz.6.139" path="/12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   52.510505][  T845] loop4: detected capacity change from 0 to 256
[   52.526944][  T845] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   52.574197][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   52.587052][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.596068][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.615390][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   52.623894][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.631585][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[   52.640104][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   52.649022][   T10] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.656395][   T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[   52.675954][  T311] udevd[311]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   52.722966][  T850] loop4: detected capacity change from 0 to 512
[   52.731675][   T30] audit: type=1326 audit(1793594508.216:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.4.141" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f150d559 code=0x7ffc0000
[   52.768707][   T30] audit: type=1326 audit(1793594508.216:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=846 comm="syz.4.141" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f150d559 code=0x7ffc0000
[   52.824832][  T850] EXT4-fs (loop4): can't mount with commit=81, fs mounted w/o journal
[   52.922830][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   52.948176][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   52.968872][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   52.985010][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   53.013562][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   53.025073][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   53.042638][  T839] device veth0_vlan entered promiscuous mode
[   53.050294][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   53.051627][  T860] 9pnet: Insufficient options for proto=fd
[   53.059628][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   53.081005][  T861] __nla_validate_parse: 2 callbacks suppressed
[   53.081020][  T861] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.145'.
[   53.083244][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   53.108066][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   53.118733][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   53.127083][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   53.138846][  T839] device veth1_macvtap entered promiscuous mode
[   53.154385][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   53.163874][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   53.174913][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   53.188305][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   53.198843][   T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   53.199501][  T349] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[   53.271367][  T875] loop7: detected capacity change from 0 to 512
[   53.300564][  T875] EXT4-fs (loop7): revision level too high, forcing read-only mode
[   53.308858][  T875] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   53.318573][  T875] System zones: 0-1, 15-15, 18-18, 34-34
[   53.324933][  T875] EXT4-fs (loop7): orphan cleanup on readonly fs
[   53.332750][  T875] EXT4-fs warning (device loop7): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   53.350459][  T875] EXT4-fs (loop7): Cannot turn on quotas: error -117
[   53.357793][  T875] EXT4-fs (loop7): 1 truncate cleaned up
[   53.363953][  T875] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   53.399661][  T293] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   53.559500][   T20] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   53.679620][  T312] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   53.729628][  T349] usb 5-1: config 1 has an invalid descriptor of length 53, skipping remainder of the config
[   53.741673][  T349] usb 5-1: config 1 interface 0 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   53.760843][  T349] usb 5-1: config 1 interface 0 has no altsetting 0
[   53.799535][   T20] usb 7-1: Using ep0 maxpacket: 32
[   53.799699][  T293] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.817548][  T293] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   53.919510][   T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.934121][   T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   53.945990][   T20] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   53.958457][   T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.975094][   T20] usb 7-1: config 0 descriptor??
[   54.021009][   T20] hub 7-1:0.0: USB hub found
[   54.050231][  T293] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   54.050238][  T312] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   54.060364][  T293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.073572][  T312] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   54.084413][  T349] usb 5-1: string descriptor 0 read error: -22
[   54.102600][  T293] usb 4-1: Product: syz
[   54.107149][  T293] usb 4-1: Manufacturer: syz
[   54.113198][  T349] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   54.123367][  T293] usb 4-1: SerialNumber: syz
[   54.129861][  T349] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.184030][  T895] loop5: detected capacity change from 0 to 512
[   54.216230][  T293] usb-storage 4-1:1.0: USB Mass Storage device detected
[   54.239089][  T293] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   54.273267][  T349] usb 5-1: bad CDC descriptors
[   55.025237][  T900] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   55.240241][  T895] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   55.251714][  T895] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.350424][  T312] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   55.360199][  T312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.369102][  T312] usb 8-1: Product: syz
[   55.373556][  T312] usb 8-1: Manufacturer: syz
[   55.378878][  T312] usb 8-1: SerialNumber: syz
[   55.500842][  T906] loop5: detected capacity change from 0 to 512
[   55.550009][  T335] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   55.560435][  T335] FAT-fs (loop5): Filesystem has been set read-only
[   55.567503][  T335] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[   55.640681][  T312] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   55.760419][  T908] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.768607][  T908] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.776458][  T908] device bridge_slave_0 entered promiscuous mode
[   55.785228][  T908] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.792956][  T908] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.801734][  T908] device bridge_slave_1 entered promiscuous mode
[   55.852614][  T908] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.863277][  T908] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.870611][  T908] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.878546][  T908] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.902765][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.911378][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.920098][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.931874][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.941544][  T306] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.948792][  T306] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.958252][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.967088][  T306] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.974394][  T306] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.991167][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.003444][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.019600][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.037779][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.055796][  T312] usb 5-1: USB disconnect, device number 8
[   56.062660][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.072688][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.083220][  T908] device veth0_vlan entered promiscuous mode
[   56.095507][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.105908][   T10] device bridge_slave_1 left promiscuous mode
[   56.114432][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.116173][  T914] loop4: detected capacity change from 0 to 256
[   56.130669][   T10] device bridge_slave_0 left promiscuous mode
[   56.133598][  T914] exfat: Deprecated parameter 'namecase'
[   56.138002][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.150367][  T914] exfat: Deprecated parameter 'namecase'
[   56.158773][   T10] device veth1_macvtap left promiscuous mode
[   56.165570][   T10] device veth0_vlan left promiscuous mode
[   56.182933][  T914] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[   56.226582][  T915] pimreg0: tun_chr_ioctl cmd 2147767511
[   56.234022][  T908] device veth1_macvtap entered promiscuous mode
[   56.245274][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.258499][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.309658][  T918] loop8: detected capacity change from 0 to 1024
[   56.311864][   T39] usb 4-1: USB disconnect, device number 6
[   56.329600][   T20] hub 7-1:0.0: config failed, can't read hub descriptor (err -22)
[   56.344388][   T30] kauditd_printk_skb: 33 callbacks suppressed
[   56.344402][   T30] audit: type=1326 audit(1793594511.856:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=921 comm="syz.6.161" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f199bcdb559 code=0x7ffe0000
[   56.385286][  T918] EXT4-fs (loop8): Ignoring removed bh option
[   56.419004][   T30] audit: type=1400 audit(1793594511.926:409): avc:  denied  { write } for  pid=919 comm="syz.3.160" name="tcp6" dev="proc" ino=4026532497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   56.457124][  T918] EXT4-fs (loop8): mounted filesystem without journal. Opts: nolazytime,nodioread_nolock,noquota,delalloc,auto_da_alloc,bsddf,bh,,errors=continue. Quota mode: none.
[   56.477071][  T918] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   56.509502][   T20] usbhid 7-1:0.0: can't add hid device: -71
[   56.515621][   T20] usbhid: probe of 7-1:0.0 failed with error -71
[   56.550700][  T918] EXT4-fs error (device loop8): ext4_map_blocks:742: inode #15: block 3: comm syz.8.158: lblock 3 mapped to illegal pblock 3 (length 3)
[   56.560130][   T20] usb 7-1: USB disconnect, device number 2
[   56.579447][  T918] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[   56.609934][  T927] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[   56.626559][  T918] EXT4-fs (loop8): This should not happen!! Data will be lost
[   56.626559][  T918] 
[   56.638418][  T935] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.158: lblock 3 mapped to illegal pblock 3 (length 1)
[   56.662003][  T918] EXT4-fs error (device loop8): ext4_map_blocks:632: inode #15: block 3: comm syz.8.158: lblock 3 mapped to illegal pblock 3 (length 1)
[   56.677816][   T30] audit: type=1400 audit(1793594512.186:410): avc:  denied  { append } for  pid=917 comm="syz.8.158" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   56.678656][  T918] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[   56.715257][  T918] EXT4-fs (loop8): This should not happen!! Data will be lost
[   56.715257][  T918] 
[   56.719618][   T30] audit: type=1400 audit(1793594512.186:411): avc:  denied  { map } for  pid=917 comm="syz.8.158" path="/0/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   56.726758][  T918] EXT4-fs (loop8): Total free blocks count 0
[   56.755877][  T918] EXT4-fs (loop8): Free/Dirty block details
[   56.762415][  T918] EXT4-fs (loop8): free_blocks=0
[   56.767526][  T918] EXT4-fs (loop8): dirty_blocks=64
[   56.775245][  T918] EXT4-fs (loop8): Block reservation details
[   56.781531][  T918] EXT4-fs (loop8): i_reserved_data_blocks=4
[   56.865708][   T10] EXT4-fs error (device loop8): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8)
[   56.907257][  T939] loop3: detected capacity change from 0 to 256
[   56.920092][  T939] exfat: Deprecated parameter 'utf8'
[   56.953162][  T939] exfat: Deprecated parameter 'utf8'
[   56.965055][  T939] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   56.980348][  T943] fuse: Unknown parameter 'f'
[   56.980764][   T30] audit: type=1400 audit(1793594512.496:412): avc:  denied  { mounton } for  pid=938 comm="syz.3.166" path="/38/bus/bus" dev="loop3" ino=1048786 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   57.035258][  T939] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4)
[   57.046296][  T941] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   57.057312][  T941] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   57.067746][  T939] exFAT-fs (loop3): Filesystem has been set read-only
[   57.081992][   T30] audit: type=1400 audit(1793594512.596:413): avc:  denied  { create } for  pid=946 comm="syz.6.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[   57.112125][  T952] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4)
[   57.156483][  T286] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4)
[   57.172849][  T949] set_capacity_and_notify: 1 callbacks suppressed
[   57.172867][  T949] loop4: detected capacity change from 0 to 40427
[   57.183722][  T286] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4)
[   57.221158][  T949] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   57.230860][  T949] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   57.243396][  T949] F2FS-fs (loop4): invalid crc value
[   57.266264][  T949] F2FS-fs (loop4): Found nat_bits in checkpoint
[   57.311781][   T30] audit: type=1400 audit(1793594512.826:414): avc:  denied  { read write } for  pid=940 comm="syz.8.165" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   57.347972][  T949] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   57.363239][   T30] audit: type=1400 audit(1793594512.826:415): avc:  denied  { open } for  pid=940 comm="syz.8.165" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   57.369240][  T949] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   57.420704][   T30] audit: type=1400 audit(1793594512.826:416): avc:  denied  { ioctl } for  pid=940 comm="syz.8.165" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   57.449208][  T312] usb 8-1: USB disconnect, device number 2
[   57.463017][  T312] usblp0: removed
[   57.549516][  T950] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[   57.573344][   T45] EXT4-fs error (device loop8): ext4_map_blocks:742: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 6)
[   57.607353][   T45] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[   57.680839][  T966] loop7: detected capacity change from 0 to 512
[   57.703998][   T45] EXT4-fs (loop8): This should not happen!! Data will be lost
[   57.703998][   T45] 
[   57.730057][  T966] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   57.854156][  T947] syz.6.164 (947) used greatest stack depth: 20680 bytes left
[   57.937973][  T966] EXT4-fs (loop7): 1 truncate cleaned up
[   57.943896][  T966] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback.
[   58.552502][   T45] EXT4-fs error (device loop8): ext4_map_blocks:742: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8)
[   58.571094][  T973] loop6: detected capacity change from 0 to 512
[   58.584080][  T964] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.592538][  T964] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.612346][  T964] device bridge_slave_0 entered promiscuous mode
[   58.625883][   T20] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   58.639692][   T45] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[   58.685699][  T973] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00)
[   58.703429][  T973] FAT-fs (loop6): Filesystem has been set read-only
[   58.711991][   T45] EXT4-fs (loop8): This should not happen!! Data will be lost
[   58.711991][   T45] 
[   58.717879][  T964] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.732634][  T973] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00)
[   58.732862][   T30] audit: type=1400 audit(1793594514.246:417): avc:  denied  { bind } for  pid=975 comm="syz.7.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   58.760173][  T994] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00)
[   58.773096][  T964] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.776145][   T45] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 500 with error 28
[   58.791520][  T964] device bridge_slave_1 entered promiscuous mode
[   58.808297][  T994] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fffff00)
[   58.817509][   T45] EXT4-fs (loop8): This should not happen!! Data will be lost
[   58.817509][   T45] 
[   58.836495][   T45] EXT4-fs (loop8): Total free blocks count 0
[   58.848871][   T45] EXT4-fs (loop8): Free/Dirty block details
[   58.865565][   T45] EXT4-fs (loop8): free_blocks=0
[   58.879439][   T45] EXT4-fs (loop8): dirty_blocks=512
[   58.998758][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.031471][   T20] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[   59.059897][   T20] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   59.072444][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.101035][   T20] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   59.112483][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.129750][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.618250][ T1003] loop6: detected capacity change from 0 to 131072
[   59.642891][   T20] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[   59.644893][ T1000] loop7: detected capacity change from 0 to 512
[   59.652349][   T20] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.662287][ T1003] F2FS-fs (loop6): Wrong NAT boundary, start(2560) end(65792) blocks(1024)
[   59.671478][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.677514][ T1003] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   59.686898][  T961] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   59.701596][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.717382][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.724583][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.733174][ T1003] F2FS-fs (loop6): Unrecognized mount option "U" or missing value
[   59.740392][  T961] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   59.748847][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.757543][ T1000] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[   59.760100][   T20] pl2303 9-1:1.0: pl2303 converter detected
[   59.778292][ T1000] EXT4-fs (loop7): 1 truncate cleaned up
[   59.778753][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.784211][ T1000] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback.
[   59.824030][   T20] usb 9-1: pl2303 converter now attached to ttyUSB0
[   59.849633][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.857297][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.930467][   T10] device bridge_slave_1 left promiscuous mode
[   59.943034][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.952770][   T10] device bridge_slave_0 left promiscuous mode
[   59.959222][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.982407][   T10] device veth1_macvtap left promiscuous mode
[   59.985425][  T293] usb 9-1: USB disconnect, device number 2
[   60.006730][   T10] device veth0_vlan left promiscuous mode
[   60.062703][ T1011] loop7: detected capacity change from 0 to 128
[   60.079170][  T293] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[   60.092954][  T293] pl2303 9-1:1.0: device disconnected
[   60.497604][ T1022] loop4: detected capacity change from 0 to 512
[   60.541467][ T1023] loop7: detected capacity change from 0 to 128
[   60.549494][  T293] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[   60.580913][ T1022] FAT-fs (loop4): Unrecognized mount option "tots" or missing value
[   60.602939][ T1023] FAT-fs (loop7): Unrecognized mount option "ÿÿÿÿÿÿÿÿ—Ò¶¾í«0x{Ë?kb=§®‡V£ÈCŸŠF-?v«ÜüôD®äß÷¢Ä”ìcxÑ�œ[ìîÎ@}2M9" or missing value
[   60.665493][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.674881][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.688107][  T964] device veth0_vlan entered promiscuous mode
[   60.755423][ T1018] netlink: 'syz.7.181': attribute type 4 has an invalid length.
[   60.780808][ T1018] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.181'.
[   60.790446][ T1019] netlink: 28 bytes leftover after parsing attributes in process `syz.7.181'.
[   60.879532][  T293] usb 9-1: device descriptor read/64, error -71
[   60.889873][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.900377][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.028065][  T964] device veth1_macvtap entered promiscuous mode
[   61.039683][   T39] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   61.049180][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.057572][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.066796][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.079944][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.099768][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.113122][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.130274][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.149665][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.171735][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.216138][ T1034] loop7: detected capacity change from 0 to 128
[   61.279569][  T293] usb 9-1: device descriptor read/64, error -71
[   61.301632][ T1034] EXT4-fs (loop7): Test dummy encryption mode enabled
[   61.310577][ T1034] EXT4-fs error (device loop7): ext4_fill_super:4863: inode #2: comm syz.7.185: iget: checksum invalid
[   61.381757][ T1047] netlink: 16 bytes leftover after parsing attributes in process `syz.9.187'.
[   61.395410][ T1047] netlink: 4 bytes leftover after parsing attributes in process `syz.9.187'.
[   61.491353][ T1034] EXT4-fs (loop7): get root inode failed
[   61.497389][ T1034] EXT4-fs (loop7): mount failed
[   61.639473][   T39] usb 5-1: unable to get BOS descriptor or descriptor too short
[   61.648070][  T293] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[   61.704187][   T30] kauditd_printk_skb: 42 callbacks suppressed
[   61.704202][   T30] audit: type=1326 audit(1793594517.216:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1048 comm="syz.7.188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   61.740005][   T30] audit: type=1326 audit(1793594517.216:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1048 comm="syz.7.188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   61.765827][   T30] audit: type=1326 audit(1793594517.216:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1048 comm="syz.7.188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   61.769604][   T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.795560][   T30] audit: type=1326 audit(1793594517.306:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1048 comm="syz.7.188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   61.819307][   T39] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   61.826497][   T30] audit: type=1326 audit(1793594517.306:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1048 comm="syz.7.188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   61.849440][   T39] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   61.904280][   T30] audit: type=1326 audit(1793594517.416:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1048 comm="syz.7.188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   61.999491][  T293] usb 9-1: device descriptor read/64, error -71
[   62.006128][   T30] audit: type=1326 audit(1793594517.516:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1048 comm="syz.7.188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   62.032781][   T30] audit: type=1326 audit(1793594517.516:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1048 comm="syz.7.188" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   62.096208][   T39] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40
[   62.132247][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.146714][   T39] usb 5-1: Product: syz
[   62.151245][   T39] usb 5-1: Manufacturer: ܡ짃‱�埩㤈輰Ķ鬶๞袮ᮅп嵺眕쿿꣮뢦摱¾�岂䱧탅⯨燬눈柳夿늗㔜ዓϩ鱬㠺ꂿ橋풖栔․鳖ꡫ⠟�褔��݆���숈庢⑦垂贸☈♔巌⊣쬼
[   62.154256][   T30] audit: type=1400 audit(1793594517.666:468): avc:  denied  { watch } for  pid=1055 comm="syz.9.191" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   62.173058][   T39] usb 5-1: SerialNumber: syz
[   63.092833][ T1057] loop6: detected capacity change from 0 to 512
[   63.213133][ T1057] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[   63.271086][ T1057] EXT4-fs (loop6): 1 truncate cleaned up
[   63.276950][ T1057] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback.
[   63.330106][   T30] audit: type=1400 audit(1793594518.836:469): avc:  denied  { bind } for  pid=1064 comm="syz.7.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   63.390992][ T1076] loop9: detected capacity change from 0 to 4096
[   63.496048][ T1076] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   63.514941][ T1076] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #15: comm syz.9.196: corrupted inode contents
[   63.527885][ T1076] EXT4-fs error (device loop9): ext4_dirty_inode:6118: inode #15: comm syz.9.196: mark_inode_dirty error
[   63.549561][ T1079] loop6: detected capacity change from 0 to 512
[   63.556352][ T1076] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #15: comm syz.9.196: corrupted inode contents
[   63.576791][ T1080] netlink: 604 bytes leftover after parsing attributes in process `syz.9.196'.
[   63.588252][ T1080] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   63.589796][ T1076] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #15: comm syz.9.196: mark_inode_dirty error
[   63.610495][   T39] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor
[   63.618513][   T39] usb 5-1: 1:1 : unsupported format bits 0x2004
[   63.622003][ T1076] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #15: comm syz.9.196: corrupted inode contents
[   63.625240][   T39] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[   63.637615][ T1076] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #15: comm syz.9.196: mark_inode_dirty error
[   63.658131][  T312] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[   63.670119][ T1079] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   63.690283][ T1076] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #15: comm syz.9.196: corrupted inode contents
[   63.704188][ T1076] EXT4-fs error (device loop9): ext4_truncate:4317: inode #15: comm syz.9.196: mark_inode_dirty error
[   63.716028][ T1076] EXT4-fs error (device loop9) in ext4_setattr:5676: Corrupt filesystem
[   63.725388][ T1080] EXT4-fs error (device loop9): ext4_do_update_inode:5260: inode #15: comm syz.9.196: corrupted inode contents
[   63.739516][   T39] usb 5-1: unit 2 not found!
[   63.744249][   T39] usb 5-1: unit 0 not found!
[   63.769715][   T39] snd-usb-audio: probe of 5-1:1.0 failed with error -71
[   63.785263][   T39] usb 5-1: USB disconnect, device number 9
[   63.919554][  T312] usb 8-1: Using ep0 maxpacket: 8
[   64.700451][  T868] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[   64.862382][   T56] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   65.059508][  T868] usb 5-1: config 3 has an invalid interface number: 61 but max is 0
[   65.077944][  T868] usb 5-1: config 3 has no interface number 0
[   65.084835][  T868] usb 5-1: config 3 interface 61 altsetting 143 endpoint 0xB has invalid maxpacket 1024, setting to 64
[   65.099635][  T312] usb 8-1: config 7 has an invalid interface number: 199 but max is 0
[   65.107958][  T312] usb 8-1: config 7 has no interface number 0
[   65.109473][  T868] usb 5-1: config 3 interface 61 altsetting 143 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[   65.130466][  T312] usb 8-1: config 7 interface 199 has no altsetting 0
[   65.139535][   T56] usb 7-1: Using ep0 maxpacket: 8
[   65.149307][  T868] usb 5-1: config 3 interface 61 altsetting 143 has a duplicate endpoint with address 0x3, skipping
[   65.169445][  T868] usb 5-1: config 3 interface 61 has no altsetting 0
[   65.269602][   T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   65.289432][   T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.319572][  T312] usb 8-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=2c.f3
[   65.328653][  T312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.339549][  T868] usb 5-1: New USB device found, idVendor=19d2, idProduct=1156, bcdDevice=d1.62
[   65.359179][  T868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.359441][  T312] usb 8-1: Product: syz
[   65.369294][  T868] usb 5-1: Product: syz
[   65.371706][   T56] usb 7-1: New USB device found, idVendor=046d, idProduct=c14f, bcdDevice=ff.ff
[   65.378140][ T1094] loop9: detected capacity change from 0 to 131072
[   65.389460][  T312] usb 8-1: Manufacturer: syz
[   65.391819][  T868] usb 5-1: Manufacturer: à ‡
[   65.396236][  T312] usb 8-1: SerialNumber: syz
[   65.401143][  T868] usb 5-1: SerialNumber: syz
[   65.419535][   T56] usb 7-1: New USB device strings: Mfr=237, Product=0, SerialNumber=0
[   65.419801][ T1094] F2FS-fs (loop9): Wrong NAT boundary, start(2560) end(5) blocks(1024)
[   65.428207][   T56] usb 7-1: Manufacturer: syz
[   65.442702][   T56] usb 7-1: config 0 descriptor??
[   65.460447][  T868] usb 5-1: rejected 1 configuration due to insufficient available bus power
[   65.479249][  T868] usb 5-1: no configuration chosen from 1 choice
[   65.486772][ T1094] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[   65.504560][ T1094] F2FS-fs (loop9): invalid crc value
[   65.510780][ T1094] F2FS-fs (loop9): invalid crc value
[   65.517045][ T1094] F2FS-fs (loop9): Failed to get valid F2FS checkpoint
[   65.738621][ T1094] device ip6erspan0 entered promiscuous mode
[   65.771842][  T312] usb 8-1: USB disconnect, device number 3
[   65.802669][ T1098] loop9: detected capacity change from 0 to 256
[   65.833190][ T1098] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[   65.938799][   T20] usb 7-1: USB disconnect, device number 3
[   66.519471][  T312] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[   67.079715][  T312] usb 8-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30
[   67.099439][  T312] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   67.119769][  T312] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[   67.122505][ T1138] loop9: detected capacity change from 0 to 131072
[   67.138820][  T312] usb 8-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 130
[   67.152948][  T312] usb 8-1: config 0 interface 0 has no altsetting 0
[   67.159726][  T312] usb 8-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[   67.169182][  T312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.178553][  T312] usb 8-1: config 0 descriptor??
[   67.180341][ T1138] F2FS-fs (loop9): Invalid segment/section count (24 != 24 * 5)
[   67.193166][ T1138] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[   67.202420][ T1138] F2FS-fs (loop9): Test dummy encryption mode enabled
[   67.209780][ T1110] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   67.210267][ T1138] F2FS-fs (loop9): invalid crc value
[   67.240796][ T1138] F2FS-fs (loop9): Found nat_bits in checkpoint
[   67.277559][ T1138] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[   67.284756][ T1138] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   67.317382][  T571] usb 5-1: USB disconnect, device number 10
[   67.334990][ T1151] loop4: detected capacity change from 0 to 512
[   67.347585][ T1151] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.212: Unrecognised inode hash code 255
[   67.359881][ T1151] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.212: Corrupt directory, running e2fsck is recommended
[   67.374404][ T1151] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[   67.383744][ T1151] EXT4-fs error (device loop4): ext4_iget_extra_inode:4604: inode #15: comm syz.4.212: corrupted in-inode xattr
[   67.396293][ T1151] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.212: couldn't read orphan inode 15 (err -117)
[   67.408697][ T1151] EXT4-fs (loop4): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback.
[   67.479565][ T1151] netlink: 104 bytes leftover after parsing attributes in process `syz.4.212'.
[   67.492848][ T1155] loop6: detected capacity change from 0 to 256
[   67.660463][  T312] logitech 0003:046D:C298.0004: unknown main item tag 0x2
[   67.676680][   T30] kauditd_printk_skb: 4 callbacks suppressed
[   67.676694][   T30] audit: type=1400 audit(1793594523.186:474): avc:  denied  { setopt } for  pid=1156 comm="syz.6.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   67.678824][  T312] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[   67.685037][   T30] audit: type=1400 audit(1793594523.196:475): avc:  denied  { bind } for  pid=1156 comm="syz.6.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   67.727100][  T312] logitech 0003:046D:C298.0004: unknown main item tag 0x0
[   67.743718][ T1172] loop9: detected capacity change from 0 to 512
[   67.751883][  T312] input: HID 046d:c298 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:046D:C298.0004/input/input6
[   67.777363][ T1172] EXT4-fs (loop9): orphan cleanup on readonly fs
[   67.784165][ T1172] EXT4-fs warning (device loop9): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   67.799205][ T1172] EXT4-fs (loop9): Cannot turn on quotas: error -22
[   67.806892][ T1172] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.217: bg 0: block 64: padding at end of block bitmap is not set
[   67.821868][ T1172] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6191: Corrupt filesystem
[   67.826322][   T30] audit: type=1400 audit(1793594523.256:476): avc:  denied  { create } for  pid=1171 comm="syz.9.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   67.831009][ T1172] EXT4-fs (loop9): 1 orphan inode deleted
[   67.857057][ T1172] EXT4-fs (loop9): mounted filesystem without journal. Opts: noinit_itable,nolazytime,,errors=continue. Quota mode: writeback.
[   67.875044][   T56] logitech 0003:046D:C298.0004: implement() called with too large value 1 (n: 0)! (kworker/0:2)
[   67.879552][  T868] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   67.898815][   T30] audit: type=1400 audit(1793594523.416:477): avc:  denied  { read } for  pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=806 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   67.898959][  T312] logitech 0003:046D:C298.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 046d:c298] on usb-dummy_hcd.7-1/input0
[   67.939487][   T30] audit: type=1400 audit(1793594523.416:478): avc:  denied  { open } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=806 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   67.963815][  T312] logitech 0003:046D:C298.0004: implement() called with too large value 245 (n: 0)! (kworker/0:3)
[   67.984377][  T312] logitech 0003:046D:C298.0004: implement() called with too large value 248 (n: 0)! (kworker/0:3)
[   67.989831][   T30] audit: type=1400 audit(1793594523.416:479): avc:  denied  { ioctl } for  pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=806 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   67.996012][  T312] logitech 0003:046D:C298.0004: implement() called with too large value 3 (n: 0)! (kworker/0:3)
[   67.996074][  T312] logitech 0003:046D:C298.0004: implement() called with too large value 129 (n: 0)! (kworker/0:3)
[   67.996092][  T312] logitech 0003:046D:C298.0004: implement() called with too large value 11 (n: 0)! (kworker/0:3)
[   68.139442][  T312] logitech 0003:046D:C298.0004: Force feedback support for Logitech Gaming Wheels
[   68.167041][  T312] usb 8-1: USB disconnect, device number 4
[   68.175935][   T30] audit: type=1400 audit(1793594523.686:480): avc:  denied  { setopt } for  pid=1176 comm="syz.9.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   68.197027][  T868] usb 5-1: Using ep0 maxpacket: 32
[   68.319533][  T868] usb 5-1: config 243 has an invalid interface number: 128 but max is 0
[   68.327924][  T868] usb 5-1: config 243 has no interface number 0
[   68.345400][  T868] usb 5-1: config 243 interface 128 has no altsetting 0
[   68.403512][ T1179] loop9: detected capacity change from 0 to 40427
[   68.449808][ T1179] F2FS-fs (loop9): Invalid SB checksum offset: 0
[   68.469240][ T1179] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[   68.489075][ T1179] F2FS-fs (loop9): invalid crc value
[   68.511629][ T1179] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[   68.519504][  T868] usb 5-1: New USB device found, idVendor=04e6, idProduct=0001, bcdDevice= 2.00
[   68.547075][  T868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.565349][  T868] usb 5-1: Product: syz
[   68.574015][ T1194] loop7: detected capacity change from 0 to 4096
[   68.575439][  T868] usb 5-1: Manufacturer: syz
[   68.596605][  T868] usb 5-1: SerialNumber: syz
[   68.605491][ T1179] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0
[   68.614700][ T1194] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[   68.632002][ T1179] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[   68.643675][ T1194] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   68.764857][   T30] audit: type=1400 audit(1793594524.276:481): avc:  denied  { map } for  pid=1193 comm="syz.7.221" path="/16/file0/memory.events.local" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   68.840257][ T1167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.216'.
[   68.939871][  T868] usb-storage 5-1:243.128: USB Mass Storage device detected
[   69.013314][  T868] usb 5-1: USB disconnect, device number 11
[   69.116364][   T30] audit: type=1400 audit(1793594524.626:482): avc:  denied  { write } for  pid=1201 comm="syz.7.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   69.162204][   T30] audit: type=1400 audit(1793594524.676:483): avc:  denied  { lock } for  pid=1206 comm="syz.7.223" path="socket:[19686]" dev="sockfs" ino=19686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[   69.249188][ T1208] loop7: detected capacity change from 0 to 2048
[   69.363409][ T1208] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   70.304663][ T1221] loop9: detected capacity change from 0 to 131072
[   70.323839][ T1221] F2FS-fs (loop9): invalid crc value
[   70.394808][ T1235] ip_tables: iptables: counters copy to user failed while replacing table
[   70.404689][ T1221] F2FS-fs (loop9): Found nat_bits in checkpoint
[   70.438279][ T1221] F2FS-fs (loop9): Cannot turn on quotas: -2 on 2
[   70.610358][ T1240] loop6: detected capacity change from 0 to 512
[   70.670250][ T1244] loop4: detected capacity change from 0 to 256
[   70.700015][ T1244] 9pnet: Insufficient options for proto=fd
[   70.789097][ T1247] loop9: detected capacity change from 0 to 256
[   70.797533][ T1247] exfat: Deprecated parameter 'utf8'
[   70.811710][ T1247] exfat: Deprecated parameter 'utf8'
[   70.818395][ T1247] exfat: Deprecated parameter 'utf8'
[   70.825685][ T1247] exfat: Bad value for 'gid'
[   71.907119][ T1261] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   71.931915][ T1285] x_tables: duplicate underflow at hook 2
[   71.990013][ T1269] loop7: detected capacity change from 0 to 4096
[   71.990013][ T1289] loop9: detected capacity change from 0 to 256
[   72.023613][ T1269] EXT4-fs (loop7): Ignoring removed mblk_io_submit option
[   72.033067][ T1269] EXT4-fs (loop7): Test dummy encryption mode enabled
[   72.065847][ T1269] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[   72.259447][   T20] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   72.709509][   T20] usb 5-1: unable to get BOS descriptor or descriptor too short
[   72.789478][   T20] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   72.805722][   T20] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[   72.806622][ T1301] loop7: detected capacity change from 0 to 256
[   72.839536][   T20] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   72.864309][ T1301] exfat: Bad value for 'uid'
[   72.879493][   T30] kauditd_printk_skb: 11 callbacks suppressed
[   72.879507][   T30] audit: type=1400 audit(1793594528.386:495): avc:  denied  { create } for  pid=1302 comm="syz.6.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1
[   72.906591][   T30] audit: type=1400 audit(1793594528.416:496): avc:  denied  { bind } for  pid=1302 comm="syz.6.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   73.009492][   T20] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[   73.019152][   T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   73.028973][   T20] usb 5-1: Product: syz
[   73.033836][   T20] usb 5-1: Manufacturer: syz
[   73.040994][ T1312] netlink: 124 bytes leftover after parsing attributes in process `syz.7.248'.
[   73.050836][ T1312] netlink: 124 bytes leftover after parsing attributes in process `syz.7.248'.
[   73.060453][ T1312] netlink: 124 bytes leftover after parsing attributes in process `syz.7.248'.
[   73.070167][ T1312] netlink: 124 bytes leftover after parsing attributes in process `syz.7.248'.
[   73.079361][ T1312] netlink: 124 bytes leftover after parsing attributes in process `syz.7.248'.
[   73.088964][ T1312] netlink: 124 bytes leftover after parsing attributes in process `syz.7.248'.
[   73.090088][   T20] usb 5-1: Found UVC 1.00 device syz (8086:0ad2)
[   73.098755][ T1312] netlink: 124 bytes leftover after parsing attributes in process `syz.7.248'.
[   73.113894][ T1312] netlink: 124 bytes leftover after parsing attributes in process `syz.7.248'.
[   73.123221][ T1312] netlink: 124 bytes leftover after parsing attributes in process `syz.7.248'.
[   73.132712][ T1312] netlink: 124 bytes leftover after parsing attributes in process `syz.7.248'.
[   73.199486][  T312] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[   73.309516][   T20] usb 5-1: No streaming interface found for terminal 2.
[   73.579535][   T56] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[   73.587237][  T312] usb 10-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   73.606250][  T312] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   73.629414][  T312] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 65535, setting to 64
[   73.652480][  T312] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   73.769548][  T312] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   73.783594][  T312] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   73.791818][  T312] usb 10-1: SerialNumber: syz
[   73.829611][ T1307] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[   73.989538][   T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   73.999669][   T56] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   74.053004][ T1307] set_capacity_and_notify: 2 callbacks suppressed
[   74.053022][ T1307] loop9: detected capacity change from 0 to 512
[   74.085885][ T1307] EXT4-fs (loop9): orphan cleanup on readonly fs
[   74.094338][ T1307] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13
[   74.103820][ T1307] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   74.118955][ T1307] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.245: attempt to clear invalid blocks 2 len 1
[   74.132649][ T1307] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.245: invalid indirect mapped block 1819239214 (level 0)
[   74.147008][ T1307] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.245: invalid indirect mapped block 1819239214 (level 1)
[   74.161529][ T1307] EXT4-fs (loop9): 1 truncate cleaned up
[   74.167506][ T1307] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback.
[   74.185753][ T1307] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[   74.196375][ T1307] EXT4-fs error (device loop9): ext4_remount:6053: comm syz.9.245: Abort forced by user
[   74.206892][   T56] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[   74.217377][   T56] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.226130][ T1307] EXT4-fs (loop9): Remounting filesystem read-only
[   74.232950][   T56] usb 8-1: Product: syz
[   74.237417][ T1307] EXT4-fs (loop9): re-mounted. Opts: (null). Quota mode: writeback.
[   74.245857][   T56] usb 8-1: Manufacturer: syz
[   74.251575][   T56] usb 8-1: SerialNumber: syz
[   74.320021][  T312] cdc_acm 10-1:1.0: ttyACM0: USB ACM device
[   74.337887][  T312] usb 10-1: USB disconnect, device number 2
[   74.530772][   T56] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[   74.805761][ T1353] tmpfs: Unknown parameter 'huge
'
[   74.959427][  T571] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[   74.982631][  T868] usb 5-1: USB disconnect, device number 12
[   75.047184][   T30] audit: type=1400 audit(1793594530.556:497): avc:  denied  { read } for  pid=1356 comm="syz.4.260" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   75.093004][   T30] audit: type=1400 audit(1793594530.556:498): avc:  denied  { open } for  pid=1356 comm="syz.4.260" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   75.119540][ T1363] pimreg0: tun_chr_ioctl cmd 2147767511
[   75.176287][ T1358] loop4: detected capacity change from 0 to 128
[   75.220650][ T1358] FAT-fs (loop4): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1)
[   75.239476][  T571] usb 7-1: Using ep0 maxpacket: 16
[   75.359537][  T571] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   75.379826][  T571] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   75.549526][  T571] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   75.562127][  T571] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.575903][  T571] usb 7-1: Product: syz
[   75.582480][  T571] usb 7-1: Manufacturer: syz
[   75.587225][  T571] usb 7-1: SerialNumber: syz
[   75.912459][ T1367] loop9: detected capacity change from 0 to 40427
[   76.031056][   T30] audit: type=1400 audit(1793594531.546:499): avc:  denied  { mount } for  pid=1372 comm="syz.4.263" name="/" dev="configfs" ino=13726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   76.099466][   T30] audit: type=1400 audit(1793594531.566:500): avc:  denied  { search } for  pid=1372 comm="syz.4.263" name="/" dev="configfs" ino=13726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   76.132177][   T30] audit: type=1400 audit(1793594531.566:501): avc:  denied  { write } for  pid=1372 comm="syz.4.263" name="/" dev="configfs" ino=13726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   76.154605][   T30] audit: type=1400 audit(1793594531.566:502): avc:  denied  { add_name } for  pid=1372 comm="syz.4.263" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   76.175650][   T30] audit: type=1400 audit(1793594531.566:503): avc:  denied  { create } for  pid=1372 comm="syz.4.263" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1
[   76.342170][  T312] usb 8-1: USB disconnect, device number 5
[   76.350552][  T312] usblp0: removed
[   76.645017][  T868] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[   76.729494][  T571] usb 7-1: 0:2 : does not exist
[   76.734512][  T571] usb 7-1: unit 3 not found!
[   76.753000][  T571] usb 7-1: USB disconnect, device number 4
[   76.885039][ T1395] loop4: detected capacity change from 0 to 16
[   76.919591][  T868] usb 10-1: Using ep0 maxpacket: 32
[   76.931805][ T1395] erofs: (device loop4): mounted with root inode @ nid 36.
[   76.946816][ T1395] tipc: Started in network mode
[   76.951831][ T1395] tipc: Node identity 4, cluster identity 4711
[   76.958435][ T1395] tipc: Node number set to 4
[   76.966832][ T1395] tipc: Enabled bearer <eth:syz_tun>, priority 0
[   77.090058][   T39] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96
[   77.245463][  T868] usb 10-1: unable to get BOS descriptor or descriptor too short
[   77.379734][  T868] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.435475][  T868] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[   77.719587][  T868] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   77.750617][  T868] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.777910][  T868] usb 10-1: Product: syz
[   77.792535][  T868] usb 10-1: Manufacturer: syz
[   77.807464][  T868] usb 10-1: SerialNumber: syz
[   77.815525][ T1400] loop6: detected capacity change from 0 to 40427
[   77.841366][   T30] audit: type=1326 audit(1793594533.356:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1409 comm="syz.7.270" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   77.843566][ T1404] loop4: detected capacity change from 0 to 256
[   77.881564][  T868] usb 10-1: selecting invalid altsetting 1
[   77.887486][ T1400] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[   77.890186][ T1404] FAT-fs (loop4): Unrecognized mount option "g" or missing value
[   77.895400][ T1400] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[   77.923547][ T1400] F2FS-fs (loop6): invalid crc value
[   77.928832][   T30] kauditd_printk_skb: 14 callbacks suppressed
[   77.928850][   T30] audit: type=1326 audit(1793594533.436:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1409 comm="syz.7.270" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   77.968311][ T1415] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[   77.970652][ T1400] F2FS-fs (loop6): Found nat_bits in checkpoint
[   77.998238][ T1404] loop4: detected capacity change from 0 to 256
[   78.004814][   T30] audit: type=1326 audit(1793594533.436:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1409 comm="syz.7.270" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffba8170559 code=0x7ffc0000
[   78.080532][ T1404] FAT-fs (loop4): Unrecognized mount option "g" or missing value
[   78.096808][ T1400] F2FS-fs (loop6): Start checkpoint disabled!
[   78.105403][ T1400] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[   78.112916][ T1400] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[   78.119857][  T868] snd-usb-audio: probe of 10-1:1.0 failed with error -22
[   78.130329][ T1401] overlayfs: failed to resolve './bus': -2
[   78.137490][ T1404] loop4: detected capacity change from 0 to 256
[   78.145779][  T868] usb 10-1: USB disconnect, device number 3
[   78.158619][ T1404] FAT-fs (loop4): Unrecognized mount option "g" or missing value
[   78.191590][   T45] attempt to access beyond end of device
[   78.191590][   T45] loop6: rw=2049, want=41008, limit=40427
[   78.244261][ T1404] loop4: detected capacity change from 0 to 256
[   78.273508][ T1404] FAT-fs (loop4): Unrecognized mount option "g" or missing value
[   78.341096][ T1404] loop4: detected capacity change from 0 to 256
[   78.367193][ T1404] FAT-fs (loop4): Unrecognized mount option "g" or missing value
[   78.394050][ T1444] Quota error (device loop6): find_tree_dqentry: Getting block too big (64 >= 6)
[   78.403576][ T1444] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[   78.415997][ T1444] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.277: Failed to acquire dquot type 0
[   78.427834][ T1444] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[   78.443330][ T1444] EXT4-fs (loop6): 1 truncate cleaned up
[   78.450219][ T1444] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.470182][ T1404] FAT-fs (loop4): Unrecognized mount option "g" or missing value
[   78.543733][ T1404] FAT-fs (loop4): Unrecognized mount option "g" or missing value
[   78.580042][   T30] audit: type=1400 audit(1793594534.096:521): avc:  denied  { write } for  pid=1461 comm="syz.6.282" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[   78.602327][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.612625][ T1451] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.620887][ T1451] device bridge_slave_0 entered promiscuous mode
[   78.629696][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.637262][ T1451] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.645544][ T1451] device bridge_slave_1 entered promiscuous mode
[   78.685825][ T1451] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.693111][ T1451] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.702283][ T1451] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.710472][ T1451] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.743913][  T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.753238][  T306] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.762097][  T306] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.775662][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.793603][  T974] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.801706][  T974] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.816730][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.826452][  T974] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.833612][  T974] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.846998][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   78.855965][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   78.870020][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   78.882214][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   78.892422][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   78.900681][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   78.911233][ T1451] device veth0_vlan entered promiscuous mode
[   78.923043][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   78.934865][ T1451] device veth1_macvtap entered promiscuous mode
[   78.945190][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   78.957558][  T974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   79.029914][   T45] device bridge_slave_1 left promiscuous mode
[   79.036123][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.043915][   T45] device bridge_slave_0 left promiscuous mode
[   79.050878][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.058884][   T45] device veth1_macvtap left promiscuous mode
[   79.065079][   T45] device veth0_vlan left promiscuous mode
[   79.164711][ T1472] 9pnet: Insufficient options for proto=fd
[   79.190336][ T1472] set_capacity_and_notify: 4 callbacks suppressed
[   79.190360][ T1472] loop2: detected capacity change from 0 to 256
[   79.287740][ T1472] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  134.104567][ T1480] loop9: detected capacity change from 0 to 256
[  134.115407][ T1484] __nla_validate_parse: 91 callbacks suppressed
[  134.115434][ T1484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'.
[  134.140040][ T1484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.287'.
[  134.153783][ T1484] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'.
[  134.482041][ T1484] loop4: detected capacity change from 0 to 512
[  134.497989][ T1480] FAT-fs (loop9): Directory bread(block 64) failed
[  134.522153][ T1490] netlink: 'syz.7.288': attribute type 46 has an invalid length.
[  134.536878][ T1480] FAT-fs (loop9): Directory bread(block 65) failed
[  134.549860][ T1480] FAT-fs (loop9): Directory bread(block 66) failed
[  134.558601][ T1480] FAT-fs (loop9): Directory bread(block 67) failed
[  134.570538][ T1490] netlink: 44 bytes leftover after parsing attributes in process `syz.7.288'.
[  134.598410][ T1480] FAT-fs (loop9): Directory bread(block 68) failed
[  134.606764][ T1484] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  134.625122][ T1480] FAT-fs (loop9): Directory bread(block 69) failed
[  134.626756][ T1484] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  134.645945][ T1484] System zones: 0-1, 15-15, 18-18, 34-34
[  134.652366][ T1484] EXT4-fs (loop4): orphan cleanup on readonly fs
[  134.660097][ T1484] EXT4-fs error (device loop4): ext4_quota_enable:6431: comm syz.4.287: Bad quota inum: 768, type: 0
[  134.662757][ T1493] loop2: detected capacity change from 0 to 512
[  134.671655][ T1480] FAT-fs (loop9): Directory bread(block 70) failed
[  134.679196][ T1491] loop7: detected capacity change from 0 to 512
[  134.684879][ T1484] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix.
[  134.707883][ T1480] FAT-fs (loop9): Directory bread(block 71) failed
[  134.709526][ T1484] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  134.715948][ T1480] FAT-fs (loop9): Directory bread(block 72) failed
[  134.729965][ T1480] FAT-fs (loop9): Directory bread(block 73) failed
[  134.783466][ T1484] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  134.840777][ T1491] EXT4-fs (loop7): Ignoring removed bh option
[  134.848995][ T1493] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  134.869499][ T1491] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  134.907311][ T1493] EXT4-fs (loop2): 1 truncate cleaned up
[  134.920054][ T1493] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback.
[  134.954062][   T30] audit: type=1400 audit(1793594590.466:522): avc:  denied  { read } for  pid=1481 comm="syz.4.287" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[  134.989662][ T1499] fscrypt (loop4, inode 16): Error -61 getting encryption context
[  135.002603][ T1491] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  136.089552][ T1491] Quota error (device loop7): write_blk: dquota write failed
[  136.115794][ T1491] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  136.140077][ T1491] EXT4-fs error (device loop7): ext4_acquire_dquot:6227: comm syz.7.288: Failed to acquire dquot type 0
[  136.170942][ T1491] EXT4-fs (loop7): 1 truncate cleaned up
[  136.181084][ T1491] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000001,bh,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback.
[  136.231186][ T1503] loop9: detected capacity change from 0 to 512
[  136.270798][ T1478] loop6: detected capacity change from 0 to 131072
[  136.361597][ T1478] F2FS-fs (loop6): invalid crc value
[  136.419207][ T1491] Quota error (device loop7): write_blk: dquota write failed
[  136.439123][ T1491] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  136.454381][ T1478] F2FS-fs (loop6): Found nat_bits in checkpoint
[  136.567411][   T30] audit: type=1400 audit(1793594592.066:523): avc:  denied  { remount } for  pid=1504 comm="syz.4.290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  136.922094][ T1478] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  137.093515][ T1491] EXT4-fs error (device loop7): ext4_acquire_dquot:6227: comm syz.7.288: Failed to acquire dquot type 0
[  137.544721][ T1510] Quota error (device loop7): write_blk: dquota write failed
[  137.561319][   T30] audit: type=1400 audit(1793594593.056:524): avc:  denied  { create } for  pid=1489 comm="syz.7.288" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  137.579859][ T1510] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  137.616672][ T1510] EXT4-fs error (device loop7): ext4_acquire_dquot:6227: comm syz.7.288: Failed to acquire dquot type 0
[  137.929458][  T334] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  137.993169][ T1526] loop7: detected capacity change from 0 to 512
[  138.016964][ T1526] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  138.066267][ T1526] EXT4-fs (loop7): 1 truncate cleaned up
[  138.074645][   T30] audit: type=1400 audit(1793594593.586:525): avc:  denied  { shutdown } for  pid=1516 comm="syz.9.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  138.117373][ T1526] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback.
[  138.324475][ T1533] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT
[  138.343002][  T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.359433][  T334] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.388852][  T334] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  138.411920][  T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.424903][ T1533] loop6: detected capacity change from 0 to 256
[  138.466013][  T334] usb 5-1: config 0 descriptor??
[  138.480080][ T1539] loop2: detected capacity change from 0 to 16
[  138.506684][ T1541] fuse: Unknown parameter '184467440737095516150x0000000000000007'
[  138.532786][ T1533] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  138.552030][ T1539] erofs: Unknown parameter './file0'
[  138.752754][ T1553] xt_hashlimit: size too large, truncated to 1048576
[  139.100716][ T1555] loop6: detected capacity change from 0 to 512
[  139.111286][  T334] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  139.143380][  T334] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  139.164521][  T334] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  139.184822][  T334] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  139.197533][ T1555] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  139.208566][ T1555] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002]
[  139.209261][  T334] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  139.217790][ T1555] System zones: 0-1, 15-15, 18-18, 34-34
[  139.233103][  T334] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  139.233221][ T1555] EXT4-fs (loop6): orphan cleanup on readonly fs
[  139.243637][  T334] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0
[  139.252254][ T1555] EXT4-fs warning (device loop6): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  139.252287][ T1555] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  139.279907][ T1555] EXT4-fs error (device loop6): ext4_orphan_get:1436: comm syz.6.300: bad orphan inode 16
[  139.297139][ T1555] ext4_test_bit(bit=15, block=18) = 1
[  139.304133][ T1555] is_bad_inode(inode)=0
[  139.304721][  T334] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  139.309854][ T1555] NEXT_ORPHAN(inode)=0
[  139.334337][ T1520] capability: warning: `syz.4.292' uses 32-bit capabilities (legacy support in use)
[  139.334604][ T1555] max_ino=32
[  139.356038][ T1555] i_nlink=2
[  139.361029][ T1555] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback.
[  139.369780][ T1520] loop4: detected capacity change from 0 to 512
[  139.408386][ T1520] EXT4-fs (loop4): Ignoring removed nobh option
[  139.415373][ T1520] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  139.431837][ T1520] EXT4-fs (loop4): orphan file too big: 8590458880
[  139.441883][ T1520] EXT4-fs (loop4): mount failed
[  139.558067][ T1566] netlink: 'syz.9.302': attribute type 6 has an invalid length.
[  139.579165][ T1566] IPv6: NLM_F_CREATE should be specified when creating new route
[  140.798938][ T1568] loop2: detected capacity change from 0 to 512
[  140.811913][  T334] cp2112 0003:10C4:EA90.0005: error requesting version
[  140.876304][  T334] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71
[  140.889791][ T1568] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  140.960567][ T1568] EXT4-fs (loop2): 1 truncate cleaned up
[  140.967765][ T1568] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: writeback.
[  141.042479][  T600] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  141.052275][  T334] usb 5-1: USB disconnect, device number 13
[  141.072021][ T1578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'.
[  141.088447][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  141.088461][   T30] audit: type=1400 audit(1793594596.596:529): avc:  denied  { create } for  pid=1583 comm="syz.6.309" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  141.125832][ T1584] netlink: 260 bytes leftover after parsing attributes in process `syz.6.309'.
[  141.129819][ T1578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'.
[  141.162915][ T1584] netlink: 104 bytes leftover after parsing attributes in process `syz.6.309'.
[  141.182210][ T1584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.309'.
[  141.223447][ T1591] loop2: detected capacity change from 0 to 512
[  141.231070][   T30] audit: type=1400 audit(1793594596.736:530): avc:  denied  { create } for  pid=1592 comm="syz.4.312" name="midi.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[  141.322963][   T30] audit: type=1400 audit(1793594596.746:531): avc:  denied  { unmount } for  pid=635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  141.352983][ T1606] loop6: detected capacity change from 0 to 256
[  141.367772][   T30] audit: type=1400 audit(1793594596.776:532): avc:  denied  { write } for  pid=1592 comm="syz.4.312" name="UDC" dev="configfs" ino=21903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  141.396005][   T30] audit: type=1400 audit(1793594596.776:533): avc:  denied  { open } for  pid=1592 comm="syz.4.312" path="/46/config/usb_gadget/g1/UDC" dev="configfs" ino=21903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  141.428713][ T1599] mmap: syz.2.314 (1599) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  141.441154][   T30] audit: type=1400 audit(1793594596.796:534): avc:  denied  { ioctl } for  pid=1592 comm="syz.4.312" path="/46/config/usb_gadget/g1/UDC" dev="configfs" ino=21903 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[  141.494658][ T1617] loop4: detected capacity change from 0 to 2048
[  141.499540][  T600] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.501974][   T30] audit: type=1400 audit(1793594596.876:535): avc:  denied  { bind } for  pid=1596 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  141.521486][ T1604] loop6: detected capacity change from 0 to 128
[  141.560512][   T30] audit: type=1400 audit(1793594596.876:536): avc:  denied  { write } for  pid=1596 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  141.565539][  T600] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  141.659500][  T600] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.671377][ T1617] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  141.689545][  T600] usb 10-1: config 0 descriptor??
[  142.256566][ T1619] loop7: detected capacity change from 0 to 32768
[  142.309168][ T1625] 9pnet: Insufficient options for proto=fd
[  142.394287][  T600] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  142.408878][  T600] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  142.426712][  T600] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  142.441549][  T600] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  142.451852][  T600] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0
[  142.498046][  T600] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0
[  142.513302][ T1632] netlink: 'syz.7.321': attribute type 13 has an invalid length.
[  142.545490][ T1631] loop7: detected capacity change from 0 to 512
[  142.599680][ T1573] UDC core: couldn't find an available UDC or it's busy: -16
[  142.608984][ T1573] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  142.619452][  T600] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 9: -32
[  142.630640][ T1573] loop9: detected capacity change from 0 to 256
[  142.637358][  T600] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -32
[  142.650933][ T1631] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  142.659532][  T600] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense
[  142.663455][ T1631] EXT4-fs (loop7): orphan cleanup on readonly fs
[  142.669128][  T600] playstation 0003:054C:0DF2.0006: Failed to create dualsense.
[  142.676486][ T1631] EXT4-fs error (device loop7): ext4_quota_enable:6435: inode #4: comm syz.7.321: unexpected EA_INODE flag
[  142.698742][ T1631] EXT4-fs error (device loop7): ext4_quota_enable:6438: comm syz.7.321: Bad quota inode: 4, type: 1
[  142.718236][ T1573] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  142.720660][  T600] playstation: probe of 0003:054C:0DF2.0006 failed with error -32
[  142.737285][ T1631] EXT4-fs warning (device loop7): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  142.765730][ T1631] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  142.768574][ T1573] UDC core: couldn't find an available UDC or it's busy: -16
[  142.796398][   T30] audit: type=1400 audit(1793594598.306:537): avc:  denied  { read write } for  pid=1654 comm="syz.4.323" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  142.831355][ T1631] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  142.845788][ T1638] raw_sendmsg: syz.6.322 forgot to set AF_INET. Fix it!
[  142.850458][ T1644] UDC core: couldn't find an available UDC or it's busy: -16
[  142.875389][  T600] hid-generic FB04:0D62:0004.0007: item fetching failed at offset 0/163
[  142.888480][ T1656] loop4: detected capacity change from 0 to 512
[  142.898261][   T30] audit: type=1400 audit(1793594598.346:538): avc:  denied  { open } for  pid=1654 comm="syz.4.323" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  142.935591][ T1573] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  142.949563][  T600] hid-generic: probe of FB04:0D62:0004.0007 failed with error -22
[  142.959612][ T1644] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  142.981925][ T1656] EXT4-fs (loop4): Ignoring removed bh option
[  142.988948][ T1656] EXT4-fs (loop4): bad geometry: first data block 1 is beyond end of filesystem (0)
[  143.372640][ T1692] APIC base relocation is unsupported by KVM
[  143.463542][ T1681] F2FS-fs (loop7): invalid crc value
[  143.485469][ T1681] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  143.517432][ T1681] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  143.577318][ T1681] attempt to access beyond end of device
[  143.577318][ T1681] loop7: rw=2049, want=49160, limit=40427
[  143.659101][ T1705] netlink: 72 bytes leftover after parsing attributes in process `syz.7.331'.
[  144.002168][  T868] usb 10-1: USB disconnect, device number 4
[  144.096548][  T839] attempt to access beyond end of device
[  144.096548][  T839] loop7: rw=2049, want=45104, limit=40427
[  144.277126][ T1712] exfat: Unknown parameter 'ÿ'
[  144.319689][ T1708] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  144.339546][ T1708] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  144.359124][ T1708] F2FS-fs (loop9): invalid crc value
[  144.365575][ T1712] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22
[  144.389640][ T1708] F2FS-fs (loop9): Found nat_bits in checkpoint
[  144.409422][  T317] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  144.411271][ T1712] SELinux:  duplicate or incompatible mount options
[  144.430066][ T1723] set_capacity_and_notify: 7 callbacks suppressed
[  144.430084][ T1723] loop6: detected capacity change from 0 to 256
[  144.469843][ T1708] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  144.489706][ T1708] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  144.529877][ T1723] exfat: Deprecated parameter 'utf8'
[  144.539404][ T1723] exfat: Deprecated parameter 'utf8'
[  144.545150][ T1723] exfat: Deprecated parameter 'namecase'
[  144.579783][ T1723] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d)
[  144.615539][ T1712] netlink: 12 bytes leftover after parsing attributes in process `syz.6.339'.
[  144.719434][  T317] usb 3-1: device descriptor read/64, error -71
[  144.729548][  T334] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  144.888669][ T1738] loop9: detected capacity change from 0 to 512
[  144.979461][  T600] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  144.999525][  T334] usb 8-1: Using ep0 maxpacket: 32
[  145.119425][  T317] usb 3-1: device descriptor read/64, error -71
[  145.349498][  T600] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  145.369449][  T600] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  145.389411][  T600] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.399518][  T317] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  145.439486][  T334] usb 8-1: string descriptor 0 read error: -22
[  145.459476][  T334] usb 8-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40
[  145.470028][  T334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.679482][  T317] usb 3-1: device descriptor read/64, error -71
[  145.772429][ T1747] futex_wake_op: syz.9.346 tries to shift op by -1; fix this program
[  145.781386][    T6] usb 8-1: USB disconnect, device number 6
[  145.844491][ T1756] loop9: detected capacity change from 0 to 512
[  145.881131][ T1756] EXT4-fs (loop9): Ignoring removed bh option
[  145.898270][ T1756] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  145.922770][  T600] lg-g15 0003:046D:C222.0008: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.6-1/input0
[  145.945361][ T1756] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier=0x0000000000000081,minixdf,bh,delalloc,dioread_nolock,noquota,,errors=continue. Quota mode: writeback.
[  145.969556][ T1756] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.000943][ T1756] netlink: 'syz.9.347': attribute type 32 has an invalid length.
[  146.019436][ T1756] netlink: 28 bytes leftover after parsing attributes in process `syz.9.347'.
[  146.079529][  T317] usb 3-1: device descriptor read/64, error -71
[  146.199561][  T317] usb usb3-port1: attempt power cycle
[  146.200229][  T600] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:046D:C222.0008/input/input7
[  146.235588][ T1761] loop9: detected capacity change from 0 to 512
[  146.267720][ T1761] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #2: comm syz.9.348: missing EA_INODE flag
[  146.294576][ T1761] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.348: error while reading EA inode 2 err=-117
[  146.320058][ T1761] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: comm syz.9.348: inode #3584: comm syz.9.348: iget: illegal inode #
[  146.359615][ T1761] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.348: error while reading EA inode 3584 err=-117
[  146.388844][ T1766] loop7: detected capacity change from 0 to 4096
[  146.409445][  T600] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71
[  146.418735][ T1761] EXT4-fs (loop9): 1 orphan inode deleted
[  146.439520][  T600] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71
[  146.451982][ T1766] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22
[  146.467781][ T1761] EXT4-fs (loop9): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  146.510010][ T1766] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5
[  146.510010][ T1766] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  146.510010][ T1766] 
[  146.539464][  T600] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71
[  146.567980][ T1766] EXT4-fs (loop7): Ignoring removed orlov option
[  146.577233][ T1766] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5
[  146.577233][ T1766] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  146.577233][ T1766] 
[  146.608706][ T1768] loop9: detected capacity change from 0 to 512
[  146.609535][  T600] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71
[  146.623431][  T317] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  146.650780][ T1766] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,block_validity,init_itable,noauto_da_alloc,orlov,nouser_xattr,,errors=continue. Quota mode: writeback.
[  146.653860][  T600] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71
[  146.674327][ T1766] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev loop7, type ext4) errno=-22
[  146.711345][ T1768] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  146.729734][  T600] lg-g15 0003:046D:C222.0008: Error getting LED brightness: -71
[  146.740714][ T1768] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  146.796267][  T600] usb 7-1: USB disconnect, device number 5
[  146.824753][ T1780] fido_id[1780]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  146.875269][  T317] usb 3-1: device descriptor read/8, error -71
[  146.992722][ T1784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1784 comm=syz.7.350
[  147.149814][  T317] usb 3-1: device descriptor read/8, error -71
[  147.177164][ T1774] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  147.222604][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  147.222619][   T30] audit: type=1400 audit(1793594858.732:549): avc:  denied  { listen } for  pid=1770 comm="syz.4.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  147.240929][ T1774] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  147.285470][ T1795] loop7: detected capacity change from 0 to 512
[  147.289589][   T30] audit: type=1400 audit(1793594858.792:550): avc:  denied  { read write } for  pid=1794 comm="syz.7.355" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  147.349291][   T30] audit: type=1400 audit(1793594858.792:551): avc:  denied  { open } for  pid=1794 comm="syz.7.355" path="/dev/loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  147.383726][   T30] audit: type=1400 audit(1793594858.792:552): avc:  denied  { ioctl } for  pid=1794 comm="syz.7.355" path="/dev/loop7" dev="devtmpfs" ino=123 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  147.410767][   T30] audit: type=1400 audit(1793594858.802:553): avc:  denied  { mounton } for  pid=1794 comm="syz.7.355" path="/49/bus" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  147.444329][   T30] audit: type=1400 audit(1793594858.802:554): avc:  denied  { create } for  pid=1794 comm="syz.7.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  147.477058][   T30] audit: type=1400 audit(1793594858.802:555): avc:  denied  { setopt } for  pid=1794 comm="syz.7.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  147.515572][   T30] audit: type=1400 audit(1793594858.852:556): avc:  denied  { bpf } for  pid=1788 comm="syz.2.353" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  147.559433][   T30] audit: type=1400 audit(1793594858.852:557): avc:  denied  { prog_run } for  pid=1788 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  147.621522][   T30] audit: type=1400 audit(1793594858.922:558): avc:  denied  { create } for  pid=1804 comm="syz.2.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  147.660776][ T1811] loop4: detected capacity change from 0 to 512
[  147.707098][ T1816] loop7: detected capacity change from 0 to 1024
[  147.718059][ T1811] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  147.726627][ T1802] loop6: detected capacity change from 0 to 40427
[  147.738884][ T1811] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  147.823021][ T1802] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  148.003902][ T1802] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  148.045976][ T1811] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  148.062015][ T1816] EXT4-fs (loop7): Unrecognized mount option "pcr=00000000000000000030" or missing value
[  148.197466][ T1802] F2FS-fs (loop6): invalid crc value
[  148.284330][ T1802] F2FS-fs (loop6): Found nat_bits in checkpoint
[  148.390653][   T10] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  148.412683][ T1802] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  148.509777][ T1802] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  148.530535][ T1802] attempt to access beyond end of device
[  148.530535][ T1802] loop6: rw=2049, want=45104, limit=40427
[  148.821017][  T317] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  148.831829][   T39] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  148.844549][ T1811] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  148.874372][ T1811] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.898084][  T317] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  148.957148][  T290] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /52/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0
[  149.890877][  T290] EXT4-fs error (device loop4): ext4_lookup:1864: inode #12: comm syz-executor: deleted inode referenced: 14
[  149.929779][   T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.964856][   T39] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.986920][  T290] EXT4-fs error (device loop4): ext4_lookup:1864: inode #12: comm syz-executor: deleted inode referenced: 14
[  150.021859][ T1854] set_capacity_and_notify: 4 callbacks suppressed
[  150.021886][ T1854] loop6: detected capacity change from 0 to 16
[  150.053212][ T1858] loop7: detected capacity change from 0 to 128
[  150.064797][   T39] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  150.077665][ T1856] fuseblk: Unknown parameter 'gr'
[  150.084616][   T39] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.120296][   T39] usb 10-1: config 0 descriptor??
[  150.154461][ T1854] erofs: (device loop6): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  150.230802][ T1845] tipc: Resetting bearer <eth:syz_tun>
[  150.242079][ T1845] tipc: Disabling bearer <eth:syz_tun>
[  150.280835][  T974] tipc: Left network mode
[  150.306268][ T1871] loop6: detected capacity change from 0 to 512
[  150.318673][ T1873] loop7: detected capacity change from 0 to 512
[  150.425971][ T1873] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal
[  150.652597][ T1878] loop6: detected capacity change from 0 to 16
[  150.671979][   T39] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  150.679872][ T1878] erofs: (device loop6): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16300)
[  150.721647][ T1873] netlink: 180 bytes leftover after parsing attributes in process `syz.7.380'.
[  150.731655][ T1873] netlink: 180 bytes leftover after parsing attributes in process `syz.7.380'.
[  150.749481][   T39] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  150.750440][ T1873] netlink: 180 bytes leftover after parsing attributes in process `syz.7.380'.
[  150.769060][   T39] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  150.777222][   T39] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  150.784879][   T39] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  150.795456][   T39] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  150.810971][   T39] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0
[  150.827734][   T39] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0
[  150.883762][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.891686][ T1888] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.900851][ T1888] device bridge_slave_0 entered promiscuous mode
[  150.903922][ T1892] loop6: detected capacity change from 0 to 1024
[  150.915761][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.922855][ T1888] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.931219][ T1888] device bridge_slave_1 entered promiscuous mode
[  150.952318][ T1892] EXT4-fs error (device loop6): ext4_acquire_dquot:6227: comm syz.6.386: Failed to acquire dquot type 0
[  150.964702][   T39] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00
[  150.973546][ T1892] EXT4-fs error (device loop6): mb_free_blocks:1889: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  150.989456][ T1892] EXT4-fs (loop6): 1 truncate cleaned up
[  150.995388][ T1892] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  151.025823][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.033351][ T1888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.040683][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.048226][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.071769][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  151.079880][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.087436][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.095861][  T974] device bridge_slave_1 left promiscuous mode
[  151.102778][  T974] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.110316][  T974] device bridge_slave_0 left promiscuous mode
[  151.118380][  T974] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.127092][  T974] device veth1_macvtap left promiscuous mode
[  151.133639][  T974] device veth0_vlan left promiscuous mode
[  151.205662][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  151.214971][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.222342][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.232263][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.242603][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.250343][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.258793][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  151.267644][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  151.284037][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  151.292902][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  151.308148][ T1888] device veth0_vlan entered promiscuous mode
[  151.330070][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  151.341073][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.358283][ T1888] device veth1_macvtap entered promiscuous mode
[  151.359406][    T6] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  151.374415][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  151.386130][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  151.395292][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  151.404346][   T39] cp2112 0003:10C4:EA90.000A: error setting SMBus config
[  151.405853][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  151.414017][   T39] cp2112: probe of 0003:10C4:EA90.000A failed with error -71
[  151.423157][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  151.436874][   T39] usb 10-1: USB disconnect, device number 5
[  151.445449][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.470017][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.475560][ T1906] fido_id[1906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  151.482829][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.520757][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.573262][ T1917] loop7: detected capacity change from 0 to 512
[  151.609689][ T1398] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  151.637984][ T1919] loop7: detected capacity change from 0 to 256
[  151.659844][    T6] usb 7-1: Using ep0 maxpacket: 16
[  151.796614][ T1925] loop7: detected capacity change from 0 to 512
[  151.822075][ T1925] EXT4-fs (loop7): Unrecognized mount option "fsname=*]'[" or missing value
[  151.909641][    T6] usb 7-1: string descriptor 0 read error: -22
[  151.918506][    T6] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  151.958671][    T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.971100][ T1932] loop9: detected capacity change from 0 to 2048
[  152.020639][    T6] snd-usb-audio: probe of 7-1:1.0 failed with error -22
[  152.029600][ T1398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.044124][ T1398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.057395][ T1398] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00
[  152.058162][ T1914] F2FS-fs (loop0): invalid crc value
[  152.067875][ T1398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.125104][ T1398] usb 3-1: config 0 descriptor??
[  152.152441][ T1932] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  152.193992][ T1914] F2FS-fs (loop0): Found nat_bits in checkpoint
[  152.315688][ T1894] xt_nat: multiple ranges no longer supported
[  155.844327][   T30] kauditd_printk_skb: 81 callbacks suppressed
[  155.845264][   T30] audit: type=1400 audit(1793594867.332:638): avc:  denied  { create } for  pid=1931 comm="syz.9.396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  155.911172][    T6] usb 7-1: USB disconnect, device number 6
[  156.007160][ T1398] hid (null): report_id 3623049435 is invalid
[  156.015705][ T1398] wacom 0003:056A:0331.000B: report_id 3623049435 is invalid
[  156.025390][ T1398] wacom 0003:056A:0331.000B: item 0 4 1 8 parsing failed
[  156.033646][ T1398] wacom 0003:056A:0331.000B: parse failed
[  156.041991][ T1398] wacom: probe of 0003:056A:0331.000B failed with error -22
[  156.084223][ T1962] netlink: 4 bytes leftover after parsing attributes in process `syz.7.400'.
[  156.155411][ T1397] usb 3-1: USB disconnect, device number 6
[  156.164995][   T30] audit: type=1400 audit(1793594867.682:639): avc:  denied  { setopt } for  pid=1963 comm="syz.6.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  156.241100][ T1961] netlink: 36 bytes leftover after parsing attributes in process `syz.9.399'.
[  156.320962][ T1970] set_capacity_and_notify: 1 callbacks suppressed
[  156.320980][ T1970] loop7: detected capacity change from 0 to 512
[  156.329774][ T1972] x_tables: duplicate entry at hook 4
[  156.330333][   T30] audit: type=1400 audit(1793594867.832:640): avc:  denied  { ioctl } for  pid=1963 comm="syz.6.402" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  156.406859][   T30] audit: type=1326 audit(1793594867.912:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.0.401" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe598c23559 code=0x7ffc0000
[  156.434035][   T30] audit: type=1326 audit(1793594867.912:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.0.401" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe598c23559 code=0x7ffc0000
[  156.466403][   T30] audit: type=1326 audit(1793594867.912:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.0.401" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe598c23559 code=0x7ffc0000
[  156.504926][   T30] audit: type=1326 audit(1793594867.912:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.0.401" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe598c23559 code=0x7ffc0000
[  156.536486][   T30] audit: type=1326 audit(1793594867.912:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.0.401" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe598c23559 code=0x7ffc0000
[  156.557132][ T1986] netlink: 8 bytes leftover after parsing attributes in process `syz.9.409'.
[  156.567429][   T30] audit: type=1326 audit(1793594867.912:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.0.401" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe598c23559 code=0x7ffc0000
[  156.604727][   T30] audit: type=1326 audit(1793594867.912:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1977 comm="syz.0.401" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe598c23559 code=0x7ffc0000
[  156.749467][ T1998] loop9: detected capacity change from 0 to 512
[  156.894061][ T1998] ==================================================================
[  156.907210][ T1998] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760
[  156.916994][ T1998] Read of size 4 at addr ffff88810af18470 by task syz.9.412/1998
[  156.925238][ T1998] 
[  156.927586][ T1998] CPU: 1 PID: 1998 Comm: syz.9.412 Not tainted syzkaller #0
[  156.934955][ T1998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  156.945646][ T1998] Call Trace:
[  156.948939][ T1998]  <TASK>
[  156.952113][ T1998]  __dump_stack+0x21/0x30
[  156.958232][ T1998]  dump_stack_lvl+0x110/0x170
[  156.963978][ T1998]  ? show_regs_print_info+0x20/0x20
[  156.971294][ T1998]  ? load_image+0x3f0/0x3f0
[  156.976796][ T1998]  print_address_description+0x7f/0x2c0
[  156.984080][ T1998]  ? unaccount_page_cache_page+0x6f1/0x760
[  156.990534][ T1998]  kasan_report+0x10f/0x150
[  156.995458][ T1998]  ? unaccount_page_cache_page+0x6f1/0x760
[  157.002716][ T1998]  __asan_report_load4_noabort+0x14/0x20
[  157.010662][ T1998]  unaccount_page_cache_page+0x6f1/0x760
[  157.018461][ T1998]  __delete_from_page_cache+0xbe/0x470
[  157.024787][ T1998]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[  157.033231][ T1998]  ? __kasan_check_write+0x14/0x20
[  157.039952][ T1998]  ? __kasan_check_read+0x11/0x20
[  157.045799][ T1998]  ? workingset_eviction+0x402/0x9f0
[  157.052222][ T1998]  __remove_mapping+0x601/0x990
[  157.057444][ T1998]  ? remove_mapping+0xa0/0xa0
[  157.063884][ T1998]  ? __kasan_check_read+0x11/0x20
[  157.070377][ T1998]  shrink_page_list+0x2a24/0x5800
[  157.078041][ T1998]  ? shrink_page_list+0x8e1/0x5800
[  157.084960][ T1998]  ? reclaim_clean_pages_from_list+0x7e0/0x7e0
[  157.093241][ T1998]  ? __this_cpu_preempt_check+0x13/0x20
[  157.099250][ T1998]  ? __mod_zone_page_state+0x8e/0xd0
[  157.105968][ T1998]  ? isolate_lru_pages+0xff1/0x11f0
[  157.111277][ T1998]  ? should_run_aging+0x410/0x410
[  157.118490][ T1998]  ? cgroup_rstat_updated+0x80/0x360
[  157.127871][ T1998]  ? _raw_spin_lock_irq+0x95/0xf0
[  157.134965][ T1998]  ? __this_cpu_preempt_check+0x13/0x20
[  157.140641][ T1998]  ? __count_memcg_events+0xad/0x120
[  157.146622][ T1998]  shrink_lruvec+0x11eb/0x3b00
[  157.152717][ T1998]  ? down_read_trylock+0x317/0x630
[  157.160570][ T1998]  ? __update_load_avg_cfs_rq+0xb1/0x2e0
[  157.167925][ T1998]  ? mem_cgroup_shrink_node+0x550/0x550
[  157.177100][ T1998]  ? __kasan_check_write+0x14/0x20
[  157.183142][ T1998]  ? _raw_spin_lock+0x94/0xf0
[  157.191226][ T1998]  ? _raw_spin_trylock_bh+0x150/0x150
[  157.200589][ T1998]  ? cgroup_rstat_flush_locked+0xa29/0xa70
[  157.206511][ T1998]  ? inactive_is_low+0x160/0x2f0
[  157.216850][ T1998]  ? css_next_descendant_pre+0x1e1/0x210
[  157.224155][ T1998]  ? mem_cgroup_iter+0x465/0x6c0
[  157.229990][ T1998]  shrink_node+0x11ee/0x2a40
[  157.236855][ T1998]  ? resched_curr+0x17f/0x320
[  157.242079][ T1998]  ? allow_direct_reclaim+0x370/0x370
[  157.250615][ T1998]  ? tracing_stop_tgid_record+0x80/0xb0
[  157.259553][ T1998]  ? ttwu_do_wakeup+0x447/0x470
[  157.264928][ T1998]  do_try_to_free_pages+0x5a7/0x1580
[  157.271765][ T1998]  ? try_to_free_pages+0x1010/0x1010
[  157.278615][ T1998]  ? __queue_work+0x903/0xc60
[  157.284859][ T1998]  try_to_free_mem_cgroup_pages+0x261/0x610
[  157.291390][ T1998]  ? shrink_lruvec+0x3b00/0x3b00
[  157.296532][ T1998]  ? mutex_unlock+0x8f/0x230
[  157.301860][ T1998]  mem_cgroup_force_empty_write+0x130/0x170
[  157.308665][ T1998]  ? memcg_stat_show+0x1360/0x1360
[  157.314654][ T1998]  cgroup_file_write+0x294/0x560
[  157.320887][ T1998]  ? cgroup_seqfile_stop+0xc0/0xc0
[  157.326970][ T1998]  ? mutex_lock+0x9b/0x1c0
[  157.332699][ T1998]  ? wait_for_completion_killable_timeout+0x10/0x10
[  157.340176][ T1998]  ? __kasan_check_write+0x14/0x20
[  157.347019][ T1998]  ? cgroup_seqfile_stop+0xc0/0xc0
[  157.352740][ T1998]  kernfs_fop_write_iter+0x2bd/0x400
[  157.360252][ T1998]  vfs_write+0x831/0xfd0
[  157.366834][ T1998]  ? file_end_write+0x1b0/0x1b0
[  157.374057][ T1998]  ? wait_for_completion_killable_timeout+0x10/0x10
[  157.383186][ T1998]  ? __fget_files+0x2e1/0x340
[  157.389681][ T1998]  ? __fdget_pos+0x2d2/0x380
[  157.395020][ T1998]  ? ksys_write+0x70/0x260
[  157.400314][ T1998]  ksys_write+0x14a/0x260
[  157.405542][ T1998]  ? __ia32_sys_read+0x90/0x90
[  157.410492][ T1998]  ? __kasan_check_write+0x14/0x20
[  157.416327][ T1998]  ? switch_fpu_return+0x15d/0x2c0
[  157.421709][ T1998]  __x64_sys_write+0x7b/0x90
[  157.427123][ T1998]  x64_sys_call+0x8ef/0x9a0
[  157.432730][ T1998]  do_syscall_64+0x4c/0xa0
[  157.437641][ T1998]  ? clear_bhb_loop+0x50/0xa0
[  157.443858][ T1998]  ? clear_bhb_loop+0x50/0xa0
[  157.449533][ T1998]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  157.456393][ T1998] RIP: 0033:0x7fed319e9559
[  157.461563][ T1998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.485096][ T1998] RSP: 002b:00007fed30441028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  157.495250][ T1998] RAX: ffffffffffffffda RBX: 00007fed31c6ffa0 RCX: 00007fed319e9559
[  157.504301][ T1998] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000004
[  157.512538][ T1998] RBP: 00007fed31a80b50 R08: 0000000000000000 R09: 0000000000000000
[  157.521273][ T1998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.530102][ T1998] R13: 00007fed31c70038 R14: 00007fed31c6ffa0 R15: 00007ffff49c0df8
[  157.539927][ T1998]  </TASK>
[  157.542970][ T1998] 
[  157.545306][ T1998] Allocated by task 1501:
[  157.550552][ T1998]  __kasan_kmalloc+0xd4/0x100
[  157.555972][ T1998]  kmem_cache_alloc_trace+0x119/0x270
[  157.561554][ T1998]  copy_verifier_state+0x592/0xce0
[  157.567172][ T1998]  push_stack+0x19b/0x4f0
[  157.571813][ T1998]  do_check+0xc593/0xf120
[  157.576211][ T1998]  do_check_common+0x1020/0x19e0
[  157.581665][ T1998]  bpf_check+0x332f/0xf750
[  157.586455][ T1998]  bpf_prog_load+0x10c5/0x1620
[  157.591748][ T1998]  __sys_bpf+0x51d/0x7d0
[  157.596346][ T1998]  __x64_sys_bpf+0x7c/0x90
[  157.600765][ T1998]  x64_sys_call+0x4b9/0x9a0
[  157.605262][ T1998]  do_syscall_64+0x4c/0xa0
[  157.609770][ T1998]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  157.616338][ T1998] 
[  157.618945][ T1998] Last potentially related work creation:
[  157.625229][ T1998]  kasan_save_stack+0x3a/0x60
[  157.630175][ T1998]  __kasan_record_aux_stack+0xd2/0x100
[  157.635838][ T1998]  kasan_record_aux_stack_noalloc+0xb/0x10
[  157.641905][ T1998]  insert_work+0x51/0x310
[  157.646670][ T1998]  __queue_work+0x8e1/0xc60
[  157.652133][ T1998]  queue_work_on+0xde/0x150
[  157.658172][ T1998]  destroy_super_rcu+0xd1/0xe0
[  157.663901][ T1998]  rcu_do_batch+0x4c1/0xbf0
[  157.670186][ T1998]  rcu_core+0x4a3/0xef0
[  157.674419][ T1998]  rcu_core_si+0x9/0x10
[  157.679278][ T1998]  handle_softirqs+0x250/0x560
[  157.684425][ T1998]  __irq_exit_rcu+0x52/0xf0
[  157.689287][ T1998]  irq_exit_rcu+0x9/0x10
[  157.696040][ T1998]  sysvec_apic_timer_interrupt+0xa9/0xc0
[  157.703193][ T1998]  asm_sysvec_apic_timer_interrupt+0x1b/0x20
[  157.711705][ T1998] 
[  157.714968][ T1998] Second to last potentially related work creation:
[  157.723192][ T1998]  kasan_save_stack+0x3a/0x60
[  157.727895][ T1998]  __kasan_record_aux_stack+0xd2/0x100
[  157.733808][ T1998]  kasan_record_aux_stack_noalloc+0xb/0x10
[  157.739609][ T1998]  call_rcu+0x10b/0xf60
[  157.743763][ T1998]  __put_super+0x26b/0x2d0
[  157.750502][ T1998]  deactivate_locked_super+0xd4/0x100
[  157.756328][ T1998]  mount_bdev+0x2ab/0x3c0
[  157.760997][ T1998]  f2fs_mount+0x34/0x40
[  157.767064][ T1998]  legacy_get_tree+0xed/0x190
[  157.772344][ T1998]  vfs_get_tree+0x89/0x260
[  157.777792][ T1998]  do_new_mount+0x251/0xb40
[  157.782889][ T1998]  path_mount+0x640/0xff0
[  157.787825][ T1998]  __se_sys_mount+0x320/0x390
[  157.793599][ T1998]  __x64_sys_mount+0xbf/0xd0
[  157.798661][ T1998]  x64_sys_call+0x6bf/0x9a0
[  157.803205][ T1998]  do_syscall_64+0x4c/0xa0
[  157.807835][ T1998]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  157.816500][ T1998] 
[  157.819450][ T1998] The buggy address belongs to the object at ffff88810af18000
[  157.819450][ T1998]  which belongs to the cache kmalloc-2k of size 2048
[  157.834089][ T1998] The buggy address is located 1136 bytes inside of
[  157.834089][ T1998]  2048-byte region [ffff88810af18000, ffff88810af18800)
[  157.847998][ T1998] The buggy address belongs to the page:
[  157.854563][ T1998] page:ffffea00042bc600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810af1f000 pfn:0x10af18
[  157.867158][ T1998] head:ffffea00042bc600 order:3 compound_mapcount:0 compound_pincount:0
[  157.876450][ T1998] flags: 0x4000000000010200(slab|head|zone=1)
[  157.883561][ T1998] raw: 4000000000010200 ffffea0004167a08 ffffea00042c6e08 ffff888100043200
[  157.893377][ T1998] raw: ffff88810af1f000 0000000000080002 00000001ffffffff 0000000000000000
[  157.902345][ T1998] page dumped because: kasan: bad access detected
[  157.908856][ T1998] page_owner tracks the page as allocated
[  157.914734][ T1998] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 287, ts 29334780732, free_ts 29332570642
[  157.934000][ T1998]  post_alloc_hook+0x192/0x1b0
[  157.940508][ T1998]  prep_new_page+0x1c/0x110
[  157.946048][ T1998]  get_page_from_freelist+0x2d42/0x2dd0
[  157.952003][ T1998]  __alloc_pages+0x1a2/0x460
[  157.956684][ T1998]  new_slab+0xa0/0x4d0
[  157.960777][ T1998]  ___slab_alloc+0x3ac/0x840
[  157.965481][ T1998]  __slab_alloc+0x49/0x90
[  157.970294][ T1998]  __kmalloc_track_caller+0x169/0x2c0
[  157.977084][ T1998]  pskb_expand_head+0x123/0x1280
[  157.982503][ T1998]  netlink_trim+0x193/0x230
[  157.987198][ T1998]  netlink_broadcast_filtered+0x75/0x1280
[  157.993259][ T1998]  nlmsg_notify+0xe9/0x1a0
[  157.997780][ T1998]  rtmsg_ifinfo+0xea/0x130
[  158.002739][ T1998]  __dev_notify_flags+0xe0/0x5b0
[  158.008129][ T1998]  rtnl_configure_link+0x221/0x340
[  158.013453][ T1998]  veth_newlink+0x798/0xe20
[  158.018289][ T1998] page last free stack trace:
[  158.023078][ T1998]  free_unref_page_prepare+0x5fa/0x600
[  158.029443][ T1998]  free_unref_page+0xae/0x540
[  158.035002][ T1998]  __free_pages+0x6c/0x100
[  158.041168][ T1998]  __free_slab+0xe5/0x1e0
[  158.046271][ T1998]  __unfreeze_partials+0x15a/0x190
[  158.053663][ T1998]  put_cpu_partial+0xc6/0x120
[  158.059149][ T1998]  __slab_free+0x1d4/0x290
[  158.065278][ T1998]  ___cache_free+0x104/0x120
[  158.072474][ T1998]  qlink_free+0x4d/0x90
[  158.076763][ T1998]  qlist_free_all+0x5f/0xb0
[  158.082114][ T1998]  kasan_quarantine_reduce+0x14a/0x170
[  158.088445][ T1998]  __kasan_slab_alloc+0x2f/0xe0
[  158.094139][ T1998]  slab_post_alloc_hook+0x4f/0x2b0
[  158.100742][ T1998]  __kmalloc_track_caller+0x11f/0x2c0
[  158.107357][ T1998]  kvasprintf+0xe3/0x1a0
[  158.111766][ T1998]  kvasprintf_const+0xf2/0x240
[  158.117101][ T1998] 
[  158.119594][ T1998] Memory state around the buggy address:
[  158.125769][ T1998]  ffff88810af18300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.134430][ T1998]  ffff88810af18380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.146420][ T1998] >ffff88810af18400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.156711][ T1998]                                                              ^
[  158.167655][ T1998]  ffff88810af18480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.180274][ T1998]  ffff88810af18500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  158.188998][ T1998] ==================================================================
[  158.198817][ T1998] Disabling lock debugging due to kernel taint
[  158.210794][ T1398] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  158.221003][  T317] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  158.519497][ T1398] usb 7-1: device descriptor read/64, error -71
[  158.709615][  T317] usb 3-1: unable to get BOS descriptor or descriptor too short
[  158.789539][  T317] usb 3-1: config 8 has an invalid interface number: 177 but max is 0
[  158.798488][  T317] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  158.809157][  T317] usb 3-1: config 8 has no interface number 0
[  158.815302][  T317] usb 3-1: config 8 interface 177 has no altsetting 0
[  158.919513][ T1398] usb 7-1: device descriptor read/64, error -71
[  158.979511][  T317] usb 3-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=50.c7
[  158.990286][  T317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.998612][  T317] usb 3-1: Product: syz
[  159.003799][  T317] usb 3-1: Manufacturer: syz
[  159.009475][  T317] usb 3-1: SerialNumber: syz
[  159.189436][ T1398] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  159.469418][ T1398] usb 7-1: device descriptor read/64, error -71
[  160.300929][  T317] usb 3-1: USB disconnect, device number 7