last executing test programs:

3m57.598394454s ago: executing program 4 (id=70):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8b8c6106d15c3db6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004485}, 0x24040800)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
open(0x0, 0x1a1342, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000000000030000000003000000020000000000000000009cfe2c5e96938c21d00f2cb281238e05aac3ddb008f3d0f16b4b8d8e0f4abe6008b11d3a8d70918e71f404d3864f8de6234970a3ae4be8f5a24639c67d5b9100a525d6061961f2090fc8999bb7e632310abe31127492a319621f92cd2e3dfdc3954fa2801359a187b96a3b474d"], 0x0, 0x32}, 0x28)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0))
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e23, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="280000000000000029000000040000002f0100000000000001050000efffff04020000000000000000010000000000002900000037000000621c00000000000004d6873c307b23d5b70c49bdb792bb9b914a398338f23f51328688c56409af18a12095667b7e96bacc0a40df9cc42e61ea91dafc26df28cc9c2d4a6171aeece8304b3e6f5b772077d1b22ecae0aa6b45820c394bad5532007f0a4666f7860b8913d877a95fa8865f25482d2420690dd6a9ddbf637fe5cb7ac99a24d1f9d0685fa938fca60a392e75c78ef26e0c8b714ee245852f0762b30d41189551814914f856ded6f5b6731c58eb1421e153cc5aea3f2a9f7f888fbdcf9b000570b7d9af7d93e6b61098383de6054fdbb796f7d5d2d198d51ceae6b254c6040000000001020000000000000000980000000000000029000000040000"], 0x1c0}, 0x200440c0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r6, 0x12, 0x2, &(0x7f0000000580)=""/217, &(0x7f0000000440)=0xd9)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

3m53.867293833s ago: executing program 4 (id=73):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000480)=ANY=[@ANYBLOB='nonumtail20,iocharset=iso8859-5,shortname=win95,shortname=win95,rodir,utf8=0,shortname=winnt,shortname=win95,check=normal,codepage=866,utf8=1,nonumtail=0,rodir,shortname=lower,utf8=0,rodir,\x00'], 0x1, 0x289, &(0x7f00000001c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0xfffffff5)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff8}, {0x9}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1d, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xfff3}, {0x0, 0xfff7}}}, 0x24}}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
syz_open_dev$usbfs(&(0x7f0000000100), 0xdec, 0x33f503)

3m49.140121442s ago: executing program 4 (id=80):
getrusage(0x0, &(0x7f0000000180)) (fail_nth: 2)

3m48.625724015s ago: executing program 4 (id=83):
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], 0x1, 0x1059a, &(0x7f0000010640)="$eJzs3M1rI2UcB/Bftu6r61pkX/TkgAgNmNC03aIgUnUXXbBL8eXgSdNkGrKbZEqTvrhnPemf4FUQ8ebf4MV/Y/EgeBK8rSiZmcpW96A226zbzwem32eePPPL84RcnkyZAI6t2eTXXypxIc5GxExEnI/I25XyyK0U8WxEPB8RJ+47KmX/nx2nIuJcRFwYFy9qVsqXln+7e++r5268+vk3d6uNn77+cnqrBqbtxYjobxbt3X6RWafIW2V/c6ebZ39pp8zihf7t8jwrcjddzyvsNvfHNfNc7BTjs83t4Tg3es3WODvdjbx/c1C84XCns18nv+BWcys/b6freXaHWZ6dO8W89sq8MxwVddplvU/y8jEa7WfRn+6lxXo2b+fZGozK/qJu1k73xrlTZvl20cp67Xwe6//5Y37kvdMdbO8lO+nWsJsNkqv1xsv1xnKtsZW101G6VGv228tLyVynNx5WG6XN/konyzq9tN7K+tVkrtNq1RqNZO5aut5tDpJGo75Yn69drZatl5K3bn6Q9NrJ3Djf6A62R93eMNnItpLiimqyUF98pZq80EjeW11L1t69fn117f2Prn148/XVG2+Wg/42rWRuYX5hodaYry00qtZ/GJXDXc5x5wsE8K/Z/wPTYP9v/x/2v8d+/bZvHIovEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAsfXjye/ezhuzxfmTZf9TZdczEXElIi5HxKWI+P0BZuLUgZoXI6JSth80/uRf5vB9JfIK42tOl8e5iFgpj3tPP+xPAQAAAB5f3/7w6WcRM+Nm/ue1aU+Io1T+aHNmUvXyn3yemFS1i3mxvQlVu7RfciIuR8TJ2Z8nVO1KRJw4//GEqv0jMwfizH1RKeLEUc4GAAA4Ggd3AhPbvQEAAPDI+WLaE2A68vu15f/il/eCTxdR3hA8e+AMAAAA+B+qTHsCAAAAwEOX7/89/w8AAAAeb8Xz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YuZfcNGI4DsB/oFPoS0UVj6uwqrpkwSF6hC57gPY22XGGSIhzkF2OEEHEjIMyhN2YAZHvkwbbI/jJRmJhmzEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACc00OxnN+t//1vmrPdNZNnNAAAAMApm2I5LyvDqv0l3f+Wbv2IiGlETCJiHBGn5u69+FjLHEVEJ9VPvb846sN9RJmw/0w/XZ8j4le6nr6f+1sAAACA27VezRYRvX21fPl5qPEOpEWbQa68csnnQ660URn2N1Pa+CUyi0lEFMPHTGnTiOh+/Z1arfz+erVi8KroVEW3jV4AAADtqs8Ess3eAAAAuDp/Lt0BLqPcr03/xU97wf2qSBuCn2otAAAA4HodP21/0Gm3HwAAAMAFlPP/N+f/pVUB5/8BAADAbajO/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCcNsVyvl7NFk1ztrtm8owGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntmfdxQIgTAIg73r+06D9z+WNGhqalIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALz53V/+T0yNM8nca2PpeSRZOzW2To29c+PoD+Pr1wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzP3QmEQBCEwb7zP6fF/MOSBo1BhCpY+JhhHhYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GIHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgr7c2+bMBDGcfi1kyhxm4yQ3uJjBhoqBCPwISFZ8gwMwEI0VLQWi8AKIOCgpTMFz9P8fzpdcQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+n09MZHRGSfj8wjH67+DpeDr8jXTTP4vma2Oe7rn1tOtrtRyt8Y/xcRUUTWwm8AANpX3jfFYlnNO2m7aXtp+2nLaV3NXvloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzuzcsWpTURgA4JOkiVYnRyuI4KCLjU2sRsjiUOguCLqFNpZiqpJmaEuXPoHo5Oor2E1fwRcQHLTg4NBBwUUQJclNeoJBUoR7Q/0++O/9c4dzz8kQ+O9/bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWA73wtlBngshzM0c5V3vv+6ujDu/ffZhbhBf7ry5GI/ZHaIYQni43mpeT3Et025ze+dRo9VqtiUSiWSYZP3LBADASVNMolvXfyruL3ev5eoh/Ho1Wv9fifLwl/r/88vzFwbxc+tdJ75XXP8vpLbC6VfubDwtb27vXFvfaKw115qPq9XK4s3FG7dvVcq9ZyVlT0wAAAD4N6Uk4vo/X/+z/38mysOE9f+9pQf343sV1P9jHTX9sp4JAADA/+3cpe/fcmOu50qlsNXodNoL/ePwc6V/zGCqx3Yqibj+L9SznhUAAACQhsO93Ej/fzXKw4T9//nXuwfxmIUQwmzS/59fedJaTW85Uy2N14mzXiMAAADZmk0i7v8Xe/v/88MtD/kQwtXL/Tz5G8CJ6v+PL+6OvLQe7/+vprfEqZSv9b+P3rkWwkwt6xkBAABwkp1OolvsHxT3l9s/ni+V7P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDf7NgxSgNBFAbgzW5WKzFgpVZeQLSzClgIYuMhREHwBCKIBxBbS+9g6R1SK9hYWKbwBvJmd1TSBCx2lXwfTN4jDJmXSZN/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgrun+d1/Fy6jpy/a954+rk6gvMzW8369vxop+0OXQ/9Bgr+8JAAAAWARVzvdFUbzVj4dRy3HK/3XeE5n/YaXpc56fzf25Pt29buT8f328dfl10Kg5Jz707PzidKezb/j3rc7dMUw3n569VOkHKY9u1qZ1us/B7WRysJTa5S6mBQB+YzvXtsn/h6Lu9jkYAAtj2K7iR/6vxv3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCFzwAAAP//OCtiEg==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
socket$pptp(0x18, 0x1, 0x2)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xc, 0xe, &(0x7f0000001e40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

3m47.058833174s ago: executing program 4 (id=87):
syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x200010, &(0x7f0000000140)={[{@noload}]}, 0xea, 0x472, &(0x7f0000000f40)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000300)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000680)=""/133, 0x85}, {&(0x7f0000000280)}, {&(0x7f0000000740)=""/154, 0x9a}, {&(0x7f0000000400)=""/44, 0x2c}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000a00)=""/232, 0xe8}], 0x8, &(0x7f0000000b00)=""/161, 0xa1}, 0x5c}], 0x1, 0x2, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x8)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3m40.743632254s ago: executing program 4 (id=101):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2043}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x150, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8a}]}, 0x150}}, 0x4000840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

3m40.679038091s ago: executing program 32 (id=101):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2043}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x150, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8a}]}, 0x150}}, 0x4000840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

22.320257316s ago: executing program 1 (id=494):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x50)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
userfaultfd(0x1)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x105)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000340)={0xe62, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
ptrace(0x8, r3)
wait4(r3, 0x0, 0x8, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[], 0xf9, 0x295, &(0x7f0000000580)="$eJzs3E9rE10Ux/Hfk7RNm9ImiwdBQTzoRjdDG19BkBbEgFIbURfC1E40ZExKJlYiYrtz29dRXLoT1DfQjTv34qYIgpsuxEgmSZPWSG1pndB8P1Dm9N45uXf+hTMDme27G09KhcApuDXFxk0xaV07UroZtf3XXsbCeEy91nVl8vun87fv3b+RzeXmFszms4tXM2Y2feHdsxevL36oTd55M/02oa30g+1vmc9bZ7bObv9c7Hx6pWauLVUqNXfJ92y5GJQcs1u+5waeFcuBV93TX/ArKyt1c8vLU8mVqhcE5pbrVvLqVqtYrVo395FbLJvjODaV1LCJHzojv7mw4GZPZDKIwkS/xmo168b7dDYS/2ZSAABgsERV/z8uBlYMrHxQ/R/TEer/UUlDWP8fHvX/MGjW/8n29btXfjOSCQEAAAAAAAAAAAAAAAAAAAAAgEPZaTRSjUYj1Vl2/hKSxiV1/o96njgZO92Dy/EfQj0/3BuX/Fer+dV8aykpKWULKsqXp5lR6Ud4PrS14vnrubkZC6X13l9r56+t5uNqnkNhfke6f/5sK9/25o82h++On1FK//fPz/TNH9PlSz35jlL6+FAV+VoOz+tu/stZs2s3c/vyJ8L1AAAAAAA4DRzb9dv9e9jvWOe1Ifv6W43d5wNKHfB8YN/99YjOjUS33QAAAAAADJOg/rzk+r5XDYOE2sFuC0E3GJO6+6d3120MygxPVxCTFNHoXyUNxk441uDL09ZVv9uS+PPKUX8zAQAAADhu3aI/6pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADC8/vblYZ31j/LusZ7h4tFsJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAYfgUAAP//HIEY9w==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)

21.845639904s ago: executing program 1 (id=497):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2043}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x150, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8a}]}, 0x150}}, 0x4000840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

19.167661856s ago: executing program 1 (id=499):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
r1 = gettid()
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r3}, 0x18)
rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8) (fail_nth: 1)
tkill(r1, 0x7)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000480)={@private0}, &(0x7f0000000640)=0x11)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x81, 0x80000100008b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x10)
r6 = syz_io_uring_setup(0x55ba, 0x0, &(0x7f0000000180), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000380), 0x0)
setpriority(0x3, 0x0, 0x8)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x2)
readv(r7, 0x0, 0x0)
ioctl$TIOCVHANGUP(r7, 0x5437, 0x2)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})

15.845260733s ago: executing program 0 (id=508):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="d1"})
mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x140)
r4 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x800, 0x80)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc058671e, &(0x7f00000000c0))

15.092511489s ago: executing program 1 (id=512):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48)
dup(r0)
r1 = syz_usb_connect(0x5, 0x17a, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0xf3, 0x33, 0x94, 0x40, 0x147a, 0xe016, 0xebc2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x168, 0x2, 0x9, 0x2, 0x30, 0xa, [{{0x9, 0x4, 0xd7, 0xf9, 0x1, 0x90, 0x25, 0x4d, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x1ff, 0x7}, [@selector_unit={0x5, 0x24, 0x5, 0x3, 0xb}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x6, 0x2, [0x7, 0x8], 0xa}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x4, 0x1, 0x5, 0x2, 0x9d}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xbff, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x0, 0x5, 0x2, 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x2, 0x8, "11bd0bf13f"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0x3, 0x3, [@generic={0xd5, 0x7, "26d96dafaff8b519dc9b3b11251d56bf2d5b46671fea5152de1d7cd079aab206ec2098130f121fcc02b1b0755c596ff469d72cc0f78e0ca3189634c656d5ddabd5a736947a4dcb76b2baf96f02e3d6b28fc79e10103f4a3efe8a015bae7b99387742cd93e722b6086d67a0f6dcc5e837fa2895f6743107aaf486fd73bd53720c8a95ad24a5d24f5ff9abdc32679bdd558d32a7347e118c43239d558a02be921ba4040e568d773b0d0db1f30471d8f7ad235f918736bcb15a99c319c0c9175ac866076a0015be92405fda69c237947d381d5cd3"}]}}]}}, {{0x9, 0x4, 0x43, 0x9f, 0x1, 0x85, 0x60, 0x70, 0x3, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0xe, 0x1001}]}, @uac_control={{0xa, 0x24, 0x1, 0x100, 0x9b}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x1, 0x3, 0x3}]}], [{{0x9, 0x5, 0x4, 0x0, 0x410, 0x6, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x80, 0x2}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xdd, 0x40, 0x2, 0xff, 0x19}, 0x31, &(0x7f0000000280)={0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "ea4a6843769225c1b988bc9a3d0e0dd2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xc, 0x8, 0x8}, @generic={0x4, 0x10, 0x4, "86"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xe, 0xea, 0x1}]}, 0x3, [{0xe0, &(0x7f0000000840)=@string={0xe0, 0x3, "aa7ba4f78fae2d69dce569ddb36a0a1d3a5b04aa98adabe8a141dccaf295139df726ef1588557e9c8badb88caf1be1d223ca2046d0146df52f4d9b66867c28348436e5e4f8c6eb86d2103054da4b2aaf3ab155203c776dc8fae0b2ab32cfbe3c2540ba60f4e5a650a48b37df9cc46dd945764fb3b4a2c969b42b239dc8666df663dac6453136187a12500f94ecfa9562e1709d24fbb6f4f76edd150769f6c08d8ea242f060f148dea983fd190f54fe3b47edadd382636b0b8899f2c133b0203a82cb264f424196de46c7ba4a2f6c686005f27ab329db52df36e090137482"}}, {0xe7, &(0x7f0000000940)=@string={0xe7, 0x3, "a0189de2e12438880d174e7bfe7f325d704f709d5c71e566ee9f459affe3c7ceb6c3a482a65fa8a0669ac41a6097e4e110212fad0a01c1f8d413aa4b74cb8b34a2c6e45c47e0b1a43ee3adde5bdf1f8730709616a254429ae897e2cdc3e736d087338e3dccd78dfe0ed643c8bfcf130c5b80ff6ba4cc1ab488ec8704665fb833df7dea6d56d51a786e4f386fb5271f4889b082aaf471e7c635521a16c99e13b5b9538c01422bf73aa37d285060524603bb65584a5979b3b0117f236023219aacede8367d49b6bfc8bd06a8294b879d3b8f3c771883c3036954bfd6382418318bace6c6bf57"}}, {0xc1, &(0x7f0000000a40)=@string={0xc1, 0x3, "4098f54da42be95187c086bf6ca00f3c012698ded61a533ba1e0823920b5f20b884900b45a560d561b1daef87dfe9b8ff4aee8cb0e671da8d893e62f81339eefab3a82a90cb5a5046dc5d5a4c846a36fd95748edeb76bab65e4167af6b80482933dce476a0ac11b5e0a3fa3e42778ce6ab2f390d4776774aa96d7674d3863085ead3abd5c986a0ada3d283e6577f9683ca5c71eb694ab703ea2e2cd481b183913b579221a0babcdd782a9556f717f64261e54b0cad4e0e5d11060046801f9f"}}]})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0x6}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x5f, 0x2e]}}, 0x0, 0x49}, 0x28)
syz_usb_control_io$printer(r1, &(0x7f0000000c80)={0x14, &(0x7f0000000b40)={0x40, 0x10, 0xbb, {0xbb, 0xa, "cc2a5fa34544977173f0d6676570c7579c83211d68284f3a48f08443126a8e813f608890290bcac3b787a706ebb07ef12e82bed800d1bcb0a329fbbbfac047b8783658d479a7fecbf9757e0a8e43fc98feb60c668da100fbb59e49ad2412fc15f12b3cfff2b71a265f235c5abd2bd8dcf446af5bb4ea8f01ee9e45c0a8f3ddf06ee0399446e54c105b9eb544732cce4d2a53c2851e76cb84a334262eb940a5e6c7ba46c9e8593a75cfca85d28e9c983c64512578e28ef7e531"}}, &(0x7f0000000c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}}, &(0x7f0000001000)={0x34, &(0x7f0000000cc0)=ANY=[@ANYBLOB="2030bf0000005dadd45d83c2d47276079c55daf03f402a2b347e7ff427a954891a083735b232e320bdf06789c735d185708769e4f2b92098f1e4ace61ed010ebe011d18df131adc892b26db697b67960bd05c1ac5f8b8f0ff69284b850071e2e168e4fee848d63074de2251f48d4cb62cabb21456e40e0d8075832b3395687cd1751b382ce2fc6891fdd946c34a0aeb3a28a1200bbd2a29eca912b7f8bd575ce8f29900a54bb8bd76ec6559ea8fbb7eb939e92d1d967f818a9ffe8152964b5cc6fc855f9cc"], &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e40)={0x20, 0x0, 0x9f, {0x9d, "a59e6a9eca3a24684801bb021d125a79521df23d205d4ebf5aa1754a1cf82920094c2edf44419caa2926c940293267be888fd2a87e8b01b91a9a47a4addfa2b97420fd6c0abf8a3d27bc12b4ed9382010a294c88a1a27f28ec6b9c7cdbb9a0f20ae187fb6ac06a93390dad8c501bf352c655de226b50f4cfda13f351c26f714d281f13d168846f2a974cedae9056ff66a6f76b38de9216620e1e7497ad"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0x41}, &(0x7f0000000fc0)={0x20, 0x0, 0x1, 0x3}})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1ba5018088f9e6a969180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008200000b7040000000000008500000033000000850000009e00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsetxattr$trusted_overlay_upper(r2, &(0x7f0000001040), &(0x7f0000001080)={0x0, 0xfb, 0x10e, 0x2, 0x9, "d1cc17b02cad9a6239db75ae8e5c0319", "c300420539364f79fb5a932d6542584c7c640a5ab82136e35a85dbb4cf2a2106044937c5856ff9e2f2afe02cf0be3b406eb8942a3b58e9dd00acdb897f7237b72838e38d2d886a396eb653f6b650886a78dd702493a725bbb9b2ef3c84364c3b36835eae6ec629276713408aca4806add4f47dc0a6c50832ff09c2f44ae630f0a5e722966d5d120b8ab773feb2b626781c2d4211f73bc0a59a7296deacbc1ecb8bf352f6dec50a820b51dc8a23ec6915ad2cc2610f63f2eef6b6cb59a4266b8f0b339a88f3aa8a393d0d2186a6fd59b64d8cb10ef89daba86b4e0336e4d79668391656360db830cb7a3adf81c35335637f1eadc64f121c6e02"}, 0x10e, 0x2)
tkill(0xffffffffffffffff, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x7, {0x7, 0x428676999640ba8c, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f0000000000)="883834804b185cd688d4", &(0x7f00000004c0)=""/248, &(0x7f0000000180)="99d54d5733bda5f2a8248e832a4db9e1fc7afea07e64a3e51546ff2151cfb39fbe36783309b80f225d32cdfaea3631bce9cbf5844b9a35c7369cadd65352c64c0a03fc4dc811bc5a86b4b42405ce80f4e2884a6ea08bd0b637f99f3b603b5b2c698075251f55ac47cc9170990e3b9945fcafc970eb58e3e28e2dca637b6c460fcd7d37f7464b760a72a59e7012ec375837225d6bf78aaa1d185edda6672a4f5962ad1c8c571fc7a7057a6a8c5da3", &(0x7f00000005c0)="f6acd3bad83e9b53dffb44c620776424c108832dc5fb7a3d9c61c76e3319f9d7baf2e362ab8f13aa042112f7cc27c6eb8e72f3fbc71c1d58e3e9e3c8a9ffa13a3927a63e2ef1f73f05bbd102789c407510c19118e0b94c590acc14bbcfd7224f56a98efe0b14b37ed1025e6adbcc88af01d558f39d1bfd739a55a0e9ee43698a5554a5458099beb625c9b8d390a74f78665e2fb37ee9f7e09e7a93aee932372c1728cf9d6b4bc14b0c217bb4e433b7535f6a7ed265a4d66c7f5599077bbdc54280218b658e18e1cfbfb8c9b248c1621eebd4d25d5aea7bd91fc7885814551041227d9686cc45217e4b758f4fee7abe9258bde918a760", 0x0, r0, 0x4}, 0x38)

14.759863823s ago: executing program 0 (id=513):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48)
dup(r0)
r1 = syz_usb_connect(0x5, 0x175, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0xf3, 0x33, 0x94, 0x40, 0x147a, 0xe016, 0xebc2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x163, 0x2, 0x9, 0x2, 0x30, 0xa, [{{0x9, 0x4, 0xd7, 0xf9, 0x1, 0x90, 0x25, 0x4d, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x1ff, 0x7}, [@selector_unit={0x5, 0x24, 0x5, 0x3, 0xb}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x6, 0x2, [0x7, 0x8], 0xa}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x4, 0x1, 0x5, 0x2, 0x9d}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0xbff, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x0, 0x5, 0x2, 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x2, 0x8, "11bd0bf13f"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0x3, 0x3, [@generic={0xd5, 0x7, "26d96dafaff8b519dc9b3b11251d56bf2d5b46671fea5152de1d7cd079aab206ec2098130f121fcc02b1b0755c596ff469d72cc0f78e0ca3189634c656d5ddabd5a736947a4dcb76b2baf96f02e3d6b28fc79e10103f4a3efe8a015bae7b99387742cd93e722b6086d67a0f6dcc5e837fa2895f6743107aaf486fd73bd53720c8a95ad24a5d24f5ff9abdc32679bdd558d32a7347e118c43239d558a02be921ba4040e568d773b0d0db1f30471d8f7ad235f918736bcb15a99c319c0c9175ac866076a0015be92405fda69c237947d381d5cd3"}]}}]}}, {{0x9, 0x4, 0x43, 0x9f, 0x1, 0x85, 0x60, 0x70, 0x3, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x5, 0xe, 0x1001}]}, @uac_control={{0xa, 0x24, 0x1, 0x100, 0x9b}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x1, 0x3, 0x3}]}], [{{0x9, 0x5, 0x4, 0x0, 0x410, 0x6, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x80, 0x2}]}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xdd, 0x40, 0x2, 0xff, 0x19}, 0x31, &(0x7f0000000280)={0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "ea4a6843769225c1b988bc9a3d0e0dd2"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xc, 0x8, 0x8}, @generic={0x4, 0x10, 0x4, "86"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xe, 0xea, 0x1}]}, 0x3, [{0xe0, &(0x7f0000000840)=@string={0xe0, 0x3, "aa7ba4f78fae2d69dce569ddb36a0a1d3a5b04aa98adabe8a141dccaf295139df726ef1588557e9c8badb88caf1be1d223ca2046d0146df52f4d9b66867c28348436e5e4f8c6eb86d2103054da4b2aaf3ab155203c776dc8fae0b2ab32cfbe3c2540ba60f4e5a650a48b37df9cc46dd945764fb3b4a2c969b42b239dc8666df663dac6453136187a12500f94ecfa9562e1709d24fbb6f4f76edd150769f6c08d8ea242f060f148dea983fd190f54fe3b47edadd382636b0b8899f2c133b0203a82cb264f424196de46c7ba4a2f6c686005f27ab329db52df36e090137482"}}, {0xe7, &(0x7f0000000940)=@string={0xe7, 0x3, "a0189de2e12438880d174e7bfe7f325d704f709d5c71e566ee9f459affe3c7ceb6c3a482a65fa8a0669ac41a6097e4e110212fad0a01c1f8d413aa4b74cb8b34a2c6e45c47e0b1a43ee3adde5bdf1f8730709616a254429ae897e2cdc3e736d087338e3dccd78dfe0ed643c8bfcf130c5b80ff6ba4cc1ab488ec8704665fb833df7dea6d56d51a786e4f386fb5271f4889b082aaf471e7c635521a16c99e13b5b9538c01422bf73aa37d285060524603bb65584a5979b3b0117f236023219aacede8367d49b6bfc8bd06a8294b879d3b8f3c771883c3036954bfd6382418318bace6c6bf57"}}, {0xc1, &(0x7f0000000a40)=@string={0xc1, 0x3, "4098f54da42be95187c086bf6ca00f3c012698ded61a533ba1e0823920b5f20b884900b45a560d561b1daef87dfe9b8ff4aee8cb0e671da8d893e62f81339eefab3a82a90cb5a5046dc5d5a4c846a36fd95748edeb76bab65e4167af6b80482933dce476a0ac11b5e0a3fa3e42778ce6ab2f390d4776774aa96d7674d3863085ead3abd5c986a0ada3d283e6577f9683ca5c71eb694ab703ea2e2cd481b183913b579221a0babcdd782a9556f717f64261e54b0cad4e0e5d11060046801f9f"}}]})
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0x6}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x5f, 0x2e]}}, 0x0, 0x49}, 0x28)
syz_usb_control_io$printer(r1, &(0x7f0000000c80)={0x14, &(0x7f0000000b40)={0x40, 0x10, 0xbb, {0xbb, 0xa, "cc2a5fa34544977173f0d6676570c7579c83211d68284f3a48f08443126a8e813f608890290bcac3b787a706ebb07ef12e82bed800d1bcb0a329fbbbfac047b8783658d479a7fecbf9757e0a8e43fc98feb60c668da100fbb59e49ad2412fc15f12b3cfff2b71a265f235c5abd2bd8dcf446af5bb4ea8f01ee9e45c0a8f3ddf06ee0399446e54c105b9eb544732cce4d2a53c2851e76cb84a334262eb940a5e6c7ba46c9e8593a75cfca85d28e9c983c64512578e28ef7e531"}}, &(0x7f0000000c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}}, &(0x7f0000001000)={0x34, &(0x7f0000000cc0)=ANY=[@ANYBLOB="2030bf0000005dadd45d83c2d47276079c55daf03f402a2b347e7ff427a954891a083735b232e320bdf06789c735d185708769e4f2b92098f1e4ace61ed010ebe011d18df131adc892b26db697b67960bd05c1ac5f8b8f0ff69284b850071e2e168e4fee848d63074de2251f48d4cb62cabb21456e40e0d8075832b3395687cd1751b382ce2fc6891fdd946c34a0aeb3a28a1200bbd2a29eca912b7f8bd575ce8f29900a54bb8bd76ec6559ea8fbb7eb939e92d1d967f818a9ffe8152964b5cc6fc855f9cc"], &(0x7f0000000dc0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000e00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000e40)={0x20, 0x0, 0x9f, {0x9d, "a59e6a9eca3a24684801bb021d125a79521df23d205d4ebf5aa1754a1cf82920094c2edf44419caa2926c940293267be888fd2a87e8b01b91a9a47a4addfa2b97420fd6c0abf8a3d27bc12b4ed9382010a294c88a1a27f28ec6b9c7cdbb9a0f20ae187fb6ac06a93390dad8c501bf352c655de226b50f4cfda13f351c26f714d281f13d168846f2a974cedae9056ff66a6f76b38de9216620e1e7497ad"}}, &(0x7f0000000f80)={0x20, 0x1, 0x1, 0x41}, &(0x7f0000000fc0)={0x20, 0x0, 0x1, 0x3}})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1ba5018088f9e6a969180000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008200000b7040000000000008500000033000000850000009e00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fsetxattr$trusted_overlay_upper(r2, &(0x7f0000001040), &(0x7f0000001080)={0x0, 0xfb, 0x10e, 0x2, 0x9, "d1cc17b02cad9a6239db75ae8e5c0319", "c300420539364f79fb5a932d6542584c7c640a5ab82136e35a85dbb4cf2a2106044937c5856ff9e2f2afe02cf0be3b406eb8942a3b58e9dd00acdb897f7237b72838e38d2d886a396eb653f6b650886a78dd702493a725bbb9b2ef3c84364c3b36835eae6ec629276713408aca4806add4f47dc0a6c50832ff09c2f44ae630f0a5e722966d5d120b8ab773feb2b626781c2d4211f73bc0a59a7296deacbc1ecb8bf352f6dec50a820b51dc8a23ec6915ad2cc2610f63f2eef6b6cb59a4266b8f0b339a88f3aa8a393d0d2186a6fd59b64d8cb10ef89daba86b4e0336e4d79668391656360db830cb7a3adf81c35335637f1eadc64f121c6e02"}, 0x10e, 0x2)
tkill(0xffffffffffffffff, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x7, {0x7, 0x428676999640ba8c, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f0000000000)="883834804b185cd688d4", &(0x7f00000004c0)=""/248, &(0x7f0000000180)="99d54d5733bda5f2a8248e832a4db9e1fc7afea07e64a3e51546ff2151cfb39fbe36783309b80f225d32cdfaea3631bce9cbf5844b9a35c7369cadd65352c64c0a03fc4dc811bc5a86b4b42405ce80f4e2884a6ea08bd0b637f99f3b603b5b2c698075251f55ac47cc9170990e3b9945fcafc970eb58e3e28e2dca637b6c460fcd7d37f7464b760a72a59e7012ec375837225d6bf78aaa1d185edda6672a4f5962ad1c8c571fc7a7057a6a8c5da3", &(0x7f00000005c0)="f6acd3bad83e9b53dffb44c620776424c108832dc5fb7a3d9c61c76e3319f9d7baf2e362ab8f13aa042112f7cc27c6eb8e72f3fbc71c1d58e3e9e3c8a9ffa13a3927a63e2ef1f73f05bbd102789c407510c19118e0b94c590acc14bbcfd7224f56a98efe0b14b37ed1025e6adbcc88af01d558f39d1bfd739a55a0e9ee43698a5554a5458099beb625c9b8d390a74f78665e2fb37ee9f7e09e7a93aee932372c1728cf9d6b4bc14b0c217bb4e433b7535f6a7ed265a4d66c7f5599077bbdc54280218b658e18e1cfbfb8c9b248c1621eebd4d25d5aea7bd91fc7885814551041227d9686cc45217e4b758f4fee7abe9258bde918a760", 0x0, r0, 0x4}, 0x38)

12.604875892s ago: executing program 1 (id=517):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x12}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x80)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
getpeername(r8, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000000)=0x80)
sendmmsg$unix(r8, &(0x7f0000000500), 0x0, 0x40)
ioctl$sock_FIOGETOWN(r7, 0x8903, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)

10.672214448s ago: executing program 2 (id=520):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
setns(0xffffffffffffffff, 0x24020000)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000200))
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0})

10.671190678s ago: executing program 0 (id=521):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002)
sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
syz_clone(0x10a10000, &(0x7f0000000000)="a3b9cd4cb3908478365c44b32ff86902155b8c13c52ec3c18a41c884fe1877f9089bb15dd8fe137288b7e50a9472e3cfd3654af6f02d0200be21138009f9f593be161decb560ec82f8fcec266966ce7c545e3298f598cb31b16ef97680c3ab19a12a5bad44952a0039897e", 0x6b, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="510e764b4182f94f6055080a59ce6e0cbafb690b51476e07e635e436a3c89bd10820bd5348fb505adc41e114f5211ed3993a6be5c538797950abd2db3f1597b95a41264e5fc86ffd3cb3cccf1152f81f24ffafabc5ac04f2d3337ff2a8e562e0912a55669dec513e7decbc0e84fd9173bb1c7440")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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")

10.632894581s ago: executing program 5 (id=523):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000480)=ANY=[@ANYBLOB='nonumtail20,iocharset=iso8859-5,shortname=win95,shortname=win95,rodir,utf8=0,shortname=winnt,shortname=win95,check=normal,codepage=866,utf8=1,nonumtail=0,rodir,shortname=lower,utf8=0,rodir,\x00'], 0x1, 0x289, &(0x7f00000001c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x3c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0xfff, 0xfffffff5)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff8}, {0x9}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1d, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xfff3}, {0x0, 0xfff7}}}, 0x24}}, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
syz_open_dev$usbfs(&(0x7f0000000100), 0xdec, 0x33f503)

9.509936576s ago: executing program 2 (id=525):
r0 = syz_io_uring_setup(0x10fc, &(0x7f0000000200)={0x0, 0x4, 0x200, 0x3, 0x8000021e}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x20000000})
syz_open_pts(0xffffffffffffffff, 0x2800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095", @ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r8 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004000)=ANY=[@ANYBLOB="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", @ANYBLOB="2485ead4501a8556fbc7603c6e680164907100ee83cec2edb96a5e4bc10828e7e6f0eb8f9b0864b81c72b6dc783e902147a18245ee1e104316ba24eff80beaeee000c502c750651a21f45cb16d266a6c1a69f80d55b1a52e67dff5fc2342119cd438f3ea02a62c6b43a60cd06cf42d0d448d45ddf41c483fec18d27bcd99079914a6556d13bac50e5dbddd74e32a1d69f8b6b3563a1e6ab454ad29be111be66295d484f22563356598b5748fae937a137f2fc298d7934765e03b2093a06df9942a445426583eb162c7cf2dc0d5e4ee83c15664afe87a1c7b65bc647c3700a32990a733dac93901eb6897063cc0", @ANYBLOB="c3be120cb74e06e9de8ed56440", @ANYRES8=r4, @ANYRES8, @ANYRES16=r5, @ANYRESOCT=r1, @ANYBLOB="c6d8e7a560fa42f7f6f9424869b50da28538aa16f07d8bb6055cb39eb13513b8999e5bddf913ed5f694474ca3fdd66f63e3275bee9c6292ef3b447a436412a8470c7265bd66b0c7f766c1228067d5a49e2c11ab53e3ebe699955deab40578da8da0602593addd8e17a5a01ab89c1ea69626537785c2b8a972c6d1362cf10425e424840e3b9c4f0dc69e4efa9a3dbee5ec75c2bbaf493cfd5a96f054dc472b31668cfcdcc6c0eb82995b5f3"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='fsi_slave_init\x00', r10, 0x0, 0xffffffffffffffff}, 0x18)
uname(&(0x7f0000000e80)=""/167)
write$binfmt_format(r8, &(0x7f0000000100)='-1\x00', 0x2)
close_range(r8, 0xffffffffffffffff, 0x0)
uname(&(0x7f0000000300)=""/218)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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")
r11 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
ioctl(r11, 0x1, &(0x7f0000000000))

8.951658542s ago: executing program 0 (id=526):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2043}, 0xc, &(0x7f0000000080)={0x0}}, 0x4000840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

8.804961187s ago: executing program 5 (id=527):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8b8c6106d15c3db6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004485}, 0x24040800)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
open(0x0, 0x1a1342, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000000000030000000003000000020000000000000000009cfe2c5e96938c21d00f2cb281238e05aac3ddb008f3d0f16b4b8d8e0f4abe6008b11d3a8d70918e71f404d3864f8de6234970a3ae4be8f5a24639c67d5b9100a525d6061961f2090fc8999bb7e632310abe31127492a319621f92cd2e3dfdc3954fa2801359a187b96a3b474d"], 0x0, 0x32}, 0x28)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000580)=""/217, &(0x7f0000000440)=0xd9)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

8.662665442s ago: executing program 3 (id=528):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8b8c6106d15c3db6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004485}, 0x24040800)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
open(0x0, 0x1a1342, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000000000030000000003000000020000000000000000009cfe2c5e96938c21d00f2cb281238e05aac3ddb008f3d0f16b4b8d8e0f4abe6008b11d3a8d70918e71f404d3864f8de6234970a3ae4be8f5a24639c67d5b9100a525d6061961f2090fc8999bb7e632310abe31127492a319621f92cd2e3dfdc3954fa2801359a187b96a3b474d"], 0x0, 0x32}, 0x28)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000580)=""/217, &(0x7f0000000440)=0xd9)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

6.598094251s ago: executing program 0 (id=529):
r0 = syz_io_uring_setup(0x10fc, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x3, 0x8000021e}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0x20000000})
r4 = syz_open_pts(0xffffffffffffffff, 0x2800)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095", @ANYRESDEC=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
renameat2(0xffffffffffffffff, &(0x7f00000010c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r9 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000004000)=ANY=[@ANYBLOB="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", @ANYBLOB="2485ead4501a8556fbc7603c6e680164907100ee83cec2edb96a5e4bc10828e7e6f0eb8f9b0864b81c72b6dc783e902147a18245ee1e104316ba24eff80beaeee000c502c750651a21f45cb16d266a6c1a69f80d55b1a52e67dff5fc2342119cd438f3ea02a62c6b43a60cd06cf42d0d448d45ddf41c483fec18d27bcd99079914a6556d13bac50e5dbddd74e32a1d69f8b6b3563a1e6ab454ad29be111be66295d484f22563356598b5748fae937a137f2fc298d7934765e03b2093a06df9942a445426583eb162c7cf2dc0d5e4ee83c15664afe87a1c7b65bc647c3700a32990a733dac93901eb6897063cc0", @ANYBLOB="c3be120cb74e06e9de8ed56440", @ANYRES8=r5, @ANYRESDEC=r4, @ANYRES16=r6, @ANYRESOCT=r1, @ANYBLOB="c6d8e7a560fa42f7f6f9424869b50da28538aa16f07d8bb6055cb39eb13513b8999e5bddf913ed5f694474ca3fdd66f63e3275bee9c6292ef3b447a436412a8470c7265bd66b0c7f766c1228067d5a49e2c11ab53e3ebe699955deab40578da8da0602593addd8e17a5a01ab89c1ea69626537785c2b8a972c6d1362cf10425e424840e3b9c4f0dc69e4efa9a3dbee5ec75c2bbaf493cfd5a96f054dc472b31668cfcdcc6c0eb82995b5f3"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10)
close_range(r9, 0xffffffffffffffff, 0x0)
uname(&(0x7f0000000300)=""/218) (fail_nth: 1)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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")
r12 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
ioctl(r12, 0x1, &(0x7f0000000000))

6.597064251s ago: executing program 1 (id=530):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x209, 0x1}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10)
sched_setscheduler(0x0, 0x2, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xf, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r5)
unshare(0x64000680)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.595858571s ago: executing program 3 (id=531):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
timer_settime(0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]})
r6 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r6, &(0x7f0000000200)='./file1\x00', 0x800, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')

6.592197342s ago: executing program 5 (id=532):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
getrandom(&(0x7f0000000240)=""/94, 0x5e, 0x1)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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")
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="d1"})
mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x800, 0x80)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0))

6.429730518s ago: executing program 3 (id=533):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2043}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x150, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TUPLE_ORIG={0x78, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8a}]}, 0x150}}, 0x4000840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

6.247740517s ago: executing program 2 (id=534):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000)
sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x8b8c6106d15c3db6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004485}, 0x24040800)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
open(0x0, 0x1a1342, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000000000030000000003000000020000000000000000009cfe2c5e96938c21d00f2cb281238e05aac3ddb008f3d0f16b4b8d8e0f4abe6008b11d3a8d70918e71f404d3864f8de6234970a3ae4be8f5a24639c67d5b9100a525d6061961f2090fc8999bb7e632310abe31127492a319621f92cd2e3dfdc3954fa2801359a187b96a3b474d"], 0x0, 0x32}, 0x28)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0))
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4e23, 0x80000, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x200440c0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000580)=""/217, &(0x7f0000000440)=0xd9)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e)

4.333855631s ago: executing program 3 (id=535):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0000fe9adeea8cf069af5d7862b0bda993f0285208efc28da35b4c5f5aadd105a73329e2f12c18b855942700000500000000a07b3a1661674ee86b55d04eefd1f962c3d04e0217522232ebda8d5394bba1c93d63ea161461f7ce2b"], 0x50)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
userfaultfd(0x1)
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x105)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000340)={0xe62, 0x7}, &(0x7f0000000380))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[], 0xf9, 0x295, &(0x7f0000000580)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{&(0x7f0000000400)=@ethernet, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000480)=""/58, 0x3a}, 0xfffffffd}, {{&(0x7f00000008c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000000980)=""/26, 0x1a}, {&(0x7f00000009c0)=""/204, 0xcc}, {&(0x7f0000000ac0)=""/6, 0x6}], 0x4, &(0x7f0000001480)=""/233, 0xe9}, 0x80000000}, {{&(0x7f0000000c80)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000d80)}, 0x72}, {{&(0x7f0000000dc0)=@generic, 0x80, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000000f40)=""/165, 0xa5}, {&(0x7f0000001000)=""/212, 0xd4}, {&(0x7f0000001100)=""/242, 0xf2}, {&(0x7f0000001200)=""/207, 0xcf}], 0x5}, 0x5}], 0x4, 0x2, 0x0)

4.333441291s ago: executing program 5 (id=536):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
socket$netlink(0x10, 0x3, 0x10)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x424f, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x13497, 0x2021}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}]}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000000580)=[{r3, 0x24}, {r3, 0x1008}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000700)='./file0\x00', 0xa)

4.197160455s ago: executing program 2 (id=537):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x4000840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
setns(0xffffffffffffffff, 0x24020000)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000200))
keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0})

2.029451054s ago: executing program 5 (id=538):
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000000000016, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000a800088020000080060005000d0000001400040002000400ac1414aa00000000000000003800008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000a000100000008000300020000004c0000800600050005000000200004000a000009000000070000000000000000000000000000000003000004200004000a004e212ceb6c7100000000000000000000000000000001f7ffffff08000100", @ANYRES32=r3, @ANYBLOB="14000200776730000000000000000000000000007387f198e4aaf54aa33660ff32d1bfe9ce00bad69eaf296cf4eb8c0d56935eb867bad7c97a045188dad298b3250c3b8467de0ad8b6340264c91664d072b5afc7e1381f80b7af71cf1d57737f441b9df17d1c0d50faa639b532d8c492f9a24bdbac658b9d16e1811f227494b30254eff1f06d749f1c319f6f8a75c1bea38a02e77607c691bbd396bec091b055b814fcfa3cbb1f9f0875fcf2a8ba702356b9bc5cb8968d1d3722edd467df8b7b3ef696d4f8cde3365628569d31ea0c6909599603344c076f57c0bac83f2a34f98fbdbc"], 0xd8}, 0x1, 0x0, 0x0, 0x4004840}, 0x4010)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x0, 0x8, 0x4, 0xfffb, 0xac, 0x2, &(0x7f0000000040)="d04d880a313302f281c691d5d160c8583aea23adba1f93107e55b3212541a274a5833baa088abd68908260e235dc776d88ab54f63f854c63ed25ebe464357a53ac6ccd0d8a14fb76cfc3769d82b1530ddb365e9c6897f9da4273c83bc891cbc10a98f991fbd60d73e9fcee768a67e61de7dc6f9ccc6ef9b4d9b10c11362a08378c804bbb61eeffaf2ddf5a12b4fd876f9f6016b1f61109a2971e6a5c7fce1fe089487ec19588fcb68869ecf2"})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000003ac0)=""/102392, 0x18ff8)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0xffffffffffffff2b)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r8)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x5423, 0x0)

1.698224558s ago: executing program 3 (id=539):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwritev2(r0, &(0x7f0000000700)=[{&(0x7f0000003600)}], 0x1, 0xe7b, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
timer_settime(r4, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(0x0, 0x324)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0)
r5 = inotify_init1(0x800)
inotify_add_watch(r5, 0x0, 0x61000cc4)

1.28529431s ago: executing program 2 (id=540):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2043}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}}, 0x4000840)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10)
setns(r1, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

1.139038865s ago: executing program 5 (id=541):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000800", @ANYRES64, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48)
r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r1, &(0x7f0000001b00)=[{{&(0x7f00000003c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000001880)="b61cf70061", 0x5}], 0x1}}], 0x1, 0x20040814)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
fdatasync(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c82686668c1f20153b570003947df2500000000", @ANYRES32=0x0, @ANYBLOB="a1000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810)
sendmmsg$inet(r3, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d284789ddd037a638532bf8d3d44db35350898144414ec2a5bf3e47bc2db9e8ef93b64e31", 0x48}, {&(0x7f0000001200)="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", 0x1000}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="1400000000000000000000000100000000020000000000002c000000000000000000000007000000070beaffffffff0a0101004408bae0000000ec94040100c3054eed3d00000000ed9d65d6eecde3ed6472450589ac7ebc1851c5b64acc7fda0a3f501d7749998084b2f06a9eee5530ee8efa426d8600efa5bc0074d6d08233690ff1a5972795ae3e4d0b5c2a4bd8099a209ac7a8372e08f2c0506d02d0564f050febf9c7b1a8114d296e0eb6a4d70b48708f6128a3553e735af0c69446b67f2c0b0a6229d568a4bd2322adc4165591a61843cdf20224f5e42e2575da833d7ea89cd8dd2c68669fa3b4077cea169fd6cae152fa5642a4e8cf2ca3961d90b2ccab0411e5ca4d31043ecdc9954da2de9a3c0b5af5e1e1fa78ee3de5f5619b396d9327689b02c9f4629b7ff094b02eab8686"], 0x48}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190f9eb", 0x28}, {&(0x7f0000000440)="7e0fe15f6ad0dffff993028a8db6d4a408a1cf02c6756ccd243061a5de9be5c5de6378e2cf89b2bab8e42a9c150882612abcb10859875cb5780daf43ac8e76bf11a5d519bcedc0278d564be240b9254cd4780d55dc8034e88543a36b620edf6ed3", 0x61}, {&(0x7f0000000800)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513f0b2a04159", 0xb4}, {&(0x7f0000000600)="cfb358f82399da09ddd44366b6ba0798dc8a3ae7f54232f86a4b0c795ed1333215ec3b084fcd2bcc35a52d99553b3748571d749475285d78115373608bea334be6e6b4fba8488e9941bafce177da39424f7c3862af0b9351870f09e42fc0856817a2093729", 0x65}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x81ff)

4.35971ms ago: executing program 0 (id=542):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x7, 0x0)
mkdir(0x0, 0x108)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.17242ms ago: executing program 2 (id=543):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0x7, 0x0)
mkdir(0x0, 0x108)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x44004)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1)

0s ago: executing program 3 (id=544):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a"], &(0x7f00000000c0)=""/138, 0x4a, 0x8a, 0x1}, 0x28)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
io_getevents(0x0, 0x3, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='9p_client_res\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0)
io_pgetevents(0x0, 0xcd, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={[0x2]}, 0x8})
mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x4e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3004009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000600)={[{@xino_off}, {@uuid_auto}, {@upperdir={'upperdir', 0x3d, './bus'}}], [{@uid_eq}, {@context={'context', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, '-(W\xednE\x94/\xd0U)\xf1O\xe8\xcf\x1b\x8e\xe6\x9d\xbe\xed\xe7\xaa\xafS&PJh\xe7\x124yd\x1b\x95zrHgj\xec\xb2\xfaH1a<K\xce\xb1\x8f\x8aN\x96\x9b9\n|\x8c%\x19'}}, {@context={'context', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, '\xdf\xc8\xb5\x02\xf3\xae\x14\x19\xbc\''}}, {@fowner_eq}, {@obj_type={'obj_type', 0x3d, '\xc9,rA;\xfe\x02\xcd5\x1cM\xa7\xd7\xc3h\xb1\x8b\xce\x0eGj8\xc3-\xcc\xb2|i\xabm\xd6\xadZ6\xddf\x93G\t\x1d\x81\xab\xe2\xa3\x9e\xd4\x98\xf7\xa2Yl\xab\x7f\x85\xf9\xa2\xe1\xa2\x04=\v\'\x00\xa3\xa4\xc5\aW\x0f\x10\x86\x12J\x8d\x15S\xeb\xd5\fR<\xf18\xe2\x15^\xc8Z\xaf\xf3\xc0?\xfdGm\x00\x00\b\x00'/109}}, {@uid_gt}]})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000280)='./file0\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
mprotect(&(0x7f00002ad000/0x4000)=nil, 0x4000, 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)

kernel console output (not intermixed with test programs):

][ T1614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  179.705024][ T1614] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0
[  179.713037][ T1614] R13: 00007fd06809eeb0 R14: 0000000000000000 R15: 0000000000000000
[  179.721049][ T1614]  </TASK>
[  179.735914][ T1419] tipc: Node number set to 2130706433
[  179.783755][  T309] usb 1-1: USB disconnect, device number 8
[  179.824115][ T1619] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  179.863500][  T285] EXT4-fs (loop2): unmounting filesystem.
[  179.870993][ T1631] fuse: Bad value for 'fd'
[  180.195909][ T1637] loop2: detected capacity change from 0 to 1024
[  180.214323][ T1637] EXT4-fs: Ignoring removed i_version option
[  180.222762][ T1637] ext4: Bad value for 'auto_da_alloc'
[  180.457581][  T286] EXT4-fs (loop1): unmounting filesystem.
[  180.741916][ T1419] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  180.792628][ T1644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.305'.
[  180.805443][ T1644] FAULT_INJECTION: forcing a failure.
[  180.805443][ T1644] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  180.819020][ T1644] CPU: 0 PID: 1644 Comm: syz.3.305 Not tainted syzkaller #0
[  180.826417][ T1644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  180.836509][ T1644] Call Trace:
[  180.839814][ T1644]  <TASK>
[  180.842773][ T1644]  __dump_stack+0x21/0x24
[  180.842848][ T1646] loop5: detected capacity change from 0 to 512
[  180.847134][ T1644]  dump_stack_lvl+0xee/0x150
[  180.847167][ T1644]  ? __cfi_dump_stack_lvl+0x8/0x8
[  180.857019][ T1646] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  180.857990][ T1644]  ? _parse_integer+0x2a/0x40
[  180.863562][ T1646] EXT4-fs (loop5): invalid journal inode
[  180.871209][ T1644]  dump_stack+0x15/0x24
[  180.871239][ T1644]  should_fail_ex+0x3d4/0x520
[  180.876082][ T1646] EXT4-fs (loop5): can't get journal size
[  180.881709][ T1644]  should_fail+0xb/0x10
[  180.881738][ T1644]  should_fail_usercopy+0x1a/0x20
[  180.881766][ T1644]  _copy_from_user+0x1e/0xc0
[  180.881787][ T1644]  ___sys_sendmsg+0x155/0x290
[  180.914766][ T1644]  ? __sys_sendmsg+0x270/0x270
[  180.916779][ T1646] EXT4-fs (loop5): 1 truncate cleaned up
[  180.919552][ T1644]  ? __kasan_check_write+0x14/0x20
[  180.919578][ T1644]  ? proc_fail_nth_write+0x17a/0x1f0
[  180.925379][ T1646] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  180.930324][ T1644]  ? vfs_write+0x9d6/0xca0
[  180.948444][ T1644]  ? __fdget+0x19c/0x220
[  180.952729][ T1644]  __x64_sys_sendmsg+0x1f0/0x2c0
[  180.957700][ T1644]  ? __cfi___x64_sys_sendmsg+0x10/0x10
[  180.963201][ T1644]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  180.969308][ T1644]  x64_sys_call+0x171/0x9a0
[  180.973868][ T1644]  do_syscall_64+0x4c/0xa0
[  180.978308][ T1644]  ? clear_bhb_loop+0x30/0x80
[  180.983023][ T1644]  ? clear_bhb_loop+0x30/0x80
[  180.987726][ T1644]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.993644][ T1644] RIP: 0033:0x7fae7838f6c9
[  180.998089][ T1644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  181.017712][ T1644] RSP: 002b:00007fae79265038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.026134][ T1644] RAX: ffffffffffffffda RBX: 00007fae785e5fa0 RCX: 00007fae7838f6c9
[  181.034131][ T1644] RDX: 0000000024044040 RSI: 0000200000000200 RDI: 0000000000000003
[  181.042475][ T1644] RBP: 00007fae79265090 R08: 0000000000000000 R09: 0000000000000000
[  181.050473][ T1644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.058484][ T1644] R13: 00007fae785e6038 R14: 00007fae785e5fa0 R15: 00007fff8e34bd08
[  181.066497][ T1644]  </TASK>
[  184.940811][ T1419] usb 2-1: too many configurations: 72, using maximum allowed: 8
[  184.958952][ T1659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.063665][ T1664] loop0: detected capacity change from 0 to 128
[  185.120706][ T1659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.190283][ T1668] loop2: detected capacity change from 0 to 256
[  185.220036][ T1668] FAT-fs (loop2): Directory bread(block 64) failed
[  185.226694][ T1668] FAT-fs (loop2): Directory bread(block 65) failed
[  185.233434][ T1668] FAT-fs (loop2): Directory bread(block 66) failed
[  185.240086][ T1668] FAT-fs (loop2): Directory bread(block 67) failed
[  185.247064][ T1668] FAT-fs (loop2): Directory bread(block 68) failed
[  185.253736][ T1668] FAT-fs (loop2): Directory bread(block 69) failed
[  185.260587][ T1668] FAT-fs (loop2): Directory bread(block 70) failed
[  185.267247][ T1668] FAT-fs (loop2): Directory bread(block 71) failed
[  185.274034][ T1668] FAT-fs (loop2): Directory bread(block 72) failed
[  185.280626][ T1668] FAT-fs (loop2): Directory bread(block 73) failed
[  185.312200][ T1668] FAULT_INJECTION: forcing a failure.
[  185.312200][ T1668] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  185.325356][ T1668] CPU: 1 PID: 1668 Comm: syz.2.309 Not tainted syzkaller #0
[  185.332666][ T1668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  185.342735][ T1668] Call Trace:
[  185.346027][ T1668]  <TASK>
[  185.349061][ T1668]  __dump_stack+0x21/0x24
[  185.353419][ T1668]  dump_stack_lvl+0xee/0x150
[  185.358026][ T1668]  ? __cfi_dump_stack_lvl+0x8/0x8
[  185.363075][ T1668]  dump_stack+0x15/0x24
[  185.367260][ T1668]  should_fail_ex+0x3d4/0x520
[  185.372168][ T1668]  should_fail+0xb/0x10
[  185.376358][ T1668]  should_fail_usercopy+0x1a/0x20
[  185.381409][ T1668]  strncpy_from_user+0x24/0x2d0
[  185.386276][ T1668]  ? getname_flags+0xb9/0x500
[  185.390979][ T1668]  getname_flags+0xf4/0x500
[  185.395530][ T1668]  __x64_sys_mkdirat+0x7c/0xa0
[  185.400364][ T1668]  x64_sys_call+0x73d/0x9a0
[  185.404905][ T1668]  do_syscall_64+0x4c/0xa0
[  185.409340][ T1668]  ? clear_bhb_loop+0x30/0x80
[  185.414036][ T1668]  ? clear_bhb_loop+0x30/0x80
[  185.418736][ T1668]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.424649][ T1668] RIP: 0033:0x7fd06718de17
[  185.429076][ T1668] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.448693][ T1668] RSP: 002b:00007fd06805ce68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  185.457183][ T1668] RAX: ffffffffffffffda RBX: 00007fd06805cef0 RCX: 00007fd06718de17
[  185.465167][ T1668] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c
[  185.473241][ T1668] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  185.481224][ T1668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  185.489206][ T1668] R13: 00007fd06805ceb0 R14: 0000000000000000 R15: 0000200000000bc0
[  185.497197][ T1668]  </TASK>
[  185.508002][  T789] EXT4-fs (loop5): unmounting filesystem.
[  187.212438][ T1419] usb 2-1: unable to read config index 1 descriptor/all
[  187.219993][ T1419] usb 2-1: can't read configurations, error -71
[  187.292065][   T28] audit: type=1400 audit(1762849078.911:581): avc:  denied  { unmount } for  pid=1681 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  189.610304][ T1699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.318'.
[  190.124637][ T1708] loop2: detected capacity change from 0 to 512
[  190.142957][ T1705] loop5: detected capacity change from 0 to 512
[  190.152816][ T1708] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  190.163287][ T1705] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  190.206882][ T1705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  190.215123][ T1705] System zones: 1-12
[  190.221552][ T1705] EXT4-fs (loop5): orphan cleanup on readonly fs
[  190.229242][ T1705] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.319: bg 0: block 361: padding at end of block bitmap is not set
[  190.244522][ T1705] EXT4-fs (loop5): Remounting filesystem read-only
[  190.251077][ T1705] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  190.260513][ T1705] EXT4-fs (loop5): Remounting filesystem read-only
[  190.267094][ T1705] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.319: invalid indirect mapped block 12 (level 1)
[  190.281002][ T1705] EXT4-fs (loop5): Remounting filesystem read-only
[  190.287685][ T1705] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.319: invalid indirect mapped block 2 (level 2)
[  190.291877][ T1708] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  190.308902][ T1708] System zones: 1-12
[  190.309069][ T1705] EXT4-fs (loop5): Remounting filesystem read-only
[  190.313342][ T1708] EXT4-fs (loop2): orphan cleanup on readonly fs
[  190.319572][ T1705] EXT4-fs (loop5): 1 truncate cleaned up
[  190.331657][ T1705] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  190.399585][ T1708] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.320: bg 0: block 361: padding at end of block bitmap is not set
[  190.414261][ T1708] EXT4-fs (loop2): Remounting filesystem read-only
[  190.420868][ T1708] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  190.973658][ T1718] loop0: detected capacity change from 0 to 256
[  191.054298][ T1718] FAT-fs (loop0): Directory bread(block 64) failed
[  191.061086][ T1718] FAT-fs (loop0): Directory bread(block 65) failed
[  191.068339][ T1718] FAT-fs (loop0): Directory bread(block 66) failed
[  191.075030][ T1718] FAT-fs (loop0): Directory bread(block 67) failed
[  191.082037][ T1718] FAT-fs (loop0): Directory bread(block 68) failed
[  191.088851][ T1718] FAT-fs (loop0): Directory bread(block 69) failed
[  191.095972][ T1718] FAT-fs (loop0): Directory bread(block 70) failed
[  191.102780][ T1718] FAT-fs (loop0): Directory bread(block 71) failed
[  191.110261][ T1718] FAT-fs (loop0): Directory bread(block 72) failed
[  191.117092][ T1718] FAT-fs (loop0): Directory bread(block 73) failed
[  192.122193][  T789] EXT4-fs (loop5): unmounting filesystem.
[  192.763880][ T1708] EXT4-fs (loop2): Remounting filesystem read-only
[  192.770500][ T1708] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.320: invalid indirect mapped block 12 (level 1)
[  192.795200][ T1708] EXT4-fs (loop2): Remounting filesystem read-only
[  192.802606][ T1708] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.320: invalid indirect mapped block 2 (level 2)
[  192.816586][ T1708] EXT4-fs (loop2): Remounting filesystem read-only
[  192.823361][ T1708] EXT4-fs (loop2): 1 truncate cleaned up
[  192.829024][ T1708] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  192.871890][  T285] EXT4-fs (loop2): unmounting filesystem.
[  192.901378][   T28] audit: type=1326 audit(1762849081.911:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  192.950477][   T28] audit: type=1326 audit(1762849081.911:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  192.982545][ T1727] fuse: Bad value for 'fd'
[  193.007305][   T28] audit: type=1326 audit(1762849081.911:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  195.216901][   T28] audit: type=1326 audit(1762849081.911:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  195.245154][ T1747] loop2: detected capacity change from 0 to 256
[  195.275559][ T1747] exfat: Unknown parameter 'F���mA�e�?���wH�~�k|�����ce�:�aF]�$cas�%�N�:�{��� S֯�bP��w��?������8�ԏ0x000000000000000001777777777777777777777'
[  195.305499][   T28] audit: type=1326 audit(1762849081.911:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  195.541853][   T28] audit: type=1326 audit(1762849081.911:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  195.605781][   T28] audit: type=1326 audit(1762849081.911:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  195.632452][   T28] audit: type=1326 audit(1762849081.911:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  195.655992][   T28] audit: type=1326 audit(1762849081.911:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  195.681615][   T28] audit: type=1326 audit(1762849081.911:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1698 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  196.012682][ T1743] tipc: Enabled bearer <udp:syz2>, priority 10
[  196.199509][ T1769] loop1: detected capacity change from 0 to 512
[  196.217372][ T1743] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  196.225951][ T1743] tipc: Enabled bearer <udp:syz0>, priority 10
[  198.125910][ T1780] loop5: detected capacity change from 0 to 256
[  198.138561][ T1780] FAULT_INJECTION: forcing a failure.
[  198.138561][ T1780] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  198.151688][ T1780] CPU: 1 PID: 1780 Comm: syz.5.336 Not tainted syzkaller #0
[  198.158988][ T1780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  198.169048][ T1780] Call Trace:
[  198.172324][ T1780]  <TASK>
[  198.175265][ T1780]  __dump_stack+0x21/0x24
[  198.179685][ T1780]  dump_stack_lvl+0xee/0x150
[  198.184272][ T1780]  ? __cfi_dump_stack_lvl+0x8/0x8
[  198.189294][ T1780]  ? kasan_check_range+0x63/0x290
[  198.194318][ T1780]  dump_stack+0x15/0x24
[  198.198468][ T1780]  should_fail_ex+0x3d4/0x520
[  198.203147][ T1780]  should_fail+0xb/0x10
[  198.207325][ T1780]  should_fail_usercopy+0x1a/0x20
[  198.212352][ T1780]  strncpy_from_user+0x24/0x2d0
[  198.217309][ T1780]  ? getname_flags+0xb9/0x500
[  198.221985][ T1780]  getname_flags+0xf4/0x500
[  198.226485][ T1780]  __x64_sys_mkdirat+0x7c/0xa0
[  198.231249][ T1780]  x64_sys_call+0x73d/0x9a0
[  198.235770][ T1780]  do_syscall_64+0x4c/0xa0
[  198.240189][ T1780]  ? clear_bhb_loop+0x30/0x80
[  198.244868][ T1780]  ? clear_bhb_loop+0x30/0x80
[  198.249556][ T1780]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.255506][ T1780] RIP: 0033:0x7fd3e558de17
[  198.259917][ T1780] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  198.279518][ T1780] RSP: 002b:00007fd3e6411e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  198.287930][ T1780] RAX: ffffffffffffffda RBX: 00007fd3e6411ef0 RCX: 00007fd3e558de17
[  198.295906][ T1780] RDX: 00000000000001ff RSI: 0000200000000580 RDI: 00000000ffffff9c
[  198.303877][ T1780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  198.311844][ T1780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000580
[  198.319928][ T1780] R13: 00007fd3e6411eb0 R14: 0000000000000000 R15: 0000000000000000
[  198.327995][ T1780]  </TASK>
[  201.655295][ T1769] EXT4-fs: failed to create workqueue
[  201.683463][ T1769] EXT4-fs (loop1): mount failed
[  201.721231][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  201.721249][   T28] audit: type=1326 audit(1762849093.331:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  204.612308][ T1419] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  204.912047][   T28] audit: type=1326 audit(1762849093.331:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  204.935679][   T28] audit: type=1326 audit(1762849093.341:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  206.301685][ T1819] loop0: detected capacity change from 0 to 512
[  206.311129][   T28] audit: type=1326 audit(1762849093.341:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  206.391042][ T1819] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  206.480227][   T28] audit: type=1326 audit(1762849093.341:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  206.507399][ T1819] EXT4-fs (loop0): invalid journal inode
[  206.565733][ T1819] EXT4-fs (loop0): can't get journal size
[  206.705985][   T28] audit: type=1326 audit(1762849093.341:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  207.147226][ T1830] loop2: detected capacity change from 0 to 256
[  207.199231][ T1830] FAT-fs (loop2): Unrecognized mount option "nonumtail20" or missing value
[  207.213075][ T1819] EXT4-fs (loop0): 1 truncate cleaned up
[  207.234327][ T1819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  207.244012][   T28] audit: type=1326 audit(1762849093.341:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  207.333041][   T28] audit: type=1326 audit(1762849093.341:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  207.356419][   T28] audit: type=1326 audit(1762849093.341:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  207.379831][   T28] audit: type=1326 audit(1762849093.341:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  207.403429][   T28] audit: type=1326 audit(1762849093.341:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  207.607693][   T28] audit: type=1326 audit(1762849093.341:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  207.740556][ T1835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'.
[  208.976468][ T1840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'.
[  209.491156][  T282] EXT4-fs (loop0): unmounting filesystem.
[  209.561514][   T28] audit: type=1326 audit(1762849093.341:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  209.597761][ T1843] loop3: detected capacity change from 0 to 256
[  209.629570][ T1843] FAT-fs (loop3): Unrecognized mount option "nonumtail20" or missing value
[  209.672160][   T28] audit: type=1326 audit(1762849093.341:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  209.725007][   T28] audit: type=1326 audit(1762849093.341:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  209.748473][   T28] audit: type=1326 audit(1762849093.341:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7838f6c9 code=0x7ffc0000
[  209.971424][ T1848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'.
[  210.920162][ T1852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'.
[  210.973885][ T1849] loop1: detected capacity change from 0 to 512
[  213.053897][ T1849] EXT4-fs (loop1): orphan cleanup on readonly fs
[  213.060677][ T1849] __quota_error: 20 callbacks suppressed
[  213.060692][ T1849] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  213.077077][ T1849] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  213.086641][ T1849] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.352: Failed to acquire dquot type 1
[  213.100327][ T1849] EXT4-fs (loop1): 1 truncate cleaned up
[  214.574718][ T1849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  214.681952][  T286] EXT4-fs (loop1): unmounting filesystem.
[  216.434187][ T1885] loop0: detected capacity change from 0 to 512
[  216.663973][ T1885] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  216.689319][ T1885] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  216.697359][ T1885] System zones: 1-12
[  216.701835][ T1885] EXT4-fs (loop0): orphan cleanup on readonly fs
[  216.708967][ T1885] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.359: bg 0: block 361: padding at end of block bitmap is not set
[  216.723501][ T1885] EXT4-fs (loop0): Remounting filesystem read-only
[  216.730056][ T1885] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  216.739028][ T1885] EXT4-fs (loop0): Remounting filesystem read-only
[  216.745626][ T1885] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.359: invalid indirect mapped block 12 (level 1)
[  216.760277][ T1885] EXT4-fs (loop0): Remounting filesystem read-only
[  216.766840][ T1885] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.359: invalid indirect mapped block 2 (level 2)
[  216.780259][ T1885] EXT4-fs (loop0): Remounting filesystem read-only
[  216.787831][ T1885] EXT4-fs (loop0): 1 truncate cleaned up
[  216.793614][ T1885] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  216.858088][   T28] audit: type=1326 audit(1762849108.471:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  217.000035][   T28] audit: type=1326 audit(1762849108.511:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  217.025373][ T1895] FAULT_INJECTION: forcing a failure.
[  217.025373][ T1895] name failslab, interval 1, probability 0, space 0, times 0
[  217.038222][ T1895] CPU: 1 PID: 1895 Comm: syz.5.360 Not tainted syzkaller #0
[  217.045622][ T1895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  217.055785][ T1895] Call Trace:
[  217.059086][ T1895]  <TASK>
[  217.062048][ T1895]  __dump_stack+0x21/0x24
[  217.066407][ T1895]  dump_stack_lvl+0xee/0x150
[  217.071023][ T1895]  ? __cfi_dump_stack_lvl+0x8/0x8
[  217.076075][ T1895]  dump_stack+0x15/0x24
[  217.080264][ T1895]  should_fail_ex+0x3d4/0x520
[  217.084977][ T1895]  ? __alloc_file+0x28/0x2a0
[  217.089589][ T1895]  __should_failslab+0xac/0xf0
[  217.094389][ T1895]  should_failslab+0x9/0x20
[  217.098917][ T1895]  kmem_cache_alloc+0x3b/0x330
[  217.103711][ T1895]  __alloc_file+0x28/0x2a0
[  217.108153][ T1895]  alloc_empty_file+0x97/0x180
[  217.112992][ T1895]  dentry_open+0x4e/0x100
[  217.117346][ T1895]  ovl_path_open+0x16e/0x190
[  217.121958][ T1895]  ovl_dir_read+0x29/0x5c0
[  217.126393][ T1895]  ? ovl_path_upper+0xd5/0x130
[  217.131264][ T1895]  ? ovl_path_next+0x17d/0x270
[  217.136139][ T1895]  ovl_dir_read_merged+0x134/0x2f0
[  217.141365][ T1895]  ? ovl_check_empty_dir+0x480/0x480
[  217.146763][ T1895]  ? __cfi_ovl_fill_merge+0x10/0x10
[  217.151992][ T1895]  ? kasan_save_alloc_info+0x25/0x30
[  217.157307][ T1895]  ? __kasan_kmalloc+0x95/0xb0
[  217.162179][ T1895]  ? ovl_iterate+0xec8/0x1ec0
[  217.166888][ T1895]  ? kmalloc_trace+0x40/0xb0
[  217.171495][ T1895]  ovl_iterate+0xf96/0x1ec0
[  217.176022][ T1895]  ? kstrtouint+0x74/0xe0
[  217.180383][ T1895]  ? __cfi_ovl_iterate+0x10/0x10
[  217.185341][ T1895]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  217.191099][ T1895]  ? __kasan_check_write+0x14/0x20
[  217.196273][ T1895]  ? proc_fail_nth_write+0x17a/0x1f0
[  217.201574][ T1895]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  217.207224][ T1895]  ? security_file_permission+0x8a/0xb0
[  217.212800][ T1895]  ? security_file_permission+0x94/0xb0
[  217.218375][ T1895]  ? rwsem_write_trylock+0x130/0x300
[  217.223779][ T1895]  ? avc_policy_seqno+0x1b/0x70
[  217.228667][ T1895]  ? clear_nonspinnable+0x60/0x60
[  217.233744][ T1895]  ? __kasan_check_read+0x11/0x20
[  217.238800][ T1895]  ? fsnotify_perm+0x269/0x5b0
[  217.243684][ T1895]  iterate_dir+0x271/0x610
[  217.248163][ T1895]  __se_sys_getdents64+0xe5/0x240
[  217.253224][ T1895]  ? fput+0x154/0x1a0
[  217.257326][ T1895]  ? __x64_sys_getdents64+0x90/0x90
[  217.262549][ T1895]  ? ksys_write+0x1eb/0x240
[  217.267079][ T1895]  ? __cfi_filldir64+0x10/0x10
[  217.271887][ T1895]  ? __cfi_ksys_write+0x10/0x10
[  217.276784][ T1895]  ? debug_smp_processor_id+0x17/0x20
[  217.282177][ T1895]  __x64_sys_getdents64+0x7b/0x90
[  217.287225][ T1895]  x64_sys_call+0x15c/0x9a0
[  217.291750][ T1895]  do_syscall_64+0x4c/0xa0
[  217.296192][ T1895]  ? clear_bhb_loop+0x30/0x80
[  217.300888][ T1895]  ? clear_bhb_loop+0x30/0x80
[  217.305579][ T1895]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  217.311488][ T1895] RIP: 0033:0x7fd3e558f6c9
[  217.315912][ T1895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.335525][ T1895] RSP: 002b:00007fd3e6433038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  217.343938][ T1895] RAX: ffffffffffffffda RBX: 00007fd3e57e6090 RCX: 00007fd3e558f6c9
[  217.351930][ T1895] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000006
[  217.359911][ T1895] RBP: 00007fd3e6433090 R08: 0000000000000000 R09: 0000000000000000
[  217.367880][ T1895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  217.376542][ T1895] R13: 00007fd3e57e6128 R14: 00007fd3e57e6090 R15: 00007ffc9dd42028
[  217.384513][ T1895]  </TASK>
[  217.424139][  T282] EXT4-fs (loop0): unmounting filesystem.
[  217.429442][   T28] audit: type=1326 audit(1762849108.511:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  217.453667][   T28] audit: type=1326 audit(1762849108.511:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  217.478198][   T28] audit: type=1326 audit(1762849108.511:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  217.505646][   T28] audit: type=1326 audit(1762849108.511:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  217.529412][   T28] audit: type=1326 audit(1762849108.511:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  217.531484][ T1901] loop0: detected capacity change from 0 to 128
[  217.553353][   T28] audit: type=1326 audit(1762849108.511:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1888 comm="syz.1.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  217.559150][  T339] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  217.695111][ T1903] loop0: detected capacity change from 0 to 512
[  217.701569][  T384] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  217.711728][ T1903] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  217.759950][ T1903] EXT4-fs (loop0): invalid journal inode
[  217.767230][ T1903] EXT4-fs (loop0): can't get journal size
[  217.771426][  T339] usb 3-1: Using ep0 maxpacket: 8
[  217.774860][ T1903] EXT4-fs (loop0): 1 truncate cleaned up
[  217.783415][  T339] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab
[  217.784017][ T1903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  217.794383][  T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.794440][  T339] usb 3-1: Product: syz
[  217.794465][  T339] usb 3-1: Manufacturer: syz
[  217.794509][  T339] usb 3-1: SerialNumber: syz
[  217.804752][  T339] usb 3-1: config 0 descriptor??
[  217.883460][  T384] usb 4-1: config 9 has an invalid interface number: 215 but max is 1
[  217.891824][  T384] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  217.943675][  T384] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 2
[  217.953486][  T384] usb 4-1: config 9 has no interface number 0
[  218.065968][ T1909] syz.5.365[1909] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  218.072523][ T1909] syz.5.365[1909] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  219.659688][  T384] usb 4-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  220.288730][ T1917] loop2: detected capacity change from 0 to 16
[  220.315610][ T1917] erofs: (device loop2): erofs_read_inode: unsupported chunk format ffff of nid 36
[  220.341610][  T384] usb 4-1: config 9 interface 215 has no altsetting 0
[  220.397735][  T282] EXT4-fs (loop0): unmounting filesystem.
[  220.397803][  T384] usb 4-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  220.419257][  T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.432114][  T384] usb 4-1: Product: 顀䷵⮤凩삇뾆ꁬ㰏☁᫖㭓㦂딠௲䦈됀噚嘍ᴛﹽ辛껴쯨朎ꠝ鏘⿦㎁㪫ꦂ딌ҥ앭ꓕ䛈澣埙盫뚺䅞꽧聫⥈盤겠딑ꏠ㻺睂⾫ഹ癇䩷涩瑶蛓蔰폪햫蛉궠튣罗莖峊䩩η⻪퐬놁醃圻→몠⩸嚕៷䋶ో亭崎ؑ䘀ᾀ
[  220.439494][ T1920] loop0: detected capacity change from 0 to 256
[  220.513129][ T1921] syz.5.367[1921] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  220.513456][ T1921] syz.5.367[1921] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  221.014940][  T384] usb 4-1: Manufacturer: ᢠⓡ蠸ᜍ筎翾崲佰鵰煜曥鿮驅컇쎶芤徦ꂨ驦᫄靠ℐ괯ĊᏔ䮪쭴㒋욢峤꒱蜟瀰ᚖ咢驂韨췢퀶㎇㶎ퟌﺍ혎졃쾿ఓ聛毿첤됚҇彦㎸緟淪핖砚佮漸➵䠟낉ꪂ燴웧刵ᘚ黉딓厹ƌ⭂㫷綣倨剠͆斻䩘祙낳缑怣℣겚紶뙉좿ڽ⦨蝋㮝㲏ᡷ쎃椃뽔㣖ᠤ謱뿆
[  221.067619][ T1920] FAT-fs (loop0): Unrecognized mount option "nonumtail20" or missing value
[  221.932724][  T384] usb 4-1: SerialNumber: syz
[  221.943985][ T1929] fuse: Unknown parameter '00000000000000000000'
[  221.962084][  T384] usb 4-1: can't set config #9, error -71
[  221.968703][  T384] usb 4-1: USB disconnect, device number 11
[  222.034134][  T339] usb 3-1: USB disconnect, device number 4
[  222.069909][ T1932] loop3: detected capacity change from 0 to 128
[  222.142784][ T1940] loop2: detected capacity change from 0 to 1024
[  222.149466][ T1940] EXT4-fs: Ignoring removed orlov option
[  222.156007][ T1932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  222.164813][ T1932] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  222.171005][ T1940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  222.176075][ T1932] FAULT_INJECTION: forcing a failure.
[  222.176075][ T1932] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.197148][ T1932] CPU: 1 PID: 1932 Comm: syz.3.371 Not tainted syzkaller #0
[  222.204459][ T1932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  222.214522][ T1932] Call Trace:
[  222.217807][ T1932]  <TASK>
[  222.220738][ T1932]  __dump_stack+0x21/0x24
[  222.225061][ T1932]  dump_stack_lvl+0xee/0x150
[  222.229641][ T1932]  ? __cfi_dump_stack_lvl+0x8/0x8
[  222.234676][ T1932]  ? mutex_unlock+0x89/0x220
[  222.239259][ T1932]  dump_stack+0x15/0x24
[  222.243404][ T1932]  should_fail_ex+0x3d4/0x520
[  222.248106][ T1932]  should_fail+0xb/0x10
[  222.252277][ T1932]  should_fail_usercopy+0x1a/0x20
[  222.257407][ T1932]  strncpy_from_user+0x24/0x2d0
[  222.262271][ T1932]  ? getname_flags+0xb9/0x500
[  222.266951][ T1932]  getname_flags+0xf4/0x500
[  222.271453][ T1932]  __x64_sys_symlink+0x5f/0x90
[  222.276307][ T1932]  x64_sys_call+0x369/0x9a0
[  222.280847][ T1932]  do_syscall_64+0x4c/0xa0
[  222.285259][ T1932]  ? clear_bhb_loop+0x30/0x80
[  222.289934][ T1932]  ? clear_bhb_loop+0x30/0x80
[  222.294609][ T1932]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  222.300509][ T1932] RIP: 0033:0x7fae7838f6c9
[  222.304924][ T1932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.324529][ T1932] RSP: 002b:00007fae79244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[  222.332941][ T1932] RAX: ffffffffffffffda RBX: 00007fae785e6090 RCX: 00007fae7838f6c9
[  222.340919][ T1932] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000200000000540
[  222.349059][ T1932] RBP: 00007fae79244090 R08: 0000000000000000 R09: 0000000000000000
[  222.357025][ T1932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.364991][ T1932] R13: 00007fae785e6128 R14: 00007fae785e6090 R15: 00007fff8e34bd08
[  222.372967][ T1932]  </TASK>
[  222.382636][ T1939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.368'.
[  222.395715][ T1939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'.
[  222.451383][  T343] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  222.633332][  T343] usb 2-1: config 9 has an invalid interface number: 215 but max is 1
[  222.641637][  T343] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  222.651821][  T343] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2
[  222.661090][  T343] usb 2-1: config 9 has no interface number 0
[  222.715809][ T1949] overlayfs: unrecognized mount option "euid>00000000000000000000" or missing value
[  222.731194][  T343] usb 2-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  222.955798][  T285] EXT4-fs (loop2): unmounting filesystem.
[  222.966047][  T343] usb 2-1: config 9 interface 215 has no altsetting 0
[  222.975337][  T284] EXT4-fs (loop3): unmounting filesystem.
[  222.978317][  T343] usb 2-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  222.990383][  T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.002861][  T343] usb 2-1: Product: 顀䷵⮤凩삇뾆ꁬ㰏☁᫖㭓㦂딠௲䦈됀噚嘍ᴛﹽ辛껴쯨朎ꠝ鏘⿦㎁㪫ꦂ딌ҥ앭ꓕ䛈澣埙盫뚺䅞꽧聫⥈盤겠딑ꏠ㻺睂⾫ഹ癇䩷涩瑶蛓蔰폪햫蛉궠튣罗莖峊䩩η⻪퐬놁醃圻→몠⩸嚕៷䋶ో亭崎ؑ䘀ᾀ
[  223.045013][  T343] usb 2-1: Manufacturer: ᢠⓡ蠸ᜍ筎翾崲佰鵰煜曥鿮驅컇쎶芤徦ꂨ驦᫄靠ℐ괯ĊᏔ䮪쭴㒋욢峤꒱蜟瀰ᚖ咢驂韨췢퀶㎇㶎ퟌﺍ혎졃쾿ఓ聛毿첤됚҇彦㎸緟淪핖砚佮漸➵䠟낉ꪂ燴웧刵ᘚ黉딓厹ƌ⭂㫷綣倨剠͆斻䩘祙낳缑怣℣겚紶뙉좿ڽ⦨蝋㮝㲏ᡷ쎃椃뽔㣖ᠤ謱뿆
[  223.084663][  T343] usb 2-1: SerialNumber: syz
[  223.090501][ T1938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  223.217705][ T1956] loop2: detected capacity change from 0 to 128
[  223.259867][   T28] kauditd_printk_skb: 29 callbacks suppressed
[  223.259884][   T28] audit: type=1400 audit(1762849114.871:690): avc:  denied  { setattr } for  pid=1960 comm="syz.2.378" name="NETLINK" dev="sockfs" ino=20122 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  225.264164][  T343] usb 2-1: USB disconnect, device number 7
[  225.315376][   T28] audit: type=1400 audit(1762849114.871:691): avc:  denied  { ioctl } for  pid=1960 comm="syz.2.378" path="socket:[20124]" dev="sockfs" ino=20124 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  225.590698][ T1983] loop3: detected capacity change from 0 to 512
[  225.600719][ T1983] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  225.677829][ T1983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  225.686046][ T1983] System zones: 1-12
[  225.692682][ T1983] EXT4-fs (loop3): orphan cleanup on readonly fs
[  225.700492][ T1983] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.381: bg 0: block 361: padding at end of block bitmap is not set
[  225.715597][ T1983] EXT4-fs (loop3): Remounting filesystem read-only
[  225.722610][ T1983] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  225.733540][ T1983] EXT4-fs (loop3): Remounting filesystem read-only
[  225.740118][ T1983] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.381: invalid indirect mapped block 12 (level 1)
[  225.753546][ T1983] EXT4-fs (loop3): Remounting filesystem read-only
[  225.760179][ T1983] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.381: invalid indirect mapped block 2 (level 2)
[  225.773664][ T1983] EXT4-fs (loop3): Remounting filesystem read-only
[  225.780280][ T1983] EXT4-fs (loop3): 1 truncate cleaned up
[  225.786141][ T1983] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  225.801416][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  225.837224][  T384] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  226.023122][   T24] usb 6-1: config 9 has an invalid interface number: 215 but max is 1
[  226.031781][   T24] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  226.033303][  T384] usb 1-1: config 9 has an invalid interface number: 215 but max is 1
[  226.042192][   T24] usb 6-1: config 9 has 1 interface, different from the descriptor's value: 2
[  226.051081][  T384] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  226.080821][   T24] usb 6-1: config 9 has no interface number 0
[  226.087642][   T24] usb 6-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  226.099669][   T24] usb 6-1: config 9 interface 215 has no altsetting 0
[  226.099810][  T384] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2
[  226.153175][ T1992] syz.1.384[1992] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  226.153260][ T1992] syz.1.384[1992] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  226.201990][  T284] EXT4-fs (loop3): unmounting filesystem.
[  227.300822][   T24] usb 6-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  227.310311][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.318595][   T24] usb 6-1: Product: 顀䷵⮤凩삇뾆ꁬ㰏☁᫖㭓㦂딠௲䦈됀噚嘍ᴛﹽ辛껴쯨朎ꠝ鏘⿦㎁㪫ꦂ딌ҥ앭ꓕ䛈澣埙盫뚺䅞꽧聫⥈盤겠딑ꏠ㻺睂⾫ഹ癇䩷涩瑶蛓蔰폪햫蛉궠튣罗莖峊䩩η⻪퐬놁醃圻→몠⩸嚕៷䋶ో亭崎ؑ䘀ᾀ
[  227.346726][   T24] usb 6-1: Manufacturer: ᢠⓡ蠸ᜍ筎翾崲佰鵰煜曥鿮驅컇쎶芤徦ꂨ驦᫄靠ℐ괯ĊᏔ䮪쭴㒋욢峤꒱蜟瀰ᚖ咢驂韨췢퀶㎇㶎ퟌﺍ혎졃쾿ఓ聛毿첤됚҇彦㎸緟淪핖砚佮漸➵䠟낉ꪂ燴웧刵ᘚ黉딓厹ƌ⭂㫷綣倨剠͆斻䩘祙낳缑怣℣겚紶뙉좿ڽ⦨蝋㮝㲏ᡷ쎃椃뽔㣖ᠤ謱뿆
[  227.612154][ T1999] FAULT_INJECTION: forcing a failure.
[  227.612154][ T1999] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  227.625252][ T1999] CPU: 0 PID: 1999 Comm: syz.2.387 Not tainted syzkaller #0
[  227.632557][ T1999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  227.642631][ T1999] Call Trace:
[  227.645924][ T1999]  <TASK>
[  227.648869][ T1999]  __dump_stack+0x21/0x24
[  227.653215][ T1999]  dump_stack_lvl+0xee/0x150
[  227.657819][ T1999]  ? __cfi_dump_stack_lvl+0x8/0x8
[  227.662864][ T1999]  dump_stack+0x15/0x24
[  227.667036][ T1999]  should_fail_ex+0x3d4/0x520
[  227.671740][ T1999]  should_fail+0xb/0x10
[  227.675921][ T1999]  should_fail_usercopy+0x1a/0x20
[  227.681057][ T1999]  _copy_from_user+0x1e/0xc0
[  227.685707][ T1999]  __se_sys_memfd_create+0x131/0x3b0
[  227.691008][ T1999]  __x64_sys_memfd_create+0x5b/0x70
[  227.696228][ T1999]  x64_sys_call+0x235/0x9a0
[  227.700751][ T1999]  do_syscall_64+0x4c/0xa0
[  227.705185][ T1999]  ? clear_bhb_loop+0x30/0x80
[  227.709883][ T1999]  ? clear_bhb_loop+0x30/0x80
[  227.714600][ T1999]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  227.720510][ T1999] RIP: 0033:0x7fd06718f6c9
[  227.724944][ T1999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  227.744780][ T1999] RSP: 002b:00007fd06805ce18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  227.753217][ T1999] RAX: ffffffffffffffda RBX: 0000000000000350 RCX: 00007fd06718f6c9
[  227.761203][ T1999] RDX: 00007fd06805cef0 RSI: 0000000000000000 RDI: 00007fd067212960
[  227.769189][ T1999] RBP: 0000200000000580 R08: 00007fd06805cbb7 R09: 00007fd06805ce40
[  227.777187][ T1999] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000
[  227.785254][ T1999] R13: 00007fd06805cef0 R14: 00007fd06805ceb0 R15: 00002000000001c0
[  227.793245][ T1999]  </TASK>
[  227.862710][   T24] usb 6-1: SerialNumber: syz
[  228.022326][ T1981] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  228.537602][ T2003] loop1: detected capacity change from 0 to 256
[  228.583396][ T2003] FAT-fs (loop1): Directory bread(block 64) failed
[  228.590090][ T2003] FAT-fs (loop1): Directory bread(block 65) failed
[  228.597106][ T2003] FAT-fs (loop1): Directory bread(block 66) failed
[  228.603719][ T2003] FAT-fs (loop1): Directory bread(block 67) failed
[  228.610472][ T2003] FAT-fs (loop1): Directory bread(block 68) failed
[  228.617094][ T2003] FAT-fs (loop1): Directory bread(block 69) failed
[  228.623867][ T2003] FAT-fs (loop1): Directory bread(block 70) failed
[  228.630470][ T2003] FAT-fs (loop1): Directory bread(block 71) failed
[  228.637221][ T2003] FAT-fs (loop1): Directory bread(block 72) failed
[  228.643828][ T2003] FAT-fs (loop1): Directory bread(block 73) failed
[  228.996926][ T2005] loop2: detected capacity change from 0 to 128
[  229.012398][   T24] usb 6-1: USB disconnect, device number 6
[  229.139593][  T384] usb 1-1: config 9 has no interface number 0
[  232.128623][ T2049] loop0: detected capacity change from 0 to 256
[  232.151797][ T2049] FAT-fs (loop0): Directory bread(block 64) failed
[  232.158390][ T2049] FAT-fs (loop0): Directory bread(block 65) failed
[  232.165206][ T2049] FAT-fs (loop0): Directory bread(block 66) failed
[  232.171842][ T2049] FAT-fs (loop0): Directory bread(block 67) failed
[  232.178803][ T2049] FAT-fs (loop0): Directory bread(block 68) failed
[  232.185682][ T2049] FAT-fs (loop0): Directory bread(block 69) failed
[  232.192836][ T2049] FAT-fs (loop0): Directory bread(block 70) failed
[  232.199430][ T2049] FAT-fs (loop0): Directory bread(block 71) failed
[  232.206159][ T2049] FAT-fs (loop0): Directory bread(block 72) failed
[  232.212747][ T2049] FAT-fs (loop0): Directory bread(block 73) failed
[  232.232338][   T28] audit: type=1400 audit(1762849123.781:692): avc:  denied  { mount } for  pid=2021 comm="syz.5.395" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  232.257169][  T384] usb 1-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  232.259777][ T2049] FAULT_INJECTION: forcing a failure.
[  232.259777][ T2049] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  232.284191][ T2049] CPU: 1 PID: 2049 Comm: syz.0.396 Not tainted syzkaller #0
[  232.291492][ T2049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  232.301731][ T2049] Call Trace:
[  232.305037][ T2049]  <TASK>
[  232.307980][ T2049]  __dump_stack+0x21/0x24
[  232.312330][ T2049]  dump_stack_lvl+0xee/0x150
[  232.316934][ T2049]  ? __cfi_dump_stack_lvl+0x8/0x8
[  232.321983][ T2049]  dump_stack+0x15/0x24
[  232.326156][ T2049]  should_fail_ex+0x3d4/0x520
[  232.330861][ T2049]  should_fail+0xb/0x10
[  232.335046][ T2049]  should_fail_usercopy+0x1a/0x20
[  232.340096][ T2049]  strncpy_from_user+0x24/0x2d0
[  232.344961][ T2049]  ? getname_flags+0xb9/0x500
[  232.349651][ T2049]  getname_flags+0xf4/0x500
[  232.354177][ T2049]  __x64_sys_mkdirat+0x7c/0xa0
[  232.358954][ T2049]  x64_sys_call+0x73d/0x9a0
[  232.363489][ T2049]  do_syscall_64+0x4c/0xa0
[  232.367956][ T2049]  ? clear_bhb_loop+0x30/0x80
[  232.372674][ T2049]  ? clear_bhb_loop+0x30/0x80
[  232.377400][ T2049]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  232.383321][ T2049] RIP: 0033:0x7f9cb498de17
[  232.387753][ T2049] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.407387][ T2049] RSP: 002b:00007f9cb58c1e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  232.415825][ T2049] RAX: ffffffffffffffda RBX: 00007f9cb58c1ef0 RCX: 00007f9cb498de17
[  232.423815][ T2049] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c
[  232.431974][ T2049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  232.439959][ T2049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  232.447954][ T2049] R13: 00007f9cb58c1eb0 R14: 0000000000000000 R15: 0000200000000bc0
[  232.455944][ T2049]  </TASK>
[  232.462893][  T384] usb 1-1: config 9 interface 215 has no altsetting 0
[  232.668893][ T2052] fuse: Unknown parameter '0xffffffffffffffff'
[  232.708412][ T2054] fuse: Unknown parameter '00000000000000000000'
[  232.783996][   T28] audit: type=1400 audit(1762849124.401:693): avc:  denied  { write } for  pid=2023 comm="syz.2.394" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  232.835797][   T28] audit: type=1400 audit(1762849124.421:694): avc:  denied  { add_name } for  pid=2023 comm="syz.2.394" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  232.882404][  T384] usb 1-1: string descriptor 0 read error: -71
[  232.890535][  T384] usb 1-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  232.899677][  T384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.913144][  T384] usb 1-1: can't set config #9, error -71
[  232.921901][  T384] usb 1-1: USB disconnect, device number 9
[  232.936718][   T28] audit: type=1400 audit(1762849124.421:695): avc:  denied  { associate } for  pid=2023 comm="syz.2.394" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  232.958936][   T28] audit: type=1400 audit(1762849124.481:696): avc:  denied  { unmount } for  pid=789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  236.832641][ T2084] loop3: detected capacity change from 0 to 16
[  237.061025][ T2084] erofs: (device loop3): mounted with root inode @ nid 36.
[  237.176590][ T2089] loop1: detected capacity change from 0 to 128
[  240.808209][ T2092] loop2: detected capacity change from 0 to 512
[  240.962594][ T2092] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  240.970715][ T2092] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  240.979802][ T2092] EXT4-fs (loop2): 1 truncate cleaned up
[  240.985827][ T2092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  241.692399][ T2121] loop5: detected capacity change from 0 to 16
[  241.721847][ T2121] erofs: (device loop5): mounted with root inode @ nid 36.
[  241.980123][ T2129] syz.5.412: attempt to access beyond end of device
[  241.980123][ T2129] loop5: rw=0, sector=8, nr_sectors = 32 limit=16
[  244.327018][ T2133] syz.5.412: attempt to access beyond end of device
[  244.327018][ T2133] loop5: rw=0, sector=8, nr_sectors = 32 limit=16
[  247.089407][ T2134] loop0: detected capacity change from 0 to 256
[  247.385390][ T2134] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  247.397682][ T2134] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  247.472436][  T285] EXT4-fs (loop2): unmounting filesystem.
[  247.484030][ T2138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  247.496186][ T1378] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  247.506092][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  247.523033][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  247.531266][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  247.539557][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  247.548408][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  247.562664][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  247.578295][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  247.586675][   T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  247.643599][ T2147] loop2: detected capacity change from 0 to 128
[  247.695684][   T28] audit: type=1400 audit(1762849139.311:697): avc:  denied  { name_bind } for  pid=2154 comm="syz.0.421" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  249.767039][ T1419] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  249.842589][ T1404] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  249.860597][   T28] audit: type=1326 audit(1762849139.421:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2148 comm="syz.1.419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x0
[  249.962588][   T28] audit: type=1400 audit(1762849141.581:699): avc:  denied  { read } for  pid=2165 comm="syz.3.423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  249.998822][ T1419] usb 6-1: config 9 has an invalid interface number: 215 but max is 1
[  250.007270][ T1419] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  250.017639][ T1419] usb 6-1: config 9 has 1 interface, different from the descriptor's value: 2
[  250.033855][ T1419] usb 6-1: config 9 has no interface number 0
[  250.040136][ T1419] usb 6-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  250.052038][ T1419] usb 6-1: config 9 interface 215 has no altsetting 0
[  250.065537][ T1419] usb 6-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  250.075339][ T1419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.086480][ T1419] usb 6-1: Product: 顀䷵⮤凩삇뾆ꁬ㰏☁᫖㭓㦂딠௲䦈됀噚嘍ᴛﹽ辛껴쯨朎ꠝ鏘⿦㎁㪫ꦂ딌ҥ앭ꓕ䛈澣埙盫뚺䅞꽧聫⥈盤겠딑ꏠ㻺睂⾫ഹ癇䩷涩瑶蛓蔰폪햫蛉궠튣罗莖峊䩩η⻪퐬놁醃圻→몠⩸嚕៷䋶ో亭崎ؑ䘀ᾀ
[  250.376414][ T1419] usb 6-1: Manufacturer: ᢠⓡ蠸ᜍ筎翾崲佰鵰煜曥鿮驅컇쎶芤徦ꂨ驦᫄靠ℐ괯ĊᏔ䮪쭴㒋욢峤꒱蜟瀰ᚖ咢驂韨췢퀶㎇㶎ퟌﺍ혎졃쾿ఓ聛毿첤됚҇彦㎸緟淪핖砚佮漸➵䠟낉ꪂ燴웧刵ᘚ黉딓厹ƌ⭂㫷綣倨剠͆斻䩘祙낳缑怣℣겚紶뙉좿ڽ⦨蝋㮝㲏ᡷ쎃椃뽔㣖ᠤ謱뿆
[  250.410712][ T1419] usb 6-1: SerialNumber: syz
[  250.419064][ T1404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  251.176808][ T2179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.186640][ T1404] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.197390][ T2137] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  251.205075][ T2179] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.251258][   T28] audit: type=1326 audit(1762849142.861:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  251.274829][ T1404] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  251.846328][ T2187] loop2: detected capacity change from 0 to 1024
[  251.859984][ T2187] EXT4-fs: Ignoring removed bh option
[  252.243791][ T1404] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.265882][ T2187] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  252.275964][ T2187] EXT4-fs (loop2): unmounting filesystem.
[  252.416203][   T28] audit: type=1326 audit(1762849142.911:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  252.483295][ T1404] usb 1-1: config 0 descriptor??
[  252.496234][ T1419] usb 6-1: can't set config #9, error -71
[  252.514378][ T1419] usb 6-1: USB disconnect, device number 7
[  252.687851][   T28] audit: type=1326 audit(1762849142.911:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  252.719968][ T1404] usbhid 1-1:0.0: can't add hid device: -71
[  252.730965][ T1404] usbhid: probe of 1-1:0.0 failed with error -71
[  252.777532][ T1404] usb 1-1: USB disconnect, device number 10
[  252.796660][ T2203] loop0: detected capacity change from 0 to 128
[  252.820824][   T28] audit: type=1326 audit(1762849142.911:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  252.844182][   T28] audit: type=1326 audit(1762849142.911:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  252.869251][   T28] audit: type=1326 audit(1762849142.911:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  252.893926][   T28] audit: type=1326 audit(1762849142.911:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  252.917370][   T28] audit: type=1326 audit(1762849142.911:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  252.940767][   T28] audit: type=1326 audit(1762849142.911:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  252.966144][   T28] audit: type=1326 audit(1762849142.911:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  253.008224][   T28] audit: type=1400 audit(1762849142.911:710): avc:  denied  { mount } for  pid=2181 comm="syz.2.427" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  253.081607][   T28] audit: type=1326 audit(1762849142.911:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  253.105235][   T28] audit: type=1326 audit(1762849142.911:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2182 comm="syz.1.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873458f6c9 code=0x7ffc0000
[  253.670900][ T2219] loop5: detected capacity change from 0 to 512
[  253.684806][ T2219] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  253.701544][ T2219] EXT4-fs (loop5): invalid journal inode
[  253.714001][ T2219] EXT4-fs (loop5): can't get journal size
[  253.722671][ T2219] EXT4-fs (loop5): 1 truncate cleaned up
[  253.728394][ T2219] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  254.954408][  T309] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  255.001536][ T2222] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  259.441651][  T789] EXT4-fs (loop5): unmounting filesystem.
[  259.487184][ T2245] loop3: detected capacity change from 0 to 128
[  259.579858][   T28] kauditd_printk_skb: 28 callbacks suppressed
[  259.615448][   T28] audit: type=1400 audit(1762849151.151:741): avc:  denied  { read } for  pid=2246 comm="syz.1.441" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  259.977669][   T28] audit: type=1400 audit(1762849151.151:742): avc:  denied  { open } for  pid=2246 comm="syz.1.441" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  260.065867][   T28] audit: type=1400 audit(1762849151.151:743): avc:  denied  { ioctl } for  pid=2246 comm="syz.1.441" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  260.090641][   T28] audit: type=1400 audit(1762849151.171:744): avc:  denied  { ioctl } for  pid=2250 comm="syz.3.444" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  260.117608][   T28] audit: type=1400 audit(1762849151.231:745): avc:  denied  { nlmsg_write } for  pid=2252 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  261.312427][   T28] audit: type=1326 audit(1762849152.931:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2268 comm="syz.5.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e558f6c9 code=0x7ffc0000
[  261.450025][ T2272] loop1: detected capacity change from 0 to 1024
[  261.583238][ T2275] loop3: detected capacity change from 0 to 128
[  263.231193][   T28] audit: type=1326 audit(1762849153.071:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2268 comm="syz.5.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3e558f6c9 code=0x7ffc0000
[  263.295443][ T2272] EXT4-fs: Ignoring removed i_version option
[  263.302006][   T28] audit: type=1326 audit(1762849153.071:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2268 comm="syz.5.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e558f6c9 code=0x7ffc0000
[  263.326404][ T2272] EXT4-fs (loop1): Test dummy encryption mode enabled
[  263.417860][   T28] audit: type=1326 audit(1762849153.071:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2268 comm="syz.5.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e558f6c9 code=0x7ffc0000
[  263.501265][   T28] audit: type=1326 audit(1762849153.071:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2268 comm="syz.5.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd3e558f6c9 code=0x7ffc0000
[  263.535469][ T2284] 9pnet: Could not find request transport: f

[  263.544288][ T2285] loop2: detected capacity change from 0 to 512
[  263.554143][ T2285] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  263.572763][ T2272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  263.582677][ T2285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  263.590662][ T2285] System zones: 1-12
[  263.595369][ T2285] EXT4-fs (loop2): orphan cleanup on readonly fs
[  263.602265][ T2285] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.447: bg 0: block 361: padding at end of block bitmap is not set
[  263.617190][ T2285] EXT4-fs (loop2): Remounting filesystem read-only
[  263.623885][ T2285] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  263.628873][ T2272] fscrypt: AES-256-XTS using blk-crypto-fallback
[  263.641544][ T2285] EXT4-fs (loop2): Remounting filesystem read-only
[  263.648124][ T2285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.447: invalid indirect mapped block 12 (level 1)
[  263.661774][ T2285] EXT4-fs (loop2): Remounting filesystem read-only
[  263.668313][ T2285] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.447: invalid indirect mapped block 2 (level 2)
[  263.684352][ T2285] EXT4-fs (loop2): Remounting filesystem read-only
[  263.690982][ T2285] EXT4-fs (loop2): 1 truncate cleaned up
[  263.697124][ T2285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  263.700343][ T2273] bridge0: port 3(vlan3) entered blocking state
[  263.750048][ T2273] bridge0: port 3(vlan3) entered disabled state
[  263.840076][ T2290] netlink: 'syz.3.453': attribute type 12 has an invalid length.
[  263.848630][ T2290] FAULT_INJECTION: forcing a failure.
[  263.848630][ T2290] name failslab, interval 1, probability 0, space 0, times 0
[  263.866713][ T2290] CPU: 0 PID: 2290 Comm: syz.3.453 Not tainted syzkaller #0
[  263.874041][ T2290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  263.884122][ T2290] Call Trace:
[  263.887513][ T2290]  <TASK>
[  263.890457][ T2290]  __dump_stack+0x21/0x24
[  263.894828][ T2290]  dump_stack_lvl+0xee/0x150
[  263.899438][ T2290]  ? __cfi_dump_stack_lvl+0x8/0x8
[  263.904479][ T2290]  ? finish_task_switch+0x16b/0x7b0
[  263.909715][ T2290]  dump_stack+0x15/0x24
[  263.913885][ T2290]  should_fail_ex+0x3d4/0x520
[  263.918931][ T2290]  __should_failslab+0xac/0xf0
[  263.923714][ T2290]  ? ___neigh_create+0x6f6/0x1e20
[  263.928843][ T2290]  should_failslab+0x9/0x20
[  263.933361][ T2290]  __kmem_cache_alloc_node+0x3d/0x2c0
[  263.938757][ T2290]  ? ___neigh_create+0x6f6/0x1e20
[  263.943836][ T2290]  __kmalloc+0xa1/0x1e0
[  263.948027][ T2290]  ___neigh_create+0x6f6/0x1e20
[  263.952931][ T2290]  ? neigh_lookup+0x34e/0x410
[  263.957632][ T2290]  ? __cfi_arp_key_eq+0x10/0x10
[  263.962509][ T2290]  ? __cfi_neigh_lookup+0x10/0x10
[  263.967612][ T2290]  neigh_add+0xa96/0xd30
[  263.971873][ T2290]  ? __cfi_selinux_capable+0x10/0x10
[  263.977369][ T2290]  ? __cfi_neigh_add+0x10/0x10
[  263.982148][ T2290]  ? mutex_lock+0xf8/0x1a0
[  263.986597][ T2290]  ? __cfi_mutex_lock+0x10/0x10
[  263.991644][ T2290]  ? ns_capable+0x8c/0xf0
[  263.995995][ T2290]  ? netlink_net_capable+0x125/0x160
[  264.001309][ T2290]  ? __cfi_neigh_add+0x10/0x10
[  264.006088][ T2290]  rtnetlink_rcv_msg+0x9f4/0xcf0
[  264.011068][ T2290]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[  264.016651][ T2290]  ? kernel_text_address+0xa0/0xd0
[  264.021790][ T2290]  ? __kernel_text_address+0xd/0x30
[  264.027018][ T2290]  ? unwind_get_return_address+0x4d/0x90
[  264.032858][ T2290]  ? memcpy+0x56/0x70
[  264.036858][ T2290]  ? avc_has_perm_noaudit+0x2f4/0x460
[  264.042256][ T2290]  ? __cfi_avc_has_perm_noaudit+0x10/0x10
[  264.048012][ T2290]  ? slab_post_alloc_hook+0x4f/0x2d0
[  264.053320][ T2290]  ? kmem_cache_alloc_node+0x181/0x340
[  264.058801][ T2290]  ? __alloc_skb+0xea/0x4b0
[  264.063330][ T2290]  ? avc_has_perm+0x158/0x240
[  264.068029][ T2290]  ? __alloc_skb+0x236/0x4b0
[  264.072807][ T2290]  ? netlink_sendmsg+0x626/0xbc0
[  264.077781][ T2290]  ? __cfi_avc_has_perm+0x10/0x10
[  264.082848][ T2290]  ? selinux_nlmsg_lookup+0x416/0x4c0
[  264.088255][ T2290]  netlink_rcv_skb+0x1f2/0x440
[  264.093034][ T2290]  ? __cfi_rtnetlink_rcv_msg+0x10/0x10
[  264.098516][ T2290]  ? __cfi_netlink_rcv_skb+0x10/0x10
[  264.103919][ T2290]  ? __netlink_lookup+0x387/0x3b0
[  264.108965][ T2290]  rtnetlink_rcv+0x1c/0x20
[  264.113494][ T2290]  netlink_unicast+0x8ab/0xa30
[  264.118292][ T2290]  netlink_sendmsg+0x8aa/0xbc0
[  264.123097][ T2290]  ? __cfi_netlink_sendmsg+0x10/0x10
[  264.128400][ T2290]  ? security_socket_sendmsg+0x93/0xb0
[  264.133878][ T2290]  sock_write_iter+0x2ca/0x3b0
[  264.138667][ T2290]  ? __cfi_sock_write_iter+0x10/0x10
[  264.144010][ T2290]  ? fsnotify_perm+0x67/0x5b0
[  264.148809][ T2290]  ? security_file_permission+0x8a/0xb0
[  264.154376][ T2290]  vfs_write+0x5db/0xca0
[  264.158646][ T2290]  ? slab_free_freelist_hook+0xc2/0x190
[  264.164230][ T2290]  ? __cfi_vfs_write+0x10/0x10
[  264.169029][ T2290]  ? __fget_files+0x2d5/0x330
[  264.173722][ T2290]  ? __fdget_pos+0x1f2/0x380
[  264.178323][ T2290]  ? ksys_write+0x71/0x240
[  264.182763][ T2290]  ksys_write+0x140/0x240
[  264.187111][ T2290]  ? __cfi_ksys_write+0x10/0x10
[  264.191982][ T2290]  ? debug_smp_processor_id+0x17/0x20
[  264.197459][ T2290]  __x64_sys_write+0x7b/0x90
[  264.202067][ T2290]  x64_sys_call+0x27b/0x9a0
[  264.206597][ T2290]  do_syscall_64+0x4c/0xa0
[  264.211036][ T2290]  ? clear_bhb_loop+0x30/0x80
[  264.215760][ T2290]  ? clear_bhb_loop+0x30/0x80
[  264.220473][ T2290]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  264.226387][ T2290] RIP: 0033:0x7fae7838f6c9
[  264.230836][ T2290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  264.250562][ T2290] RSP: 002b:00007fae79223038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  264.259015][ T2290] RAX: ffffffffffffffda RBX: 00007fae785e6180 RCX: 00007fae7838f6c9
[  264.267011][ T2290] RDX: 00000000000000fc RSI: 0000200000000c00 RDI: 0000000000000008
[  264.275000][ T2290] RBP: 00007fae79223090 R08: 0000000000000000 R09: 0000000000000000
[  264.282987][ T2290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.291059][ T2290] R13: 00007fae785e6218 R14: 00007fae785e6180 R15: 00007fff8e34bd08
[  264.299050][ T2290]  </TASK>
[  264.469351][  T285] EXT4-fs (loop2): unmounting filesystem.
[  264.483673][  T286] EXT4-fs (loop1): unmounting filesystem.
[  265.782504][ T2299] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  266.064365][ T2307] syz.5.459[2307] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  266.064717][ T2307] syz.5.459[2307] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  269.667638][ T2313] loop0: detected capacity change from 0 to 512
[  269.702767][ T2313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  269.713203][ T2313] FAT-fs (loop0): Filesystem has been set read-only
[  269.720051][ T2313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  269.730480][ T2313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  269.740977][ T2313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  269.751435][ T2313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  269.981020][ T2313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  269.997731][ T2313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  270.008072][ T2313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  270.018456][ T2313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  270.028869][ T2313] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  270.835593][ T2331] loop1: detected capacity change from 0 to 512
[  270.849789][ T2331] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  270.859949][ T2331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  273.265124][ T2105] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  273.281375][ T2331] System zones: 1-12
[  273.285880][ T2331] EXT4-fs (loop1): orphan cleanup on readonly fs
[  273.335756][ T2339] loop0: detected capacity change from 0 to 16
[  273.354202][ T2339] erofs: Unknown parameter '000000000000000000000xffffffffffffffff0x0000000000000000�'
[  273.469115][ T2331] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.464: bg 0: block 361: padding at end of block bitmap is not set
[  274.030315][ T2331] EXT4-fs (loop1): Remounting filesystem read-only
[  274.055973][ T2339] loop0: detected capacity change from 0 to 512
[  274.149783][ T2331] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  274.159155][ T2339] EXT4-fs: Ignoring removed nobh option
[  274.253875][   T28] kauditd_printk_skb: 32 callbacks suppressed
[  274.253894][   T28] audit: type=1326 audit(1762849165.791:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2345 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  274.293004][   T28] audit: type=1326 audit(1762849165.791:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2345 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  274.317095][   T28] audit: type=1326 audit(1762849165.791:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2345 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  274.352227][ T2331] EXT4-fs (loop1): Remounting filesystem read-only
[  274.449741][   T28] audit: type=1326 audit(1762849165.791:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2345 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  274.479496][ T2331] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.464: invalid indirect mapped block 12 (level 1)
[  274.505307][ T2351] loop3: detected capacity change from 0 to 512
[  274.521310][ T2351] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  274.568148][ T2351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  274.578045][ T2351] System zones: 1-12
[  274.585165][   T28] audit: type=1326 audit(1762849165.791:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2345 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  274.611624][ T2331] EXT4-fs (loop1): Remounting filesystem read-only
[  274.624896][ T2351] EXT4-fs (loop3): orphan cleanup on readonly fs
[  274.631725][ T2351] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.468: bg 0: block 361: padding at end of block bitmap is not set
[  274.646489][ T2351] EXT4-fs (loop3): Remounting filesystem read-only
[  274.653088][ T2351] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  274.662157][ T2351] EXT4-fs (loop3): Remounting filesystem read-only
[  274.668739][ T2351] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.468: invalid indirect mapped block 12 (level 1)
[  274.682457][ T2351] EXT4-fs (loop3): Remounting filesystem read-only
[  274.689011][ T2351] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.468: invalid indirect mapped block 2 (level 2)
[  274.702773][ T2351] EXT4-fs (loop3): Remounting filesystem read-only
[  274.709422][ T2351] EXT4-fs (loop3): 1 truncate cleaned up
[  274.715235][ T2351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  274.724636][   T28] audit: type=1326 audit(1762849165.791:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2345 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  274.764489][ T2331] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.464: invalid indirect mapped block 2 (level 2)
[  274.782808][   T28] audit: type=1326 audit(1762849165.791:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2345 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  274.786800][ T2339] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.466: invalid indirect mapped block 256 (level 2)
[  274.807250][ T2331] EXT4-fs (loop1): Remounting filesystem read-only
[  274.828336][  T284] EXT4-fs (loop3): unmounting filesystem.
[  274.830228][   T28] audit: type=1326 audit(1762849165.791:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2345 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  274.858936][ T2339] EXT4-fs (loop0): Remounting filesystem read-only
[  274.869496][   T28] audit: type=1326 audit(1762849165.791:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2345 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  274.890791][ T2331] EXT4-fs (loop1): 1 truncate cleaned up
[  274.894232][ T2339] EXT4-fs (loop0): 2 truncates cleaned up
[  274.900827][ T2331] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  274.906661][ T2339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  274.942293][   T28] audit: type=1326 audit(1762849165.791:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2345 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  274.975758][  T286] EXT4-fs (loop1): unmounting filesystem.
[  275.135607][ T2361] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  279.417577][ T2373] FAULT_INJECTION: forcing a failure.
[  279.417577][ T2373] name failslab, interval 1, probability 0, space 0, times 0
[  279.430289][ T2373] CPU: 0 PID: 2373 Comm: syz.1.474 Not tainted syzkaller #0
[  279.437593][ T2373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  279.447832][ T2373] Call Trace:
[  279.451118][ T2373]  <TASK>
[  279.454234][ T2373]  __dump_stack+0x21/0x24
[  279.458683][ T2373]  dump_stack_lvl+0xee/0x150
[  279.463285][ T2373]  ? __cfi_dump_stack_lvl+0x8/0x8
[  279.468325][ T2373]  dump_stack+0x15/0x24
[  279.472495][ T2373]  should_fail_ex+0x3d4/0x520
[  279.477198][ T2373]  ? security_inode_alloc+0x33/0x120
[  279.482503][ T2373]  __should_failslab+0xac/0xf0
[  279.487293][ T2373]  should_failslab+0x9/0x20
[  279.491807][ T2373]  kmem_cache_alloc+0x3b/0x330
[  279.496587][ T2373]  ? slab_pre_alloc_hook+0x30/0x1e0
[  279.501986][ T2373]  security_inode_alloc+0x33/0x120
[  279.507113][ T2373]  inode_init_always+0x6fc/0x960
[  279.512069][ T2373]  new_inode_pseudo+0xa2/0x1f0
[  279.516850][ T2373]  new_inode+0x28/0x1e0
[  279.521018][ T2373]  shmem_get_inode+0x349/0xc20
[  279.525810][ T2373]  __shmem_file_setup+0x113/0x2b0
[  279.530866][ T2373]  shmem_file_setup+0x2f/0x40
[  279.535557][ T2373]  __se_sys_memfd_create+0x1e6/0x3b0
[  279.540862][ T2373]  __x64_sys_memfd_create+0x5b/0x70
[  279.546072][ T2373]  x64_sys_call+0x235/0x9a0
[  279.550595][ T2373]  do_syscall_64+0x4c/0xa0
[  279.555024][ T2373]  ? clear_bhb_loop+0x30/0x80
[  279.559720][ T2373]  ? clear_bhb_loop+0x30/0x80
[  279.564426][ T2373]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  279.570425][ T2373] RIP: 0033:0x7f873458f6c9
[  279.574859][ T2373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  279.594736][ T2373] RSP: 002b:00007f87353fbe18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  279.603251][ T2373] RAX: ffffffffffffffda RBX: 0000000000000249 RCX: 00007f873458f6c9
[  279.611318][ T2373] RDX: 00007f87353fbef0 RSI: 0000000000000000 RDI: 00007f8734612960
[  279.619306][ T2373] RBP: 0000200000000a00 R08: 00007f87353fbbb7 R09: 00007f87353fbe40
[  279.627287][ T2373] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040
[  279.635269][ T2373] R13: 00007f87353fbef0 R14: 00007f87353fbeb0 R15: 0000200000000840
[  279.643259][ T2373]  </TASK>
[  279.650065][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  279.650331][   T28] audit: type=1400 audit(1762849167.331:818): avc:  denied  { create } for  pid=2338 comm="syz.0.466" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1
[  279.680117][ T2353] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  280.035684][ T2353] EXT4-fs (loop0): Remounting filesystem read-only
[  280.050804][  T282] EXT4-fs (loop0): unmounting filesystem.
[  280.297323][ T2379] syz.3.476[2379] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  280.297406][ T2379] syz.3.476[2379] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  280.311197][ T2379] loop3: detected capacity change from 0 to 128
[  280.897093][  T290] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  281.111383][  T290] usb 4-1: Using ep0 maxpacket: 16
[  281.118371][  T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.484304][  T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.579038][   T28] audit: type=1400 audit(1762849173.191:819): avc:  denied  { ioctl } for  pid=2388 comm="syz.2.473" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22037 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  281.636074][ T2402] loop5: detected capacity change from 0 to 512
[  281.643169][  T290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  281.656273][  T290] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  281.665820][  T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.671436][ T2402] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  281.687171][  T290] usb 4-1: config 0 descriptor??
[  281.693157][ T2402] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  281.701204][ T2402] System zones: 1-12
[  281.705711][ T2402] EXT4-fs (loop5): orphan cleanup on readonly fs
[  281.721868][ T2402] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.480: bg 0: block 361: padding at end of block bitmap is not set
[  281.755212][ T2402] EXT4-fs (loop5): Remounting filesystem read-only
[  281.761941][ T2402] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  281.770949][ T2402] EXT4-fs (loop5): Remounting filesystem read-only
[  281.777527][ T2402] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.480: invalid indirect mapped block 12 (level 1)
[  281.790969][ T2402] EXT4-fs (loop5): Remounting filesystem read-only
[  281.797620][ T2402] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.480: invalid indirect mapped block 2 (level 2)
[  281.811052][ T2402] EXT4-fs (loop5): Remounting filesystem read-only
[  281.817802][ T2402] EXT4-fs (loop5): 1 truncate cleaned up
[  281.823633][ T2402] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  281.843287][  T789] EXT4-fs (loop5): unmounting filesystem.
[  281.979297][   T28] audit: type=1400 audit(1762849173.591:820): avc:  denied  { read write } for  pid=2412 comm="syz.5.483" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  282.003372][   T28] audit: type=1400 audit(1762849173.621:821): avc:  denied  { open } for  pid=2412 comm="syz.5.483" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  282.076173][  T782] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  282.116446][  T552] Bluetooth: hci0: Frame reassembly failed (-84)
[  282.132096][ T2406] loop1: detected capacity change from 0 to 40427
[  282.194029][ T2420] FAULT_INJECTION: forcing a failure.
[  282.194029][ T2420] name failslab, interval 1, probability 0, space 0, times 0
[  282.206782][ T2420] CPU: 1 PID: 2420 Comm: syz.5.483 Not tainted syzkaller #0
[  282.214089][ T2420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  282.224151][ T2420] Call Trace:
[  282.227439][ T2420]  <TASK>
[  282.230385][ T2420]  __dump_stack+0x21/0x24
[  282.234737][ T2420]  dump_stack_lvl+0xee/0x150
[  282.239351][ T2420]  ? __cfi_dump_stack_lvl+0x8/0x8
[  282.244424][ T2420]  ? __schedule+0xb8f/0x14e0
[  282.249037][ T2420]  ? __cfi_push_rt_tasks+0x10/0x10
[  282.254163][ T2420]  dump_stack+0x15/0x24
[  282.258339][ T2420]  should_fail_ex+0x3d4/0x520
[  282.263037][ T2420]  __should_failslab+0xac/0xf0
[  282.267827][ T2420]  ? kernfs_get_tree+0x74/0x790
[  282.272701][ T2420]  should_failslab+0x9/0x20
[  282.277215][ T2420]  __kmem_cache_alloc_node+0x3d/0x2c0
[  282.282639][ T2420]  ? __kasan_check_read+0x11/0x20
[  282.287678][ T2420]  ? kernfs_get_tree+0x74/0x790
[  282.292557][ T2420]  kmalloc_trace+0x29/0xb0
[  282.296997][ T2420]  kernfs_get_tree+0x74/0x790
[  282.301711][ T2420]  ? raw_irqentry_exit_cond_resched+0x29/0x30
[  282.307811][ T2420]  cgroup_do_get_tree+0xf8/0x570
[  282.312836][ T2420]  cgroup_get_tree+0xe6/0x2a0
[  282.317508][ T2420]  vfs_get_tree+0x9a/0x270
[  282.321919][ T2420]  vfs_fsconfig_locked+0x236/0x3f0
[  282.327034][ T2420]  __se_sys_fsconfig+0x619/0x750
[  282.332004][ T2420]  ? __x64_sys_fsconfig+0xd0/0xd0
[  282.337043][ T2420]  ? __kasan_check_write+0x14/0x20
[  282.342193][ T2420]  ? fpregs_restore_userregs+0x128/0x260
[  282.347846][ T2420]  __x64_sys_fsconfig+0xbf/0xd0
[  282.352699][ T2420]  x64_sys_call+0x5df/0x9a0
[  282.357214][ T2420]  do_syscall_64+0x4c/0xa0
[  282.361625][ T2420]  ? clear_bhb_loop+0x30/0x80
[  282.366299][ T2420]  ? clear_bhb_loop+0x30/0x80
[  282.370967][ T2420]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  282.376851][ T2420] RIP: 0033:0x7fd3e558f6c9
[  282.381258][ T2420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.400889][ T2420] RSP: 002b:00007fd3e6412038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  282.409299][ T2420] RAX: ffffffffffffffda RBX: 00007fd3e57e6180 RCX: 00007fd3e558f6c9
[  282.417440][ T2420] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000009
[  282.425413][ T2420] RBP: 00007fd3e6412090 R08: 0000000000000000 R09: 0000000000000000
[  282.433385][ T2420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.441449][ T2420] R13: 00007fd3e57e6218 R14: 00007fd3e57e6180 R15: 00007ffc9dd42028
[  282.449443][ T2420]  </TASK>
[  282.483137][  T782] usb 1-1: config 9 has an invalid interface number: 215 but max is 1
[  282.491442][  T782] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  282.502023][  T782] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2
[  282.510952][  T782] usb 1-1: config 9 has no interface number 0
[  282.517143][  T782] usb 1-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  282.528788][  T782] usb 1-1: config 9 interface 215 has no altsetting 0
[  282.537858][  T782] usb 1-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  282.547213][  T782] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.555457][  T782] usb 1-1: Product: 顀䷵⮤凩삇뾆ꁬ㰏☁᫖㭓㦂딠௲䦈됀噚嘍ᴛﹽ辛껴쯨朎ꠝ鏘⿦㎁㪫ꦂ딌ҥ앭ꓕ䛈澣埙盫뚺䅞꽧聫⥈盤겠딑ꏠ㻺睂⾫ഹ癇䩷涩瑶蛓蔰폪햫蛉궠튣罗莖峊䩩η⻪퐬놁醃圻→몠⩸嚕៷䋶ో亭崎ؑ䘀ᾀ
[  282.583488][  T782] usb 1-1: Manufacturer: ᢠⓡ蠸ᜍ筎翾崲佰鵰煜曥鿮驅컇쎶芤徦ꂨ驦᫄靠ℐ괯ĊᏔ䮪쭴㒋욢峤꒱蜟瀰ᚖ咢驂韨췢퀶㎇㶎ퟌﺍ혎졃쾿ఓ聛毿첤됚҇彦㎸緟淪핖砚佮漸➵䠟낉ꪂ燴웧刵ᘚ黉딓厹ƌ⭂㫷綣倨剠͆斻䩘祙낳缑怣℣겚紶뙉좿ڽ⦨蝋㮝㲏ᡷ쎃椃뽔㣖ᠤ謱뿆
[  282.616805][  T782] usb 1-1: SerialNumber: syz
[  282.626646][ T2398] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  282.639520][   T28] audit: type=1400 audit(1762849174.261:822): avc:  denied  { setopt } for  pid=2423 comm="syz.1.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  282.658963][   T28] audit: type=1400 audit(1762849174.271:823): avc:  denied  { ioctl } for  pid=2423 comm="syz.1.486" path="socket:[22071]" dev="sockfs" ino=22071 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  283.561480][  T290] usbhid 4-1:0.0: can't add hid device: -71
[  283.568013][  T290] usbhid: probe of 4-1:0.0 failed with error -71
[  283.581158][   T28] audit: type=1400 audit(1762849175.191:824): avc:  denied  { read write } for  pid=2434 comm="syz.3.489" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  283.582579][ T2435] input: syz1 as /devices/virtual/input/input4
[  283.611833][   T28] audit: type=1400 audit(1762849175.191:825): avc:  denied  { open } for  pid=2434 comm="syz.3.489" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  283.616095][  T290] usb 4-1: USB disconnect, device number 13
[  283.638097][   T28] audit: type=1400 audit(1762849175.191:826): avc:  denied  { ioctl } for  pid=2434 comm="syz.3.489" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  283.715562][   T28] audit: type=1400 audit(1762849175.331:827): avc:  denied  { bind } for  pid=2434 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  283.779132][  T782] usb 1-1: USB disconnect, device number 11
[  283.788615][ T2440] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  284.053991][ T2437] loop3: detected capacity change from 0 to 256
[  284.134396][  T689] Bluetooth: hci0: command 0x1003 tx timeout
[  284.140604][  T716] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  284.171023][ T1420] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  284.193400][ T1420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  284.199167][ T2449] loop1: detected capacity change from 0 to 512
[  284.208837][ T2449] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  284.219657][ T2449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  284.228021][ T2449] System zones: 1-12
[  284.232553][ T2449] EXT4-fs (loop1): orphan cleanup on readonly fs
[  284.239179][ T2449] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.492: bg 0: block 361: padding at end of block bitmap is not set
[  284.253999][ T2449] EXT4-fs (loop1): Remounting filesystem read-only
[  284.254839][ T1420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  284.260524][ T2449] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  284.277353][ T2449] EXT4-fs (loop1): Remounting filesystem read-only
[  284.279092][ T1420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  284.284239][ T2449] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.492: invalid indirect mapped block 12 (level 1)
[  284.292990][ T1420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  284.293303][ T1420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  284.322077][ T2449] EXT4-fs (loop1): Remounting filesystem read-only
[  284.328650][ T2449] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.492: invalid indirect mapped block 2 (level 2)
[  284.343253][ T2449] EXT4-fs (loop1): Remounting filesystem read-only
[  284.350039][ T2449] EXT4-fs (loop1): 1 truncate cleaned up
[  284.355733][ T2449] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  284.382782][  T286] EXT4-fs (loop1): unmounting filesystem.
[  284.399481][ T2453] FAULT_INJECTION: forcing a failure.
[  284.399481][ T2453] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  284.474306][ T2453] CPU: 1 PID: 2453 Comm: syz.2.493 Not tainted syzkaller #0
[  284.481654][ T2453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  284.491733][ T2453] Call Trace:
[  284.495036][ T2453]  <TASK>
[  284.497989][ T2453]  __dump_stack+0x21/0x24
[  284.501151][ T2459] loop5: detected capacity change from 0 to 1024
[  284.502351][ T2453]  dump_stack_lvl+0xee/0x150
[  284.502377][ T2453]  ? __cfi_dump_stack_lvl+0x8/0x8
[  284.502394][ T2453]  ? stack_trace_save+0x98/0xe0
[  284.502415][ T2453]  ? __stack_depot_save+0x36/0x480
[  284.509461][ T2459] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  284.513336][ T2453]  dump_stack+0x15/0x24
[  284.513362][ T2453]  should_fail_ex+0x3d4/0x520
[  284.513386][ T2453]  should_fail_alloc_page+0x61/0x90
[  284.513408][ T2453]  prepare_alloc_pages+0x148/0x5f0
[  284.513431][ T2453]  ? __alloc_pages_bulk+0x9c0/0x9c0
[  284.513453][ T2453]  ? kstrtouint+0x74/0xe0
[  284.513477][ T2453]  __alloc_pages+0x124/0x450
[  284.513500][ T2453]  ? __cfi___alloc_pages+0x10/0x10
[  284.513523][ T2453]  ? __kasan_check_write+0x14/0x20
[  284.513539][ T2453]  ? proc_fail_nth_write+0x17a/0x1f0
[  284.537477][ T2459] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  284.539969][ T2453]  __folio_alloc+0x12/0x40
[  284.602612][ T2453]  handle_mm_fault+0x18ef/0x2640
[  284.607750][ T2453]  ? __cfi_handle_mm_fault+0x10/0x10
[  284.613078][ T2453]  ? lock_vma_under_rcu+0x3eb/0x4d0
[  284.618294][ T2453]  ? __kasan_check_write+0x14/0x20
[  284.623402][ T2453]  ? fput+0x154/0x1a0
[  284.627457][ T2453]  ? ksys_write+0x1eb/0x240
[  284.631969][ T2453]  do_user_addr_fault+0x905/0x1050
[  284.637081][ T2453]  exc_page_fault+0x51/0xb0
[  284.641595][ T2453]  asm_exc_page_fault+0x27/0x30
[  284.646472][ T2453] RIP: 0033:0x7fd06705691a
[  284.651061][ T2453] Code: b2 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 bf 00 00 c0 fe 41 56 41 55 41 54 45 31 e4 55 53 48 81 ec 08 1b 00 00 <48> 89 7c 24 78 48 8d 9c 24 f0 06 00 00 48 89 74 24 70 48 89 54 24
[  284.670752][ T2453] RSP: 002b:00007fd06809d4f0 EFLAGS: 00010206
[  284.676917][ T2453] RAX: 00007fd067056900 RBX: 00007fd0673e5fa0 RCX: 0000200000000100
[  284.684980][ T2453] RDX: 0000200000fe8000 RSI: 0000000000000005 RDI: 0000000000000004
[  284.692976][ T2453] RBP: 00007fd06809f090 R08: 0000000000000001 R09: 0000000000000010
[  284.700940][ T2453] R10: 0000000000000004 R11: 0000200000fe8000 R12: 0000000000000000
[  284.708905][ T2453] R13: 00007fd0673e6038 R14: 00007fd0673e5fa0 R15: 00000000fec00000
[  284.716968][ T2453]  </TASK>
[  284.720171][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  284.720184][   T28] audit: type=1400 audit(1762849176.181:831): avc:  denied  { read write } for  pid=2458 comm="syz.5.496" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  284.749528][ T2456] syz.1.494[2456] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  284.749612][ T2456] syz.1.494[2456] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  284.752762][   T28] audit: type=1400 audit(1762849176.181:832): avc:  denied  { open } for  pid=2458 comm="syz.5.496" path="/79/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  284.761667][ T2453] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  284.806662][ T2464] loop1: detected capacity change from 0 to 128
[  284.937050][   T28] audit: type=1400 audit(1762849176.551:833): avc:  denied  { setattr } for  pid=2458 comm="syz.5.496" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  287.370468][ T2476] syz.3.495[2476] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  287.370661][ T2476] syz.3.495[2476] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  287.446076][ T2477] loop3: detected capacity change from 0 to 128
[  287.897807][ T2484] loop0: detected capacity change from 0 to 512
[  287.912737][ T2484] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  287.922046][ T2484] EXT4-fs (loop0): invalid journal inode
[  287.927735][ T2484] EXT4-fs (loop0): can't get journal size
[  287.935642][ T2484] EXT4-fs (loop0): 1 truncate cleaned up
[  287.941501][ T2484] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  287.955222][  T339] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  289.068522][  T339] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  289.127007][ T2494] loop2: detected capacity change from 0 to 1024
[  289.145103][ T2494] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal
[  289.165700][  T339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.422830][  T339] usb 2-1: config 0 descriptor??
[  289.797770][  T789] EXT4-fs (loop5): unmounting filesystem.
[  289.921253][  T282] EXT4-fs (loop0): unmounting filesystem.
[  289.933595][ T2498] loop5: detected capacity change from 0 to 128
[  290.006055][ T2481] FAULT_INJECTION: forcing a failure.
[  290.006055][ T2481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  290.021947][ T2481] CPU: 0 PID: 2481 Comm: syz.1.499 Not tainted syzkaller #0
[  290.029428][ T2481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  290.039586][ T2481] Call Trace:
[  290.042891][ T2481]  <TASK>
[  290.045828][ T2481]  __dump_stack+0x21/0x24
[  290.050166][ T2481]  dump_stack_lvl+0xee/0x150
[  290.054770][ T2481]  ? __cfi_dump_stack_lvl+0x8/0x8
[  290.059816][ T2481]  ? vfs_write+0x9d6/0xca0
[  290.064242][ T2481]  dump_stack+0x15/0x24
[  290.068412][ T2481]  should_fail_ex+0x3d4/0x520
[  290.073096][ T2481]  should_fail+0xb/0x10
[  290.077251][ T2481]  should_fail_usercopy+0x1a/0x20
[  290.082279][ T2481]  _copy_from_user+0x1e/0xc0
[  290.086874][ T2481]  __se_sys_rt_sigtimedwait+0xe7/0x280
[  290.092338][ T2481]  ? __x64_sys_rt_sigtimedwait+0xb0/0xb0
[  290.097973][ T2481]  ? __kasan_check_write+0x14/0x20
[  290.103083][ T2481]  ? fput+0x154/0x1a0
[  290.107066][ T2481]  ? ksys_write+0x1eb/0x240
[  290.111573][ T2481]  ? __cfi_ksys_write+0x10/0x10
[  290.116628][ T2481]  __x64_sys_rt_sigtimedwait+0x9b/0xb0
[  290.122101][ T2481]  x64_sys_call+0x759/0x9a0
[  290.126612][ T2481]  do_syscall_64+0x4c/0xa0
[  290.131040][ T2481]  ? clear_bhb_loop+0x30/0x80
[  290.135718][ T2481]  ? clear_bhb_loop+0x30/0x80
[  290.140405][ T2481]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  290.146306][ T2481] RIP: 0033:0x7f873458f6c9
[  290.150721][ T2481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.170335][ T2481] RSP: 002b:00007f873543e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000080
[  290.178857][ T2481] RAX: ffffffffffffffda RBX: 00007f87347e5fa0 RCX: 00007f873458f6c9
[  290.186918][ T2481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  290.194892][ T2481] RBP: 00007f873543e090 R08: 0000000000000000 R09: 0000000000000000
[  290.202867][ T2481] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  290.210836][ T2481] R13: 00007f87347e6038 R14: 00007f87347e5fa0 R15: 00007ffeafc50cb8
[  290.218905][ T2481]  </TASK>
[  290.222779][  T384] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  290.238774][ T2502] loop5: detected capacity change from 0 to 512
[  290.247460][ T2502] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.505: casefold flag without casefold feature
[  290.260417][ T2502] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.505: couldn't read orphan inode 15 (err -117)
[  290.641552][ T2502] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  290.714607][  T789] EXT4-fs (loop5): unmounting filesystem.
[  290.723167][  T384] usb 4-1: config 9 has an invalid interface number: 215 but max is 1
[  290.734706][  T384] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  290.755254][  T384] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 2
[  290.832157][  T384] usb 4-1: config 9 has no interface number 0
[  290.838298][  T384] usb 4-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  290.998217][ T2515] loop0: detected capacity change from 0 to 1024
[  291.005134][ T2515] EXT4-fs: Ignoring removed orlov option
[  291.032394][  T339] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  291.047240][ T2516] loop5: detected capacity change from 0 to 512
[  291.056054][ T2516] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  291.089294][  T384] usb 4-1: config 9 interface 215 has no altsetting 0
[  291.096244][ T2515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  291.096244][ T2516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  291.096298][ T2516] System zones: 1-12
[  291.118439][ T2516] EXT4-fs (loop5): orphan cleanup on readonly fs
[  291.118443][  T339] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  291.118506][  T339] asix: probe of 2-1:0.0 failed with error -71
[  291.141882][ T2516] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.507: bg 0: block 361: padding at end of block bitmap is not set
[  291.157643][ T2516] EXT4-fs (loop5): Remounting filesystem read-only
[  291.157870][  T384] usb 4-1: string descriptor 0 read error: -71
[  291.164952][ T2516] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  291.171709][  T384] usb 4-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  291.189225][ T2516] EXT4-fs (loop5): Remounting filesystem read-only
[  291.195795][ T2516] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.507: invalid indirect mapped block 12 (level 1)
[  291.205181][  T339] usb 2-1: USB disconnect, device number 8
[  291.209200][  T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.214864][ T2516] EXT4-fs (loop5): Remounting filesystem read-only
[  291.227114][  T384] usb 4-1: can't set config #9, error -71
[  291.229470][ T2516] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.507: invalid indirect mapped block 2 (level 2)
[  291.241459][  T384] usb 4-1: USB disconnect, device number 14
[  291.254821][ T2516] EXT4-fs (loop5): Remounting filesystem read-only
[  291.261589][ T2516] EXT4-fs (loop5): 1 truncate cleaned up
[  291.267223][ T2516] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  291.500264][   T28] audit: type=1326 audit(1762849183.111:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  291.523769][   T28] audit: type=1326 audit(1762849183.111:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  291.547302][   T28] audit: type=1326 audit(1762849183.111:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  291.571847][ T2524] FAULT_INJECTION: forcing a failure.
[  291.571847][ T2524] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  291.576869][   T28] audit: type=1326 audit(1762849183.111:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  291.590564][ T2524] CPU: 0 PID: 2524 Comm: syz.2.511 Not tainted syzkaller #0
[  291.614332][   T28] audit: type=1326 audit(1762849183.111:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  291.615723][ T2524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  291.615735][ T2524] Call Trace:
[  291.615741][ T2524]  <TASK>
[  291.615748][ T2524]  __dump_stack+0x21/0x24
[  291.639254][   T28] audit: type=1326 audit(1762849183.111:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  291.649126][ T2524]  dump_stack_lvl+0xee/0x150
[  291.649149][ T2524]  ? __cfi_dump_stack_lvl+0x8/0x8
[  291.652505][   T28] audit: type=1326 audit(1762849183.121:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  291.655375][ T2524]  ? vfs_write+0x9d6/0xca0
[  291.659761][   T28] audit: type=1326 audit(1762849183.121:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  291.683326][ T2524]  dump_stack+0x15/0x24
[  291.683347][ T2524]  should_fail_ex+0x3d4/0x520
[  291.683371][ T2524]  should_fail+0xb/0x10
[  291.683391][ T2524]  should_fail_usercopy+0x1a/0x20
[  291.683413][ T2524]  strncpy_from_user+0x24/0x2d0
[  291.683435][ T2524]  __se_sys_request_key+0x9f/0x330
[  291.683459][ T2524]  ? ksys_write+0x1eb/0x240
[  291.683474][ T2524]  ? __x64_sys_request_key+0xb0/0xb0
[  291.690904][   T28] audit: type=1326 audit(1762849183.121:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  291.693083][ T2524]  __x64_sys_request_key+0x9b/0xb0
[  291.716477][   T28] audit: type=1326 audit(1762849183.121:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2521 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd06718f6c9 code=0x7ffc0000
[  291.720834][ T2524]  x64_sys_call+0x69c/0x9a0
[  291.837761][ T2524]  do_syscall_64+0x4c/0xa0
[  291.842177][ T2524]  ? clear_bhb_loop+0x30/0x80
[  291.846845][ T2524]  ? clear_bhb_loop+0x30/0x80
[  291.851528][ T2524]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  291.857410][ T2524] RIP: 0033:0x7fd06718f6c9
[  291.861819][ T2524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.881518][ T2524] RSP: 002b:00007fd06809f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  291.889990][ T2524] RAX: ffffffffffffffda RBX: 00007fd0673e5fa0 RCX: 00007fd06718f6c9
[  291.898138][ T2524] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000200000000100
[  291.906128][ T2524] RBP: 00007fd06809f090 R08: 0000000000000000 R09: 0000000000000000
[  291.914102][ T2524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.922072][ T2524] R13: 00007fd0673e6038 R14: 00007fd0673e5fa0 R15: 00007ffdc3353d88
[  291.930142][ T2524]  </TASK>
[  291.946006][  T339] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  291.963836][  T384] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  291.972456][  T789] EXT4-fs (loop5): unmounting filesystem.
[  291.979639][  T282] EXT4-fs (loop0): unmounting filesystem.
[  292.008480][ T2532] loop5: detected capacity change from 0 to 512
[  292.015664][ T2532] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  292.024261][ T2532] EXT4-fs (loop5): invalid journal inode
[  292.030009][ T2532] EXT4-fs (loop5): can't get journal size
[  292.036854][ T2532] EXT4-fs (loop5): 1 truncate cleaned up
[  292.042777][ T2532] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  292.153343][  T384] usb 4-1: config 9 has an invalid interface number: 215 but max is 1
[  292.161595][  T384] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  292.163172][  T339] usb 2-1: config 9 has an invalid interface number: 215 but max is 1
[  292.172410][  T384] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 2
[  292.180389][  T339] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  292.199739][  T339] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2
[  292.208821][  T339] usb 2-1: config 9 has no interface number 0
[  292.215424][  T339] usb 2-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  292.310699][  T384] usb 4-1: config 9 has no interface number 0
[  292.749033][  T339] usb 2-1: config 9 interface 215 has no altsetting 0
[  292.761188][  T339] usb 2-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  292.771668][  T339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.779709][  T339] usb 2-1: Product: 顀䷵⮤凩삇뾆ꁬ㰏☁᫖㭓㦂딠௲䦈됀噚嘍ᴛﹽ辛껴쯨朎ꠝ鏘⿦㎁㪫ꦂ딌ҥ앭ꓕ䛈澣埙盫뚺䅞꽧聫⥈盤겠딑ꏠ㻺睂⾫ഹ癇䩷涩瑶蛓蔰폪햫蛉궠튣罗莖峊䩩η⻪퐬놁醃圻→몠⩸嚕៷䋶ో亭崎ؑ䘀ᾀ
[  292.950376][  T339] usb 2-1: Manufacturer: ᢠⓡ蠸ᜍ筎翾崲佰鵰煜曥鿮驅컇쎶芤徦ꂨ驦᫄靠ℐ괯ĊᏔ䮪쭴㒋욢峤꒱蜟瀰ᚖ咢驂韨췢퀶㎇㶎ퟌﺍ혎졃쾿ఓ聛毿첤됚҇彦㎸緟淪핖砚佮漸➵䠟낉ꪂ燴웧刵ᘚ黉딓厹ƌ⭂㫷綣倨剠͆斻䩘祙낳缑怣℣겚紶뙉좿ڽ⦨蝋㮝㲏ᡷ쎃椃뽔㣖ᠤ謱뿆
[  292.984731][  T339] usb 2-1: SerialNumber: syz
[  293.004159][ T2526] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  293.180415][    T6] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  293.188262][ T2387] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  293.195818][  T384] usb 4-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  293.207360][  T384] usb 4-1: config 9 interface 215 has no altsetting 0
[  293.221849][  T384] usb 4-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  293.231163][  T384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.268948][  T384] usb 4-1: Product: 顀䷵⮤凩삇뾆ꁬ㰏☁᫖㭓㦂딠௲䦈됀噚嘍ᴛﹽ辛껴쯨朎ꠝ鏘⿦㎁㪫ꦂ딌ҥ앭ꓕ䛈澣埙盫뚺䅞꽧聫⥈盤겠딑ꏠ㻺睂⾫ഹ癇䩷涩瑶蛓蔰폪햫蛉궠튣罗莖峊䩩η⻪퐬놁醃圻→몠⩸嚕៷䋶ో亭崎ؑ䘀ᾀ
[  293.297103][  T384] usb 4-1: Manufacturer: ᢠⓡ蠸ᜍ筎翾崲佰鵰煜曥鿮驅컇쎶芤徦ꂨ驦᫄靠ℐ괯ĊᏔ䮪쭴㒋욢峤꒱蜟瀰ᚖ咢驂韨췢퀶㎇㶎ퟌﺍ혎졃쾿ఓ聛毿첤됚҇彦㎸緟淪핖砚佮漸➵䠟낉ꪂ燴웧刵ᘚ黉딓厹ƌ⭂㫷綣倨剠͆斻䩘祙낳缑怣℣겚紶뙉좿ڽ⦨蝋㮝㲏ᡷ쎃椃뽔㣖ᠤ謱뿆
[  293.297717][  T789] EXT4-fs (loop5): unmounting filesystem.
[  293.330434][  T384] usb 4-1: SerialNumber: syz
[  293.341769][ T2520] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  293.393390][    T6] usb 1-1: config 9 has an invalid interface number: 215 but max is 1
[  293.401789][ T2387] usb 3-1: config 9 has an invalid interface number: 215 but max is 1
[  293.410283][    T6] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  293.420625][ T2387] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  293.430946][    T6] usb 1-1: config 9 has 1 interface, different from the descriptor's value: 2
[  293.437473][  T339] usb 2-1: USB disconnect, device number 9
[  293.442843][ T2387] usb 3-1: config 9 has 1 interface, different from the descriptor's value: 2
[  293.456140][    T6] usb 1-1: config 9 has no interface number 0
[  293.466609][ T2387] usb 3-1: config 9 has no interface number 0
[  293.528085][ T2541] FAULT_INJECTION: forcing a failure.
[  293.528085][ T2541] name failslab, interval 1, probability 0, space 0, times 0
[  293.540977][ T2541] CPU: 1 PID: 2541 Comm: syz.5.516 Not tainted syzkaller #0
[  293.548377][ T2541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  293.558878][ T2541] Call Trace:
[  293.562173][ T2541]  <TASK>
[  293.565115][ T2541]  __dump_stack+0x21/0x24
[  293.569465][ T2541]  dump_stack_lvl+0xee/0x150
[  293.574068][ T2541]  ? __cfi_dump_stack_lvl+0x8/0x8
[  293.579104][ T2541]  ? preempt_schedule_irq+0xbb/0x110
[  293.584403][ T2541]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  293.590227][ T2541]  dump_stack+0x15/0x24
[  293.594394][ T2541]  should_fail_ex+0x3d4/0x520
[  293.599107][ T2541]  ? getname_flags+0xb9/0x500
[  293.603798][ T2541]  __should_failslab+0xac/0xf0
[  293.608589][ T2541]  should_failslab+0x9/0x20
[  293.613098][ T2541]  kmem_cache_alloc+0x3b/0x330
[  293.617965][ T2541]  getname_flags+0xb9/0x500
[  293.622477][ T2541]  user_path_at_empty+0x30/0x1c0
[  293.627436][ T2541]  __se_sys_inotify_add_watch+0x1a9/0xf00
[  293.633176][ T2541]  ? fput+0x154/0x1a0
[  293.636023][    T6] usb 1-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  293.637170][ T2541]  ? __x64_sys_inotify_add_watch+0x90/0x90
[  293.637191][ T2541]  ? fpregs_restore_userregs+0x128/0x260
[  293.637208][ T2541]  __x64_sys_inotify_add_watch+0x7b/0x90
[  293.637223][ T2541]  x64_sys_call+0x6db/0x9a0
[  293.637243][ T2541]  do_syscall_64+0x4c/0xa0
[  293.648801][ T2387] usb 3-1: config 9 interface 215 altsetting 249 endpoint 0x3 has invalid maxpacket 9227, setting to 1024
[  293.654364][ T2541]  ? clear_bhb_loop+0x30/0x80
[  293.654392][ T2541]  ? clear_bhb_loop+0x30/0x80
[  293.660050][ T2387] usb 3-1: config 9 interface 215 has no altsetting 0
[  293.665658][ T2541]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  293.665685][ T2541] RIP: 0033:0x7fd3e558f6c9
[  293.665700][ T2541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.665715][ T2541] RSP: 002b:00007fd3e6412038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe
[  293.665736][ T2541] RAX: ffffffffffffffda RBX: 00007fd3e57e6180 RCX: 00007fd3e558f6c9
[  293.665749][ T2541] RDX: 0000000061000cc4 RSI: 0000200000000240 RDI: 0000000000000008
[  293.665761][ T2541] RBP: 00007fd3e6412090 R08: 0000000000000000 R09: 0000000000000000
[  293.679884][    T6] usb 1-1: config 9 interface 215 has no altsetting 0
[  293.685945][ T2541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.685962][ T2541] R13: 00007fd3e57e6218 R14: 00007fd3e57e6180 R15: 00007ffc9dd42028
[  293.685979][ T2541]  </TASK>
[  293.790802][ T2540] overlayfs: missing 'lowerdir'
[  293.792410][ T2387] usb 3-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  293.804857][    T6] usb 1-1: New USB device found, idVendor=147a, idProduct=e016, bcdDevice=eb.c2
[  293.814055][ T2387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.822133][    T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.830304][    T6] usb 1-1: Product: 顀䷵⮤凩삇뾆ꁬ㰏☁᫖㭓㦂딠௲䦈됀噚嘍ᴛﹽ辛껴쯨朎ꠝ鏘⿦㎁㪫ꦂ딌ҥ앭ꓕ䛈澣埙盫뚺䅞꽧聫⥈盤겠딑ꏠ㻺睂⾫ഹ癇䩷涩瑶蛓蔰폪햫蛉궠튣罗莖峊䩩η⻪퐬놁醃圻→몠⩸嚕៷䋶ో亭崎ؑ䘀ᾀ
[  293.858407][ T2387] usb 3-1: Product: 顀䷵⮤凩삇뾆ꁬ㰏☁᫖㭓㦂딠௲䦈됀噚嘍ᴛﹽ辛껴쯨朎ꠝ鏘⿦㎁㪫ꦂ딌ҥ앭ꓕ䛈澣埙盫뚺䅞꽧聫⥈盤겠딑ꏠ㻺睂⾫ഹ癇䩷涩瑶蛓蔰폪햫蛉궠튣罗莖峊䩩η⻪퐬놁醃圻→몠⩸嚕៷䋶ో亭崎ؑ䘀ᾀ
[  293.886549][    T6] usb 1-1: Manufacturer: ᢠⓡ蠸ᜍ筎翾崲佰鵰煜曥鿮驅컇쎶芤徦ꂨ驦᫄靠ℐ괯ĊᏔ䮪쭴㒋욢峤꒱蜟瀰ᚖ咢驂韨췢퀶㎇㶎ퟌﺍ혎졃쾿ఓ聛毿첤됚҇彦㎸緟淪핖砚佮漸➵䠟낉ꪂ燴웧刵ᘚ黉딓厹ƌ⭂㫷綣倨剠͆斻䩘祙낳缑怣℣겚紶뙉좿ڽ⦨蝋㮝㲏ᡷ쎃椃뽔㣖ᠤ謱뿆
[  293.919827][ T2387] usb 3-1: Manufacturer: ᢠⓡ蠸ᜍ筎翾崲佰鵰煜曥鿮驅컇쎶芤徦ꂨ驦᫄靠ℐ괯ĊᏔ䮪쭴㒋욢峤꒱蜟瀰ᚖ咢驂韨췢퀶㎇㶎ퟌﺍ혎졃쾿ఓ聛毿첤됚҇彦㎸緟淪핖砚佮漸➵䠟낉ꪂ燴웧刵ᘚ黉딓厹ƌ⭂㫷綣倨剠͆斻䩘祙낳缑怣℣겚紶뙉좿ڽ⦨蝋㮝㲏ᡷ쎃椃뽔㣖ᠤ謱뿆
[  293.955033][  T384] usb 4-1: USB disconnect, device number 15
[  293.961031][    T6] usb 1-1: SerialNumber: syz
[  293.966028][ T2387] usb 3-1: SerialNumber: syz
[  293.973056][ T2530] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  293.974092][ T2528] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  294.406128][ T2550] overlayfs: missing 'lowerdir'
[  294.867581][    T6] usb 1-1: USB disconnect, device number 12
[  294.873887][ T2387] usb 3-1: USB disconnect, device number 6
[  296.096856][ T2565] loop5: detected capacity change from 0 to 256
[  296.129795][ T2565] FAT-fs (loop5): Unrecognized mount option "nonumtail20" or missing value
[  296.403979][ T2561] loop0: detected capacity change from 0 to 512
[  296.432264][ T2561] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  296.456343][ T2575] 9pnet_fd: Insufficient options for proto=fd
[  296.576095][ T2575] netlink: 96 bytes leftover after parsing attributes in process `syz.3.524'.
[  296.602869][ T2561] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002]
[  296.610904][ T2561] System zones: 1-12
[  296.615469][ T2561] EXT4-fs (loop0): orphan cleanup on readonly fs
[  297.077411][ T2561] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.521: bg 0: block 361: padding at end of block bitmap is not set
[  297.093265][ T2561] EXT4-fs (loop0): Remounting filesystem read-only
[  297.099807][ T2561] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem
[  297.109766][ T2561] EXT4-fs (loop0): Remounting filesystem read-only
[  297.116317][ T2561] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.521: invalid indirect mapped block 12 (level 1)
[  297.140238][ T2561] EXT4-fs (loop0): Remounting filesystem read-only
[  297.147240][ T2561] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.521: invalid indirect mapped block 2 (level 2)
[  297.161303][ T2561] EXT4-fs (loop0): Remounting filesystem read-only
[  297.167951][ T2561] EXT4-fs (loop0): 1 truncate cleaned up
[  297.173644][ T2561] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  297.671419][ T2578] netlink: 24 bytes leftover after parsing attributes in process `syz.5.523'.
[  297.685352][ T2580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.523'.
[  297.723038][  T282] EXT4-fs (loop0): unmounting filesystem.
[  297.917572][ T2585] loop2: detected capacity change from 0 to 512
[  297.924884][ T2585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  297.968902][ T2585] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  297.983514][ T2585] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  298.060280][ T2585] EXT4-fs (loop2): 1 truncate cleaned up
[  298.066612][ T2585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  300.129234][   T28] kauditd_printk_skb: 45 callbacks suppressed
[  300.129250][   T28] audit: type=1400 audit(1762849191.741:889): avc:  denied  { sqpoll } for  pid=2606 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  300.247141][ T2612] loop5: detected capacity change from 0 to 1024
[  300.273505][ T2612] EXT4-fs: Ignoring removed orlov option
[  300.320432][   T28] audit: type=1400 audit(1762849191.791:890): avc:  denied  { block_suspend } for  pid=2606 comm="syz.0.529" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  300.356086][ T2612] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  300.413948][  T285] EXT4-fs (loop2): unmounting filesystem.
[  300.457399][ T2620] FAULT_INJECTION: forcing a failure.
[  300.457399][ T2620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  300.470770][ T2620] CPU: 0 PID: 2620 Comm: syz.0.529 Not tainted syzkaller #0
[  300.478088][ T2620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  300.488343][ T2620] Call Trace:
[  300.491648][ T2620]  <TASK>
[  300.494603][ T2620]  __dump_stack+0x21/0x24
[  300.498967][ T2620]  dump_stack_lvl+0xee/0x150
[  300.503592][ T2620]  ? __cfi_dump_stack_lvl+0x8/0x8
[  300.508644][ T2620]  ? kstrtouint_from_user+0xf7/0x150
[  300.513967][ T2620]  dump_stack+0x15/0x24
[  300.518149][ T2620]  should_fail_ex+0x3d4/0x520
[  300.522861][ T2620]  should_fail+0xb/0x10
[  300.527052][ T2620]  should_fail_usercopy+0x1a/0x20
[  300.532133][ T2620]  _copy_to_user+0x1e/0x90
[  300.536580][ T2620]  __se_sys_newuname+0x115/0x350
[  300.541556][ T2620]  ? security_file_permission+0x8a/0xb0
[  300.547224][ T2620]  ? __x64_sys_newuname+0x40/0x40
[  300.552368][ T2620]  ? security_file_permission+0x94/0xb0
[  300.557943][ T2620]  ? vfs_write+0x9d6/0xca0
[  300.562410][ T2620]  ? slab_free_freelist_hook+0xc2/0x190
[  300.567995][ T2620]  ? fpregs_assert_state_consistent+0xb1/0xe0
[  300.574086][ T2620]  __x64_sys_newuname+0x38/0x40
[  300.578954][ T2620]  x64_sys_call+0xec/0x9a0
[  300.583439][ T2620]  do_syscall_64+0x4c/0xa0
[  300.587872][ T2620]  ? clear_bhb_loop+0x30/0x80
[  300.592589][ T2620]  ? clear_bhb_loop+0x30/0x80
[  300.597389][ T2620]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  300.603300][ T2620] RIP: 0033:0x7f9cb498f6c9
[  300.607741][ T2620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.627406][ T2620] RSP: 002b:00007f9cb57f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000003f
[  300.635856][ T2620] RAX: ffffffffffffffda RBX: 00007f9cb4be6180 RCX: 00007f9cb498f6c9
[  300.643860][ T2620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300
[  300.651851][ T2620] RBP: 00007f9cb57f9090 R08: 0000000000000000 R09: 0000000000000000
[  300.659848][ T2620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.667835][ T2620] R13: 00007f9cb4be6218 R14: 00007f9cb4be6180 R15: 00007ffc7ef32728
[  300.675825][ T2620]  </TASK>
[  302.375734][  T789] EXT4-fs (loop5): unmounting filesystem.
[  302.496164][ T2633] fuse: Bad value for 'fd'
[  302.558399][ T2635] syz.3.535[2635] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  302.558721][ T2635] syz.3.535[2635] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  302.597263][ T2635] loop3: detected capacity change from 0 to 128
[  305.375103][   T28] audit: type=1326 audit(1762849196.991:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2644 comm="syz.5.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e558f6c9 code=0x7ffc0000
[  307.176849][ T2663] FAULT_INJECTION: forcing a failure.
[  307.176849][ T2663] name failslab, interval 1, probability 0, space 0, times 0
[  307.189603][ T2663] CPU: 0 PID: 2663 Comm: syz.2.543 Not tainted syzkaller #0
[  307.196910][ T2663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  307.206976][ T2663] Call Trace:
[  307.210264][ T2663]  <TASK>
[  307.213208][ T2663]  __dump_stack+0x21/0x24
[  307.217560][ T2663]  dump_stack_lvl+0xee/0x150
[  307.222158][ T2663]  ? __cfi_dump_stack_lvl+0x8/0x8
[  307.227194][ T2663]  ? __switch_to_asm+0x3a/0x60
[  307.232003][ T2663]  dump_stack+0x15/0x24
[  307.236169][ T2663]  should_fail_ex+0x3d4/0x520
[  307.240866][ T2663]  __should_failslab+0xac/0xf0
[  307.245644][ T2663]  ? tracepoint_probe_unregister+0x1e6/0x8b0
[  307.251635][ T2663]  should_failslab+0x9/0x20
[  307.256157][ T2663]  __kmem_cache_alloc_node+0x3d/0x2c0
[  307.261548][ T2663]  ? __cfi_mutex_lock+0x10/0x10
[  307.266457][ T2663]  ? delete_node+0x2b3/0xa60
[  307.271062][ T2663]  ? tracepoint_probe_unregister+0x1e6/0x8b0
[  307.277054][ T2663]  __kmalloc+0xa1/0x1e0
[  307.281223][ T2663]  ? __cfi___bpf_trace_sched_switch+0x10/0x10
[  307.287308][ T2663]  tracepoint_probe_unregister+0x1e6/0x8b0
[  307.293214][ T2663]  bpf_probe_unregister+0x61/0x70
[  307.298256][ T2663]  bpf_raw_tp_link_release+0x63/0x90
[  307.303570][ T2663]  bpf_link_free+0x13a/0x390
[  307.308174][ T2663]  ? bpf_link_put_deferred+0x20/0x20
[  307.313473][ T2663]  ? security_file_free+0xd8/0xf0
[  307.318506][ T2663]  bpf_link_release+0x15f/0x170
[  307.323369][ T2663]  ? __cfi_bpf_link_release+0x10/0x10
[  307.328751][ T2663]  __fput+0x1fc/0x8f0
[  307.332756][ T2663]  ____fput+0x15/0x20
[  307.336781][ T2663]  task_work_run+0x1db/0x240
[  307.341449][ T2663]  ? __cfi_task_work_run+0x10/0x10
[  307.346582][ T2663]  ? __cfi___close_range+0x10/0x10
[  307.351711][ T2663]  exit_to_user_mode_loop+0x9b/0xb0
[  307.356929][ T2663]  exit_to_user_mode_prepare+0x87/0xd0
[  307.362429][ T2663]  syscall_exit_to_user_mode+0x1a/0x30
[  307.367910][ T2663]  do_syscall_64+0x58/0xa0
[  307.372342][ T2663]  ? clear_bhb_loop+0x30/0x80
[  307.377128][ T2663]  ? clear_bhb_loop+0x30/0x80
[  307.381878][ T2663]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  307.387857][ T2663] RIP: 0033:0x7fd06718f6c9
[  307.392293][ T2663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.412006][ T2663] RSP: 002b:00007fd06807e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  307.420436][ T2663] RAX: 0000000000000000 RBX: 00007fd0673e6090 RCX: 00007fd06718f6c9
[  307.428503][ T2663] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[  307.436573][ T2663] RBP: 00007fd06807e090 R08: 0000000000000000 R09: 0000000000000000
[  307.444560][ T2663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.452545][ T2663] R13: 00007fd0673e6128 R14: 00007fd0673e6090 R15: 00007ffdc3353d88
[  307.460543][ T2663]  </TASK>
[  307.463892][ T2663] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69)
[  307.475658][ T2663] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  307.481841][ T2663] CPU: 0 PID: 2663 Comm: syz.2.543 Not tainted syzkaller #0
[  307.489133][ T2663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  307.499236][ T2663] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0
[  307.505433][ T2663] Code: 80 3c 30 00 74 05 e8 94 79 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
[  307.525031][ T2663] RSP: 0018:ffffc9000ffb7410 EFLAGS: 00010096
[  307.531115][ T2663] RAX: 1ffff11022f47516 RBX: ffff888117a3a8a8 RCX: ffff88811b10a880
[  307.539086][ T2663] RDX: ffff88811b109440 RSI: 0000000000000001 RDI: ffffc9000fff5000
[  307.547052][ T2663] RBP: ffffc9000ffb7450 R08: 0000000000000000 R09: fffffbfff0ee4e86
[  307.555108][ T2663] R10: 00000000b720eca3 R11: 1ffffffff0ee4e85 R12: 0000000000000001
[  307.563069][ T2663] R13: ffff888117a3a8a8 R14: dffffc0000000000 R15: ffffffff81713c50
[  307.571028][ T2663] FS:  00007fd06807e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  307.579952][ T2663] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  307.586518][ T2663] CR2: 000000110c2d6d39 CR3: 000000011dd0c000 CR4: 00000000003506b0
[  307.594478][ T2663] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  307.602605][ T2663] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  307.610557][ T2663] Call Trace:
[  307.613822][ T2663]  <TASK>
[  307.616738][ T2663]  __schedule+0x1263/0x14e0
[  307.621230][ T2663]  ? __sched_text_start+0x8/0x8
[  307.626066][ T2663]  ? __this_cpu_preempt_check+0x13/0x20
[  307.631594][ T2663]  ? xfd_validate_state+0x70/0x150
[  307.636791][ T2663]  preempt_schedule_irq+0x9b/0x110
[  307.641894][ T2663]  ? __cfi_preempt_schedule_irq+0x10/0x10
[  307.647856][ T2663]  ? irqentry_exit+0x37/0x40
[  307.652452][ T2663]  raw_irqentry_exit_cond_resched+0x29/0x30
[  307.658348][ T2663]  irqentry_exit+0x37/0x40
[  307.662752][ T2663]  sysvec_reschedule_ipi+0x78/0x80
[  307.667852][ T2663]  asm_sysvec_reschedule_ipi+0x1b/0x20
[  307.673318][ T2663] RIP: 0010:get_stack_info_noinstr+0x0/0x130
[  307.679296][ T2663] Code: 5c 48 c7 c7 80 d6 45 85 e8 0d 1d 00 00 65 c6 05 35 e3 14 7b 00 eb 98 00 00 cc 90 90 90 90 90 90 90 90 90 90 90 b8 8c 94 38 dc <55> 48 89 e5 41 57 41 56 41 55 41 54 53 49 89 d6 49 89 f4 49 89 ff
[  307.698987][ T2663] RSP: 0018:ffffc9000ffb76f0 EFLAGS: 00000282
[  307.705042][ T2663] RAX: ffff88811b109440 RBX: ffffc9000ffb77c8 RCX: ffffc9000ffb77c8
[  307.713004][ T2663] RDX: ffffc9000ffb77a8 RSI: ffff88811b109440 RDI: ffffc9000ffb7798
[  307.720962][ T2663] RBP: ffffc9000ffb7720 R08: dffffc0000000000 R09: ffffc9000ffb77a8
[  307.728938][ T2663] R10: fffff52001ff6f01 R11: 1ffff92001ff6ef5 R12: 0000000000000000
[  307.736986][ T2663] R13: ffffc9000ffb7798 R14: ffffc9000ffb77a8 R15: ffff88811b109440
[  307.744952][ T2663]  ? get_stack_info+0x3a/0xf0
[  307.749664][ T2663]  __unwind_start+0x1e2/0x3a0
[  307.754328][ T2663]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  307.760470][ T2663]  arch_stack_walk+0xe4/0x150
[  307.765416][ T2663]  stack_trace_save+0x98/0xe0
[  307.770098][ T2663]  ? __cfi_stack_trace_save+0x10/0x10
[  307.775480][ T2663]  ? memset+0x35/0x40
[  307.779453][ T2663]  kasan_set_track+0x4b/0x70
[  307.784039][ T2663]  ? __kmem_cache_free+0xb7/0x1b0
[  307.789070][ T2663]  kasan_save_free_info+0x31/0x50
[  307.794186][ T2663]  ____kasan_slab_free+0x132/0x180
[  307.799515][ T2663]  __kasan_slab_free+0x11/0x20
[  307.804315][ T2663]  slab_free_freelist_hook+0xc2/0x190
[  307.809861][ T2663]  ? bpf_raw_tp_link_dealloc+0x15/0x20
[  307.815573][ T2663]  __kmem_cache_free+0xb7/0x1b0
[  307.820532][ T2663]  kfree+0x6f/0xf0
[  307.824252][ T2663]  bpf_raw_tp_link_dealloc+0x15/0x20
[  307.829529][ T2663]  bpf_link_free+0x321/0x390
[  307.834191][ T2663]  ? bpf_link_put_deferred+0x20/0x20
[  307.839634][ T2663]  ? security_file_free+0xd8/0xf0
[  307.844656][ T2663]  bpf_link_release+0x15f/0x170
[  307.849511][ T2663]  ? __cfi_bpf_link_release+0x10/0x10
[  307.854883][ T2663]  __fput+0x1fc/0x8f0
[  307.858867][ T2663]  ____fput+0x15/0x20
[  307.862855][ T2663]  task_work_run+0x1db/0x240
[  307.867452][ T2663]  ? __cfi_task_work_run+0x10/0x10
[  307.872556][ T2663]  ? __cfi___close_range+0x10/0x10
[  307.877665][ T2663]  exit_to_user_mode_loop+0x9b/0xb0
[  307.882859][ T2663]  exit_to_user_mode_prepare+0x87/0xd0
[  307.888306][ T2663]  syscall_exit_to_user_mode+0x1a/0x30
[  307.893783][ T2663]  do_syscall_64+0x58/0xa0
[  307.898201][ T2663]  ? clear_bhb_loop+0x30/0x80
[  307.902870][ T2663]  ? clear_bhb_loop+0x30/0x80
[  307.907538][ T2663]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  307.913453][ T2663] RIP: 0033:0x7fd06718f6c9
[  307.917873][ T2663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.937494][ T2663] RSP: 002b:00007fd06807e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  307.945903][ T2663] RAX: 0000000000000000 RBX: 00007fd0673e6090 RCX: 00007fd06718f6c9
[  307.953884][ T2663] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003
[  307.961842][ T2663] RBP: 00007fd06807e090 R08: 0000000000000000 R09: 0000000000000000
[  307.969815][ T2663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.977787][ T2663] R13: 00007fd0673e6128 R14: 00007fd0673e6090 R15: 00007ffdc3353d88
[  307.985762][ T2663]  </TASK>
[  307.988774][ T2663] Modules linked in:
[  307.992674][ T2663] ---[ end trace 0000000000000000 ]---
[  307.998115][ T2663] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0
[  308.004262][ T2663] Code: 80 3c 30 00 74 05 e8 94 79 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74
[  308.024047][ T2663] RSP: 0018:ffffc9000ffb7410 EFLAGS: 00010096
[  308.030132][ T2663] RAX: 1ffff11022f47516 RBX: ffff888117a3a8a8 RCX: ffff88811b10a880
[  308.038089][ T2663] RDX: ffff88811b109440 RSI: 0000000000000001 RDI: ffffc9000fff5000
[  308.046044][ T2663] RBP: ffffc9000ffb7450 R08: 0000000000000000 R09: fffffbfff0ee4e86
[  308.053995][ T2663] R10: 00000000b720eca3 R11: 1ffffffff0ee4e85 R12: 0000000000000001
[  308.062037][ T2663] R13: ffff888117a3a8a8 R14: dffffc0000000000 R15: ffffffff81713c50
[  308.069994][ T2663] FS:  00007fd06807e6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[  308.078904][ T2663] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  308.085473][ T2663] CR2: 000000110c2d6d39 CR3: 000000011dd0c000 CR4: 00000000003506b0
[  308.093431][ T2663] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  308.101472][ T2663] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  308.109440][ T2663] Kernel panic - not syncing: Fatal exception
[  309.245351][ T2663] Shutting down cpus with NMI
[  309.250198][ T2663] Kernel Offset: disabled
[  309.254604][ T2663] Rebooting in 86400 seconds..