last executing test programs: 1m10.373774874s ago: executing program 0 (id=13): syz_open_procfs(0x0, &(0x7f0000000180)='net/dev\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000000)={'wg0\x00', @local}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newsa={0x148, 0x10, 0x401, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {@in6=@loopback, 0x1234, 0x32}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9}, {}, {0x8}, 0x0, 0x0, 0xa}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "000102030405060708090a0b0c0d0e0f"}}]}, 0x148}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) sendto$inet6(r0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00', 0xfffffffffffffd5e, 0x24000040, 0x0, 0x0) 1m10.12288131s ago: executing program 0 (id=16): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000000)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85220000c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000001c0)="460f0766b8ad000f00d8c744240000000000c7442402f6000000c7442406000000000f011c24c7442400bc000000c7442402b0000000ff2c240f01c366ba420066edb9bd0a00000f322e64440f01cb430f01b1511928b926360f01c4", 0x5c}], 0x1, 0xa, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8608}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x2f}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 1m9.924442145s ago: executing program 0 (id=18): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x80000000}, {0x0, 0x2}, 0xfffffe2d, 0x6}) 1m9.69042531s ago: executing program 0 (id=21): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@user_xattr}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@init_itable}]}, 0xff, 0x567, &(0x7f0000001300)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x180100, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './config/usb_gadget/g1/strings/0x409/serialnumber', [{}, {0x20, ':'}, {0x20, '\'\\'}, {0x20, '/dev/sequencer2\x00'}, {0x20, '})}'}], 0xa, "34734795562c88870f4a889b5170384a9b2d897f9d84c1aa0445f02b69ccd37d8d197cd7628fe92f28ba686f468ff4ec79441ce753f039243a8f48f2dd21102fd670723d7271b75ed28cf29b2d0ed9d1071c6c0ecf20f0b44a9f42b61bfcb97f509a7f4aab923afadad8bc027a7e0bb69679c0299fe212b7bda9e7b59c21ffd76db63139ead8b018c5d29b1141d7b73f16733cecf79435776d0597daaa243724966b8fc64dfac6ab7be12d65e11df7e0b8cca46c7b33ca58310d42d099ffe49ef7242da7"}, 0x114) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x25042f2ad3610f7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1b1) r3 = open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x20241, 0x1ff) close(r3) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r4 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) write$P9_RREADLINK(r4, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file1'}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000240)={0x7, 0x4d, 0x800}, 0x7) 1m8.633843275s ago: executing program 0 (id=25): fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) init_module(&(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x2, 0x8, 0x3, 0x3, 0x6, 0x68, 0x1e8, 0x40, 0x274, 0x6, 0x3, 0x38, 0x3, 0xc, 0xce, 0x1}, [{0x3, 0x6, 0x2, 0x7, 0x2, 0x5, 0x4, 0x1}, {0x70000000, 0x4, 0x8092, 0x0, 0x7, 0x4, 0x100, 0x5}, {0x6474e551, 0x10, 0x5, 0x7, 0xb, 0x9, 0x101, 0xd21}], "8deb", ['\x00', '\x00']}, 0x2ea, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x0, 0x8e09, 0x0, 0x2, 0xeb}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe84, 0x2, 0x3, 0x178}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a87, 0x1, 0x10000, 0x39f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f77, 0x100, 0x0, 0x25c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8610, 0x1, 0x0, 0x2f0}}], 0x4, &(0x7f0000002840)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0x93e, 0x0, &(0x7f0000001840)=@buf_4k="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"}}, &(0x7f00000028c0)) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) 1m8.538828497s ago: executing program 0 (id=26): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r0, 0x0, 0x1000, 0xcd, &(0x7f0000000300)="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", &(0x7f0000001300)=""/205, 0x9, 0x0, 0x7, 0x7d, &(0x7f0000001400)="9aa144fb49558a", &(0x7f0000001440)="c11cb765c8d582396ca08c08891e544a99a3d5e3a06c23aa791f27146d0ed028c660893ec3d1bb28c7b6e002550704ef1fb818a01e7a7cd67ae05e5758a61ec3bce4231297ed49b2eeaa1d093d9d0c1bfba1ae1ddb7a4151bb8db0e7e38495a3f628eb5428b5461aea5ee87800ff8a338eff3b74657ca677d023f7962b", 0x4, 0x0, 0x6c}, 0x50) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000009, 0x204031, 0xffffffffffffffff, 0xefb9e000) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000640)=0x653, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 1m8.513429269s ago: executing program 32 (id=26): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r2, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r0, 0x0, 0x1000, 0xcd, &(0x7f0000000300)="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", &(0x7f0000001300)=""/205, 0x9, 0x0, 0x7, 0x7d, &(0x7f0000001400)="9aa144fb49558a", &(0x7f0000001440)="c11cb765c8d582396ca08c08891e544a99a3d5e3a06c23aa791f27146d0ed028c660893ec3d1bb28c7b6e002550704ef1fb818a01e7a7cd67ae05e5758a61ec3bce4231297ed49b2eeaa1d093d9d0c1bfba1ae1ddb7a4151bb8db0e7e38495a3f628eb5428b5461aea5ee87800ff8a338eff3b74657ca677d023f7962b", 0x4, 0x0, 0x6c}, 0x50) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000009, 0x204031, 0xffffffffffffffff, 0xefb9e000) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000640)=0x653, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 1m6.850459888s ago: executing program 5 (id=27): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r5, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) lseek(r2, 0x851, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 1m5.89907633s ago: executing program 5 (id=42): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) r1 = dup(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) fcntl$setpipe(r2, 0x407, 0x0) read$FUSE(r2, &(0x7f0000002440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x29, 0x4, 0xffffffffc8001048, 0xffff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x80, 0x3}}, 0x50) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, r5, {0xb9}}, 0x18) 1m5.774494453s ago: executing program 5 (id=43): setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x6, 0xffffffffffffffff}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/attr/current\x00', 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', r1, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x42, &(0x7f00000018c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa3e8100100008004500003000000000fb019078ac1e000140a17c000808beff000100070000000064010100"/68], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x400000000000000) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001800)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000060000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000040), 0x0}, 0x20) setitimer(0x0, &(0x7f0000001940)={{0x0, 0xea60}}, &(0x7f0000001880)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1a00000000000000000000000000000005", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000002033fe71cb820243ce42a473bfdd44bc2264703df134419d3e6036", @ANYBLOB], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5c, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000000c0)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@abort, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@noquota}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@lazytime}, {@resuid}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x6, 0x50c, &(0x7f00000002c0)="$eJzs3MtvVNUfAPDvnU4p5fFrf/jipYyisdFIaXkuXADRhI2Jicagu9oWghQwtCZAGinGQOJCw1/gY2fiX+BKN0aNC41biVtjQkw3oAtzzZ25U6edTjttp62ln08ywzn3Mfd8772HnsfcCWDdKmVvScSWiPglIroq2ekblCr/3JscH/xzcnwwiTR95Y+kvN3dyfHB6qbV/TbnmZ5CROH9JHbVH7Zj9MrVcwMjI8OX8gW9Y4U8dX7gzPCZ4Qv9R48ePNB55HD/oZbEmZXp7s53L+7ecfL1Wy8Nnrr15ndfZOVN8/W1cVR0l983NH2EtrolpShNP5c1nmq+6GvC1pp0UszeC6tXGJqW3bXZ5Wov1/+uaCvnKrrixfdWtXDAskrTNO2oWzr1t2wirZUklR3S9HoK3AeSWO0SAKuj+of+7mTWUx0frO8H39/uHI9yDyiL+17+qqwplnuwpe5K36h9mY7/YEScmvjr4+wVs45DAAC01lfHI26eqLQ7qq/KmkI8XLPd//K5oe6I+H9EbIuIB/L2y0MR5W0fiYjtNftsbWIWoDQjX9/++akzT9Q2V1sma/89n89tTW//TZW8uy3PbS3H356cPjsyvD8/Jz3R3pHl++o/empY7esXfv6o0fFLNe2/7JUdv9oWzMvxe3HGAN3QwNjAUuOuunO9fGKv1cefRDGppiJ2RMTORXx+ds7OPvP57kbrp8WfxVkX/4fxxhMNdi4uokAzpJ9GPF25/hMxI/7I5/+S8vzk+bd7R69cfe5s7fxk35HD/Yd6N8bI8P7e6l1R7/sfb7ycJ+u6EXNc/2rVWNaJtOz6b5r1/p+auezOUlPztaMLP8aN2zcb9mkWe/9vSF4tp6vzs5cHxsYu9UVsSCbql/f/u+/lgc5p22fx9+ydvf5vi/j7k3y/XRGR3cSPRsRjEbEnL/vjEZHdnnvniP/bE0++1agLOX/8yyuLf2hB179R4tgPEbOvajv3zZd1B/6gVBd/ezS6/gfLqZ58ydDA2Mb54pqrpLWJJZ9AAAAAWAP2RMSWSAr78oGmLVEo7NsXsXlqBGV07NnTF9+5MFR5RqA72gvVka6umvHQvnxsOMtne/XX5LP1B8rjxmmapp1ZPuu/j2xf3dBh3dvcoP5nfqt/pAW43yxoHq3RE23AmjSz/t9ues/WfyEDWFkt+B4NsEap/7B+NV3/l+spOGDVzFb/r0Xcq8k2/ztYwJoyW/1/rW7JsRUpC7Cy9P9h/Vp8/fdlAFjrFlX/N7W+HMCKauoh+UaJYuNV207OsXtSXMJBF5UoxNy/AtAdUV1SbdPM/YG/FiJaU8K2lkbaOe2aFmbdZmPULCk2+NGGeRNRmHeb4gJ+iGFlE4X/RjEqiY6ImOfunbrZrlUTV5e7YOVK8Nnq/u8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwdP8EAAD//4JC0zk=") syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.redirect\x00', &(0x7f0000000800)=""/4096, 0x1000) mmap$IORING_OFF_CQ_RING(0x0, 0x9, 0x1000008, 0x8010, 0xffffffffffffffff, 0x8000000) 1m5.015342291s ago: executing program 5 (id=48): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200001, &(0x7f0000000300)={[{@nombcache}, {@data_writeback}, {@inlinecrypt}, {@grpjquota}, {@noload}, {@delalloc}, {@nobarrier}, {@nobarrier}, {@sysvgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf}}]}, 0xff, 0x4f7, &(0x7f0000000bc0)="$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") sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x15c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xdd}]}, @NL80211_ATTR_IE={0x95, 0x2a, [@fast_bss_trans={0x37, 0x76, {0x8, 0x3, "d81f6abc0f4c00af0818b62ecc4437db", "2985b976dcbafca986918ae8e45030bcf2dce5c2f03b7fdf18301589a7e6ecf5", "8891d300381d48b2b601afd25377ea31f2a28a43997a0dc7385768cace29b91e", [{0x4, 0x1, "f6"}, {0x2, 0x8, "385577e69f570921"}, {0x1, 0x15, "f17524fc01bf14e4cfe5e1fea311b5ba5dab897eb8"}]}}, @peer_mgmt={0x75, 0x14, {0x1, 0x0, @void, @void, @val="dff7468caaa89a0f7b6dca551ce34052"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_IE={0x87, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x0, 0x0, 0xe, 0x40}}, @perr={0x84, 0x62, {0xa7, 0x6, [{{}, @device_a, 0xa}, {{0x0, 0x1}, @device_a, 0x5, @value=@device_b, 0x2d}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x42}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x7}, {{}, @device_b, 0x8, @void, 0x33}, {{}, @broadcast, 0x6, @void, 0x42}]}}, @channel_switch={0x25, 0x3, {0x0, 0x4, 0x4}}, @supported_rates={0x1, 0x7, [{0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x36, 0x1}, {0x18}, {0x6c, 0x1}, {0x4}]}, @mesh_chsw={0x76, 0x6, {0x2, 0x2, 0x26, 0x8}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x47}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8008000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tahvo 0x&', 0x9) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000180)='netdevsim0\x00') ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x80000000000000, 0x7, 0x8000000000000008, 0x1000, 0x2, 0x1002, 0x9, 0xb, 0x81, 0x2, 0x2371, 0x8bd8, 0x7, 0x200000000a3e, 0x208], 0x25000, 0x156316}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f00000005c0)={0x8f, 0x0, 0xe}) write$binfmt_register(r2, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x11, 0x3a, 'usrjG\x11\x0e\xfe\x16\xb2uIi\xd1Q\x00\x00\x00\x00\xab\x98\x00', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46, 0x50, 0x4f]}, 0x6a) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, 0x0) 1m4.361442987s ago: executing program 5 (id=50): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x10, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xed00}, 0x10}, 0x94) r3 = syz_open_procfs(r0, &(0x7f0000000100)='mountinfo\x00') sendfile(0xffffffffffffffff, r3, 0x0, 0x100000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bf) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000001000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000063727970745f64657600"/315) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x804, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) read(r5, &(0x7f0000000040)=""/58, 0x3a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x9, 0xfff, 0x9}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) 1m4.2103625s ago: executing program 5 (id=51): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x118050, &(0x7f0000000540), 0x1, 0x7db, &(0x7f0000000d80)="$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") r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x19, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff00750895068100090191"}}, 0x131) write$UHID_INPUT2(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000e7010012ff"], 0x8) 1m4.18959654s ago: executing program 33 (id=51): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x118050, &(0x7f0000000540), 0x1, 0x7db, &(0x7f0000000d80)="$eJzs3c9rG9kdAPDvyJLtOkntQqFJT4ZCawiRk9RNWughpYdSaCDQnpsYWTGuZStYcoiNIQ2l0EuhDT0U2kvOaZveeu2Pa/svtJeyLAnZXSdswh6CltEPW44lW05keTf+fGCk92be6L3vjGbmSfOQAji2JtOHTMSZiPhNEjHenJ9ERK6eykZcaZR7sblRSKckarUff5jUyzzf3ChE2zoxNhYnmpnTEfHPX0aczeyut7K2vjhbKhVXmvnp6tKt6cra+rmFpdn54nxx+dKFmZmLl791eaR/sX78n/WTT377g2/85conv/jKo1//K4krcbK5rD2OfpmMycY2iVy6CXf4fr8rO2LJUTeAN5IemkONozzOxHg2hntfN3uYDQMADs3diKgBAMdM0vH6nxt8QwCAAWl9D/B8c6OQTrW7R/t9xKA9/V5EjDbib93fbCzJNu/Zjdbvg449T3bc70giYqIP9U9GxB//9tM/pVMc0n1IgE5+fi8ibkxMts7/2+efZNeYhYbeB2ScbyX2GBww+Vre+Q8G5+9p/+fb2/2/7eMvs9X/iQ79n+jT+I/J2DniZPfxn3nch2q6Svt/381tj2170RZ/08RQM3eq3ufLJTcXGie0L0bEVORGbi6Uihf2qGPq2atnO2a0Rdze//vo/s8epvWnz9slMo+zr51y52ars28X9ban9yK+mu0Uf7K1/5Mu/d9rPdbxw+/86g/dlqXxp/G2pp3xH/6ostqDiK9H5/hbkr3GJ16aTnf/+cZj5zr++v/fj3Wrv33/p1Naf+OzwKn+B9tBuv/H9o5/Imkfr1k5eB3/fjD+j27Lusff0vn9P5z8pJ5uHUp3ZqvVlQsRw8mPds+/uL1uK98qn8Y/9bXOx/9e7//0M+GNHuPPPvngz/vG35qxK/6m0R4rO6A0/rkD7f+DJx69WBzqVn9v+38mTQxNNef0cv7bq13DbWXeeMMBAAAAAAAAAAAAAAAAAAAAAAAAwAFkIuJkJJn8VjqTyeej/h/eX46xTKlcqZ69WV5dnov6f2VPRC7T+qnL8a3fQ238/ulEW/5iPb22lf9mRHwpIn438oV6Pl8ol+aOOngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaDrR5f//U++PNJ5fHmkLAYBDMbpviWfFgTQEABiY/a//ETFy+O0AAAanp+s/APBOcf0HgOPH9R8Ajp/RiOxRtwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB32rWrV9Op9nJzo5Dm526vrS6Wb5+bK1YW80urhXyhvHIrP18uz5eK+UJ5qW3V/3Z6vVK5fGsmllfvTFeLlep0ZW39+lJ5dbl6fWFpdr54vZgbWGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LvK2vribKlUXGkmHo5F7JzTMfGqtn+ZgyWGmg3q2wu+s4naeGNLfVbac/iJ98797/ReZe7vehtLvHXiKM9KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8fnwYAAP//AMMcaA==") r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x19, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff00750895068100090191"}}, 0x131) write$UHID_INPUT2(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="0c0000e7010012ff"], 0x8) 42.491742374s ago: executing program 2 (id=158): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r5, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) lseek(r2, 0x851, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 41.566728566s ago: executing program 2 (id=162): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x23, &(0x7f0000000240)="0100400871a7832e6b7303c3cd59", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb6}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x400, 0xc5, &(0x7f0000000380)=""/197, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, r0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) recvfrom$inet(r2, 0x0, 0x0, 0x40012103, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r4}, 0xc) 41.502151838s ago: executing program 2 (id=164): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040), 0x4) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) bind$tipc(r2, 0x0, 0x0) (async) bind$tipc(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) (async) r6 = dup3(r5, r4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002240)='./binderfs/binder0\x00', 0x802, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002240)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000005bc0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) mmap$xdp(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x80000000) eventfd(0xffe) (async) r9 = eventfd(0xffe) readv(r9, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1) (async) readv(r9, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) setuid(0xee01) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) syz_emit_ethernet(0xda, &(0x7f0000000080)=ANY=[@ANYRES32=r2], 0x0) 41.287024353s ago: executing program 2 (id=167): r0 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f00000000c0)={[{@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@dots}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x54fcfa75}}, {@nodots}, {@dots}, {@fat=@nfs}, {@fat=@tz_utc}]}, 0x1, 0x266, &(0x7f0000000540)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x6, r3, 0x0, 0x0, 0x8, 0x0, 0x4}]) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) writev(r6, &(0x7f0000000640)=[{&(0x7f0000000200)="570dc458021b46155e57", 0xa}], 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xfffffffffffffe36, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x45d}}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x9, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x7}}, @ptr={0x8, 0x0, 0x0, 0x2, 0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @enum={0x3, 0x0, 0x0, 0x6, 0x4, [{0xa, 0x6}, {0xb, 0x9}, {0x1, 0xfffffffb}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}]}}, &(0x7f00000005c0)=""/240, 0x1a, 0xf0, 0x0, 0x0, 0x10000, @value=r6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000400002204f7ffff0800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000000300"/28], 0x50) writev(r7, &(0x7f0000000940)=[{&(0x7f0000000240)="db5b6742a3688734b9dec618432a9d396bd937f1aae126f02f01", 0x1a}], 0x1) ioctl$TIOCGSID(r2, 0x5429, 0x0) sendfile(r0, r1, 0x0, 0x7fffffff) 40.704560996s ago: executing program 2 (id=173): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x80010, r1, 0x39928000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x1f5180, 0x67) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000004c0)={{r2}, "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"}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 40.620348378s ago: executing program 2 (id=176): unshare(0x40000400) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000240)={0xa, 0x4e1e, 0x80000, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900000032000000fe80"], 0x28}, 0x4040) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x7fc514ef, 0x4) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x44000) readv(r3, &(0x7f0000000b80)=[{&(0x7f0000000480)=""/192, 0xc0}], 0x1) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000180)={'icmp\x00'}, &(0x7f0000000200)=0x1e) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) 40.57113247s ago: executing program 34 (id=176): unshare(0x40000400) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000240)={0xa, 0x4e1e, 0x80000, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900000032000000fe80"], 0x28}, 0x4040) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x7fc514ef, 0x4) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x44000) readv(r3, &(0x7f0000000b80)=[{&(0x7f0000000480)=""/192, 0xc0}], 0x1) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000180)={'icmp\x00'}, &(0x7f0000000200)=0x1e) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) 36.711240011s ago: executing program 7 (id=209): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000019240)={0xffffffffffffffff}, 0x4) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x80f) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0xd, 0x0, "054c5af6c4489351975a6b3d46963a60e69ed0390c6e2e7899bf8af6214bf7715caa902b64b2eb379957a7c53f728b0529942186ff56aae4ae692a3e0ba3ee3221ecbfeecbd8493005210dbbcbb345ae"}, 0xd8) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) 36.602624313s ago: executing program 7 (id=212): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002162eb5108205a4d87701020301090224000103c8207309047f2a01ff6ea8c111eb01becd69d2d9e9e0d302797b0e20be6b39fa339bbc009640c090c6128a3f1d1c6e9669fd6763766469a87b3ee47528c9bde8bc9ede27a180ba9d88abcfa26c5af6a8ce32"], 0x0) 35.187156747s ago: executing program 7 (id=222): r0 = syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201102e010023002030144b47400001020301090212000101080008090400000001033006"], 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000001080)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x300a}}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000002080)={0x14, 0x0, &(0x7f0000001fc0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000340)={0x14, &(0x7f0000000180)={0x40, 0x23, 0x60, {0x60, 0x2, "4c8ad3f86656304284446504aad87bda07bd6354e89fd571a08bf7c76236b389c9cdc0db0d2f47e534f35c634a45bea2ff00b2d4b0d4d7f8275bd8fc9dc369af60c19b5bb87dbd6f642c5905296d91dadc0bb78b9e2272dde0762acf3824"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f0000000640)={0x44, &(0x7f0000000400)={0x40, 0x8, 0x1d, "3870181e694e51717d35ab1a74d2e5997325d2ac4fd9c37a629fe5c471"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xbf}, &(0x7f0000000500)={0x20, 0x81, 0x3, 'G(Y'}, &(0x7f0000000540)={0x20, 0x82, 0x3, 'bTt'}, &(0x7f0000000580)={0x20, 0x83, 0x1, "bd"}, &(0x7f00000005c0)={0x20, 0x84, 0x1, 'G'}, &(0x7f0000000600)={0x20, 0x85, 0x3, "d78e60"}}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 32.176628668s ago: executing program 7 (id=243): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffff7a) fspick(0xffffffffffffffff, 0x0, 0xfd9a2ffdf48b2275) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r1, r3, 0x5, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r4, r1, 0x4, r1}, 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r0, 0x36, 0x1, 0x80000000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 32.155219199s ago: executing program 7 (id=244): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (fail_nth: 8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 31.846731926s ago: executing program 7 (id=245): socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) (async) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x0, 0x80800) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10045884}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0xfffffeff, 0x4, 0x1c51, 0xffffffffffffffff, 0xfd, '\x00', r3, r4, 0x3, 0x3, 0x0, 0x7}, 0x50) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 23.6266391s ago: executing program 6 (id=298): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() io_setup(0x401, &(0x7f0000000040)) sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x8910, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) getrusage(0xffffffffffffffff, &(0x7f0000000200)) 22.604874685s ago: executing program 6 (id=302): r0 = socket$packet(0x11, 0x2, 0x300) (async) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007911b800000000001e0071fd8696a975a9bf2630bdb0cbae58ecd3b943e5ddaeced082f4361fe86e0e5a"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r2}, 0x4) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x12e) (async) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000340)="82e9cdbd22f535db269c115d3ace7f83e0d58e7c9cd5293f36a7e2e4248bff7233be37a1f35097a9cb0e65482c43ff788212acaacb3cc9b871075f7303388de8ad1e8623e14cc4cc4295d1ad002dba", 0x4f}], 0x1}, 0x80) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write(r4, &(0x7f0000000000)="e5", 0x1) (async) close(0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@nodiscard}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x571, &(0x7f0000000780)="$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") (async) socket(0x10, 0x3, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a', @ANYRESHEX], 0x0) 22.542614956s ago: executing program 6 (id=303): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (fail_nth: 13) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 22.327963311s ago: executing program 6 (id=304): io_uring_register$IORING_REGISTER_ZCRX_CTRL(0xffffffffffffffff, 0x24, 0x0, 0x0) r0 = socket(0x11, 0x3, 0xff) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003500000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x2) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYRES64=r2, @ANYRES8=r4, @ANYRES16=r2, @ANYRES64=r2, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14fc, &(0x7f00000062c0)="$eJzs3AuUjlXbOPB97b1vxjTpaZLDsK993TxpsE2S5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDR5pUmSkJCw/0vv+356v97v6/3W2/+z1jfXb629Zl9zP9f1XPdcs+a572eteb7rOapei/q1mxGR+LfAX7+kCCFihBDDhBDXCSECIUSl+Erxl48XUJDy7z0J+3M9nH61O2BXE88/b+P55208/7yN55+38fzzNp5/3sbzz9t4/ozlZdvnFLueV95d/P5/Xsav//+H5Jaf/NXG8jf2+h+k8PzzNp5/3sbzz9t4/nkbzz9v4/n/31frvznG88/beP6M5WVX+/1nXld3Xe3fP8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjecM5f4UWQvx9f7X7YowxxhhjjDHG2J/H57/aHTDGGGOMMcYYY+z/PxBSKKFFIPKJ/CJGFBCx4hoRJ64VBcV1IiKuF/HiBlFI3CgKiyKiqCgmEkRxUUIYgcIKEqEoKUqJqLhJlBY3i0RRRpQV5YQT5UWSuEVUELeKiuI2UUncLiqLO0QVUVVUE9XFnaKGuEvUFLVEbXG3qCPqinqivrhHNBD3iobiPtFI3C8aiwdEE/GgaCoeEs3Ew6K5eES0EI+KluIx0Uq0Fm1EW9Hut/l98/+L+S+JvuJl0U/0FyligBgoXhGDxGAxRAwVw8SrYrh4TYwQr4tUMVKMEm+I0eJNMUa8JcaKcWK8eFtMEBPFJDFZTBFTRZp4R0wT74rp4j0xQ8wUs8RskS7miLnifTFPzBcLxAdiofhQLBKLxRKxVGSIj0SmWCayxMdiufhEZIsVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLT8UOsVPsErvFHrFX7BOfif3ic3FAfCFyxJf/w/yz/ym/FwgQIEGCBg35IB/EQAzEQizEQRwUhIIQgQjEQzwUgkJQGApDUSgKCZAAJaAEICAQEJSEkhCFKJSG0pAIiVAWyoIDB0mQBBXgVqgIFaESVILKUBmqQFWoCtWhOtSAGlATakJtqA11oA7Ug3pwD9wD90JDaAiNoBE0hsbQBJpAU2gKzaAZNIfm0AJaQEtoCa2gFbSBNtAO2kF7aA8doAN0gk7QGTpDF+gCyZAMXaErdINu0B26Qw/oAT2hJ/SC3tAbXoKX4GV4GfpDHTkABsJAGASDYAgMhaHwKgyH1+A1eB1SYSSMgjfgDXgTxsAZGAvjYDyMhxpyIkyCyUByKqRBGkyDaTAdpsMMmAkzYTakwxyYC3NhHsyH+fABLIQP4UNYDIthKWRABmTCMsiCLFgOZyEbVsBKWAWrYQ2shnWwHtbBRtgEG2ELbIFtsA0+hU9hJ+yE3bAb9sJe+Aw+g8/hc0iFHMiBg3AQDsEhOAyHIRdy4QgcgaNwFI7BMTgOx+EEnIRTcBJOw2k4A2fhHJyD83AeLsALCd8031tmQ6qQl2mpZT6ZT8bIGBkrY2WcjJMFZUEZkREZL+NlIVlIFpaFZVFZVCbIBFlClpAoUZIMZUlZUkZlVJaWpWWiTJRlZVnppJNJMklWkBVkRVlRVpK3y8ryDllFVpUdXXVZXdaQnVxNWUvWlrVlHVlX1pP1ZX3ZQDaQDWVD2Ug2ko1lY9lEPiibygEwBB6WlyfTQo6ElnIUtJKtZRvZVr4Jj8v2cgx0kB1lJ/mkHAdjoYts75LlM7KrnATd5HNyMjwve8ip0FO+KHvJ3rKPfEn2lR1cP9lfzoABcqCcDYPkYDlEDpXzoK68PLF68nWZKkfKUfINuRTelGPkW3KsHCfHy7flBDlRTpKT5RQ5VabJd+Q0+a6cLt+TM+RMOUvOlulyjpwr35fz5Hy5QH4gF8oP5SK5WC6RS2WG/EhmymUyS34sl8tPZLZcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK7/FTukDvlLrlb7pF75T75mdwvP5cH5BcyR34pD8q/yEPyK3lYfi1z5TfyiPxWHpXfyWPye3lc/iBPyJPylPxRnpY/yTPyrDwnf5bn5S/ygrwoL0kvhQIllVJaBSqfyq9iVAEVq65RcepaVVBdpyLqehWvblCF1I2qsCqiiqpiKkEVVyWUUaisIhWqkqqUiqqbVGl1s0pUZVRZVU45VV4lqVtUBXWrqqhuU5XU7aqyukNVUVVVNVVd3alqqLtUTVVL1VZ3qzqqrqqn6qt7VAN1r2qo7lON1P2qsXpANVEPqqbqIdVMPayaq0dUC/WoaqkeU61Ua9VGtVXt1OOqvXpCdVAdVSf1pOqsnlJd1NMqWT2juqpnVTf1nOqunlc91Auqp3pR9VK9VR91UV1SXvVT/VWKGqAGqlfUIDVYDVFD1TD1qhquXlMj1OsqVY1Uo9QbarR6U41Rb6mxapwar95WE9RENUlNVlPUVJWm3lHT1LtqunpPzVAz1Sw1W6WrOWrI3yot+Bfy3/0n+SN+ffZtarv6VO1QO9UutVvtUXvVPrVP7Vf71QF1QOWoHHVQHVSH1CF1WB1WuSpXHVFH1FF1VB1Tx9RxdVydUCfVz+pHdVr9pM6os+qs+lmdV+fVhb/9DIQGLbXSWgc6n86vY3QBHauv0XH6Wl1QX6cj+nodr2/QhfSNurAuoovqYjpBF9cltNGorSYd6pK6lI7qm3RpfbNO1GV0WV1OO11eJ+lb/u38P+qvnW6n2+v2uoPuoDvpTrqz7qy76C46WSfrrrqr7qa76e66u+6he+ieuqfupXvpPrqP7qv76n66n07RKXqgfkUP0oP1ED1UD9Ov6uF6uB6hR+hUnapH6VF6tB6tx+gxeqweq8fr8XqCnqAn6Ul6ip6i03Sanqan6el6up6hZ+hZepZO1+l6rp6r5+l5eoFeoBfqhXqRXqSX6CU6Q2foTJ2ps3SWXq6X62y9Qq/Qq/QqvUav0ev0Or1Bb9Cb9Ca9RW/R2Xq73q536B16l96l9+g9ep/ep/fr/fqAPqBzdI4+qA/qQ/qQPqwP61ydq4/oI/qoPqqP6WP6uD6uT+gT+pQ+pU/r0/qMPqPP6XP6vD6vL+gL+pK+dPmyL5CBDHSgg3xBviAmiAlig9ggLogLCgYFg0gQCeKD+KBQcGNQOCgSFA2KBQlB8aBEYAIMbEBBGJQMSgXR4KagdHBzkBiUCcoG5QIXlA+SgluCCsGtQcXgtqBScHtQObgjqBJUDaoF1YM7gxrBXUHNoFZQO7g7qBPUDeoF9YN7ggbBvUHD4L6gUXB/0Dh4IGgSPBg0DR4KmgUPB82DR4IWwaNBy+CxoFXQOmgTtA3a/an1vT9T5AnXz/Q3KWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm1Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNmnnHTDPvmunmPTPDzDSzzGyTbuaYueZ9M8/MNwvMB2ah+dAsMovNErPUZJiPTKZZZrLMx2a5+cRkmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtptPzQ6z0+wyu80es9fsM5+Z/eZzc8B8YXLMl+ag+Ys5ZL4yh83XJtd8Y46Yb81R8505Zr43x80P5oQ5aU6ZH81p85M5Y86ac+Znc978Yi6Yi+aS8Zcv7i+/vKNGjfkwH8ZgDMZiLMZhHBbEghjBCMZjPBbCQlgYC2NRLIoJmIAlsAReRkhYEktiFKNYGktjIiZiWSyLDh0mYRJWwApYEStiJayElbEyVsEqWA2r4Z14J96Fd2EtrIV3491YF+tifayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2xJbYClthG2yD7bAdtsf22AE7YCfshJ2xM3bBLpiMydgVu2I37IbdsTv2wB7YE3tiL+yFfbAP9sW+2A/7YQqm4EAciINwEA7BITgMh+FwHI4jcASmYiqOwlE4GkfjGByDY3Ecjse3cQJOxEk4GafgVEzDNJyG03A6TscZOANn4SxMx3Sci3NxHs7DBbgAF+JCXISLcAkuwQzMwEzMxCzMwuW4HLMxG1fiSlyNq3EtrsX1uB434kbcjJtxK27F7bgdd+AO3IW7cA/uwX24D/fjfjyABzAHc/AgHsRDeAgP42HMxVw8gkfwKB7FY3gMj+NxPIEn8BSewtN4Gs/gGTyH5/A8/oIX8CJeQo8xVopYe42Ns9fagvY6G2ML2N/GRW0xm2CL2xLW2MK2yD/EaK1NtGVsWVvOOlveJtlbfhdXsVVtNVvd3mlr2Ltszd/FDey9tqG9zzay99v69p5/iBvbB2wT+6htah+zzWxr29y2tS3so7alfcy2sq1tG9vWdrZP2S72aZtsn7Fd7bO/izPtMrvebrAb7Sa7335uz9mf7VH7nT1vf7H9bH87zL5qh9vX7Aj7uk21I38Xj7dv2wl2op1kJ9spdurv4ll2tk23c+xc+76dZ+f/Ls6wH9mFNssusovtErv01/hyT1n2Y7vcfmKz7Qq70q6yq+0au9au+49eV9ktdqvdZvfZz+wOu9PusrvtHrv31/jyeRywX9gc+6U9Yr+1h+xX9rA9ZnPtN7/Gl8/vmP3eHrc/2BP2pD1lf7Sn7U/2jD376/lfPvcf7UV7yXorCEiSIk0B5aP8FEMFKJauoTi6lgrSdRSh6ymebqBCdCMVpiJUlIpRAhWnEmQIyRJRSCWpFEXpJipNN1MilaGyVI4clackuoUq0K1UkW6jSnQ7VaY7qApVpWpUne6kGnQX1aRaVJvupjpUl+pRfbqHGtC91JDuo0Z0PzWmB6gJPUhN6SFqRg9Tc3qEWtCj1JIeo1bUmtpQW2pHj1N7eoI6UEfqRE9SZ3qKutDTlEzPUFd6lrrRc9Sdnqce9AL1pBepF/WmPvQS9aWXqR/1pxQaQAPpFRpEg2kIDaVh9CoNp9doBL1OqTSSRtEbNJrepDH0Fo2lcTSe3qYJNJEm0WSaQlMpjd6hafQuTaf3aAbNpFk0m9JpDs2l92kezacF9AEtpA9pES2mJbSUMugjyqRllEUf03L6hLJpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG2+lT2kE7aRftpj20l/bRZ7SfPqcD9AXl0Jd0kP5Ch+grOkxfUy59Q0foWzpK39Ex+p6O0w90gk7SKfqRTtNPdIbO0jn6mc7TL3SBLtIl8iRCCGWoQh0GYb4wfxgTFghjw2vCuPDasGB4XRgJrw/jwxvCQuGNYeGwSFg0LBYmhMXDEqEJMbQhhWFYMiwVRsObwtLhzWFiWCYsG5YLXVg+TApvCSuEt4YVw9vCSuHtYeXwjrBKWDV89P7q4Z1hjfCusGZYK6wd3h3WCeuG9cL64T1hg/DesGF4X9govD+sGD4QNgkfDJuGD4XNwofD5uEjYYvw0bBl+FjYKmwdtgnbhu3Cx8P24RNhh7Bj2Cl8MuwcPhV2CZ8Ok8Nnwq7hs394PCUcEA4MXwlfCb2/Ty2JLo1mRD+KZkaXRbOiH0eXRz+JZkdXRFdGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W9r59fOHDSKadd4PK5/C7GFXCx7hoX5651Bd11LuKud/HuBlfI3egKuyKuqCvmElxxV8IZh846cqEr6Uq5qLvJlXY3u0RXxpV15Zxz5V2Sa+vauXauvXvCdXAdXSf3pHvSPeWeck+7p90zrqt71nVzz7nu7nnXw73gXnAvul6ut+vjXnJ93cuun+vvUlyKG+gGukFukBvihrhhbpgb7oa7EW6ES3WpbpQb5Ua70W6MG+PGurFuvBvvJrgJbpKb5Ka4KS7Npblpbpqb7qa7GW6Gm+VmuXSX7ua6uW6em+cWuAVuYeJCt8gtckvcEpfhMlymy3RZLsstd8tdtst2K91Kt9qtdmvdWrferXcb3Ua32W12W91Wt91tdzvcDrfL7XJ73B63z+1z+91+d8AdcDkuxx10B90hd8gddl+7XPeNO+K+dUfdd+6Y+94ddz+4E+6kO+V+dKfdT+6MO+vOuZ/defeLu+AuukvOu7TIO5FpkXcj0yPvRWZEZkZmRWZH0iNzInMj70fmReZHFkQ+iCyMfBhZFFkcWRJZGsmIfBTJjCyLZEU+jiyPfBLJjqyIrIysiqyOrIl4X3xH6Ev6Uj7qb/Kl/c0+0ZfxZX0573x5n+Rv8RX8rb6iv81X8rf7yv4OX8VX9dX8Y76Vb+3b+La+nX/ct/dP+A6+o+/kn/Sd/VO+i3/aJ/tnfFf/rO/mn/Pd/fO+h3/B9/Qv+l6+t+/jX/J9/cu+n+/vU/wAP9C/4gf5wX6IH+qH+Vf9cP+aH+Ff96l+pB/l3/Cj/Zt+jH/Lj/Xj/Hj/tp/gJ/pJfrKf4qf6NP+On+bf9dP9e36Gn+ln+dk+3c/xc/37fp6f7xf4D/xC/6Ff5Bf7JX6pz/Af+Uy/zGf5j/1y/4nP9iv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/ef+h1+p9/ld/s9fq/f5z/z+/3n/oD/wuf4L/1B/xd/yH/lD/uvfa7/xh/x3/qj/jt/zH/vj/sf/Al/0p/yP/rT/id/xp/15/zP/rz/xV/wF/0l/p81xhhjjLF/ifqD4wP+yffk39ZlA4UQ1+4slvufa24u/Nf9YJnQOSKEeKZ/z4f/vurUSdn698dmKxGUWiyEiFzJzyeuxCtEJ/GUSBYdRYV/2t9g2fs8/b5+Sspv6kdvFyL2Nzkx4kp8pf6t/0X9x58cn1k5PBf/39RfLERiqSs5BcSV+Er9iv9F/SLt/6D/Al+lCdHhNzlx4kp8pX6SeEI8K5L/4ZGMMcYYY4wxxthfDZbVuv/R/fPl+/MEfSUnv7gS/9H9OWOMMcYYY4wxxq6+53v3efrx5OSO3XnDG97w5j82V/svE2OMMcYYY+zPduWi/2p3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5V3/Gx8ndrXPkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLva/l8AAAD//zG6PD0=") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05002cbd7000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a003400020202020202000008004b000104000008004a00"], 0x38}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r5, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x81, 0x34}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r9 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r9, &(0x7f0000000fc0)=""/224, 0xe0) 22.305993592s ago: executing program 6 (id=305): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) sched_setattr(0x0, &(0x7f0000000280)={0x73, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xffffffff}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r5, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r4, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) lseek(r2, 0x851, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 22.177373415s ago: executing program 6 (id=307): syz_emit_ethernet(0x239, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x203, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x54ac, 0x0, 0xfffffffd, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x3, 0x1, '\x00'/12}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x3, 0x19, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac"}]}}}}}}, 0x0) 22.092442457s ago: executing program 35 (id=307): syz_emit_ethernet(0x239, &(0x7f0000000780)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x203, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x54ac, 0x0, 0xfffffffd, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x3, 0x1, '\x00'/12}, {0x1f, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x3, 0x19, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac"}]}}}}}}, 0x0) 16.759654093s ago: executing program 36 (id=245): socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) (async) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) accept4$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x0, 0x80800) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10045884}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0xfffffeff, 0x4, 0x1c51, 0xffffffffffffffff, 0xfd, '\x00', r3, r4, 0x3, 0x3, 0x0, 0x7}, 0x50) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.944335913s ago: executing program 9 (id=414): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="1c0012800e00014069703665727370616e"], 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xd, &(0x7f0000000140)=[@dstype3={0x7, 0x9}], 0x2f) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000480)={'#! ', './file0'}, 0xb) setrlimit(0x1, &(0x7f0000000080)={0x3, 0x9}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x11, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 4.722884468s ago: executing program 9 (id=415): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x404, &(0x7f0000000080), 0x1, 0x43e, &(0x7f00000027c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143241, 0x4b) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x44080) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x169b43, 0xe6) 4.539722992s ago: executing program 9 (id=416): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3.609399335s ago: executing program 1 (id=434): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000040)={0x19, 0x6, {0x4, @usage=0xffffffffffffff86, 0x0, 0x2, 0x7, 0x58a3, 0x8, 0x0, 0x40, @struct={0x2, 0x3}, 0x80000001, 0x5, [0xfffffffffffeffff, 0x0, 0x6, 0x9, 0xffff, 0x4]}, {0x9, @usage=0x9d, 0x0, 0xfffffffffffffffa, 0x1, 0x3, 0x5, 0x7fff, 0x10, @usage, 0x9, 0x80000000, [0x100000000, 0x280, 0x81, 0x9, 0x48b7, 0xa7]}, {0x2, @usage=0x1, 0x0, 0xc, 0x7, 0x2, 0x2, 0xc, 0x42, @usage=0xffffffff, 0x9, 0x3, [0x7, 0x4, 0x0, 0xe4, 0x1000, 0x80000000]}, {0x9, 0xffffffffffffffff, 0x8}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000440)={0x1, 0x4, @start={r1, 0x1, "ecb51f8a58e74ec6dc7d358eba884f2e93141c160b29d678c2b81305d4407785c07ae315227bd75851f2c2d6eb916f93dfde6ac43211449295955fe386b83b42018962df199f903d2d68a260bb7cfab74c00c32b317a11fda99996c1ef02bd4b238c26e892e0a6ee3c9bb9a23366b9ae207ae9f7668d4274594ee374682fef65de4f5bf64535117a716489c8bf804fa713e0d05226bb9efe4f6c517ffd93ad0bab1efe4c4a3672657685f3c11ce07588cd54062455a305798e2d64b78d08e2b14f4aff8f77369ded78e03c991fbf2c8ef0f3c726a98c7f1e127b5b65a637b52702f772b468a08fc9c1914ccab421ec47975253020d6e268b1a0a295d19ff6c093c150a672a65174648ed99439f52e98111fb313210ecd468d374eb389fa69a5ed3c13e1dd9e805dcdd2a2a222494fe5d16977b2eb8e92211581e3a97a576b2d40084dbede8e7d695a4874e02c009010fbdc109df0a4681cc12e4c698303dfad348930507864bee2cef429c290365d320e3d60a2469f4502c8da8c71dba9a9f855476eebcaeeca40062cd074e54a8eb69c896f002eef044eaf996bfab13f53c0580fb9d12206c84c5e935bc008c4bb2a43175a2dfa26ca5cbab35c32ce74b9ffa28ff3c6414a245f63a024eb83e2b1c41988f7cb797dff64162374f050192bc2d8c28ee92456f01db2d663f949d09de75b36a45f94272a88cf2ce69112c7131d46f19336e21e0c1e7e300a8cb45885409f86ea5836a423b7822148f4bd033aaaace13ec0f446c25dec419c60fa44b03adffbf8fe4740108a11adc7d8403f25be5f543112b5c418029b290ebf8e6c9cb7ba7e68c3269bc6971fff87fde318d55edc5dc4c62c6590d5d4a47738120806c8ee865aa11315dc3b1e4034871697beb949ac7ec2ca0414da21f507fb3ae292e7f63bf3a20cef27e3996c1b08e0690eaecf22a7509a17f2d71529bf77b280eac89054327cf8d31692d5e7ff6ac024996d530575d34c0495ae16665d7f692a0fabf7512f7a2f256179e451e76b7e72e91fb91f485c1eda85968a5ecff0f85503ad00d5d7b154de46d51487ee63c274b148a93b1b78f2fb5d71f11e58f85f2a2f9ff28753e8811275a501548b736d3283aa454f7fd1cba0730b3585faeaf0afdc29a9d9539959bc48b375a207e6c46597305a47174f78504caca3267a631a6ef39f33748461e9983cd9b33dbed04f752d20791b24eb7988002b25f983b1e301b0f66e8f60e5c4f9ac2e1d2357f1227badf404f278284fa3739a1db0f256c0667d8012b15f6a416c253a6c159e7242a61fe2e033eac2207a58723c0e4c37097089fa8aefc0a8050224c3f55183328b922e1f51d0b4aae1a7c5e5870fba8fa11d66a7aab3a7bc7291075e88a2e82929132254e3564cfa58f9657796c4c6cca60d397599181f674b1319252ff65971304c256bacb", "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"}, [0xbb, 0x5, 0xfffffffffffffffe, 0x7, 0x3, 0x7fff, 0x1, 0x5, 0xfffffffffffffff8, 0x6c83, 0x9, 0x3e7, 0xa, 0x7, 0x3f1, 0xb4f903c, 0x1, 0x9, 0x7, 0x3, 0x8, 0x8, 0x4f949b65, 0x4c2, 0x0, 0xc, 0xfffffffffffffffc, 0x3, 0x100, 0x0, 0x10000, 0x6, 0x7, 0x2, 0xe, 0x60c, 0x2, 0x6, 0x10, 0x5, 0x6, 0x0, 0x6, 0x6, 0x3, 0xffffffffffffffff, 0x23a, 0x9, 0x9, 0x1be2, 0x2, 0x40, 0x3, 0x6, 0x4, 0x101, 0x0, 0x9, 0x2, 0x7, 0x7fff, 0x7, 0x7ff, 0x12]}) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x50, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x32}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008004}, 0x24000014) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x58, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001100)={0x444, 0x3f3, 0x200, 0x70bd2d, 0x25dfdbfb, {0x4, 0x2, 0x35, [0x8b, 0xce14, 0x6, 0x6, 0x1, 0x1, 0x6, 0x8, 0x39, 0x6, 0x5, 0x5, 0x8, 0x3, 0x5, 0x4, 0x0, 0x9, 0x5, 0x1ff, 0x1, 0x0, 0x7fffffff, 0xffff, 0x84e, 0x0, 0x1ff, 0x8, 0x8, 0x3, 0x3, 0x8, 0x7f, 0xbec, 0xcf0b, 0x5, 0x800, 0x5, 0x200, 0x6, 0x8, 0x7, 0x2, 0x5, 0x7, 0x7, 0x1, 0x0, 0x100, 0x1, 0x3cc5, 0xe, 0x9, 0x39, 0x0, 0x63c, 0x9, 0x645ab7a1, 0x1, 0x8, 0x4, 0xe2a3, 0x7, 0xb5], [0x3, 0x401, 0x0, 0x5, 0xf, 0x2, 0x5, 0xffffffff, 0x7, 0x1, 0x4, 0x9, 0x1, 0x3, 0x7ff, 0xc8, 0x80000000, 0x0, 0xfffff801, 0x8, 0x3, 0xffff, 0xcbc, 0x0, 0x5, 0xa, 0x1ff, 0xffffff00, 0xf, 0x4, 0x0, 0x4, 0xfff, 0x8, 0x0, 0x51f0, 0x3, 0x47, 0xfff, 0x4510, 0x5, 0x6, 0x5, 0x10, 0x0, 0x8, 0xc, 0x7, 0x10, 0x5, 0xf, 0x1, 0x6, 0x0, 0x4, 0x8, 0x0, 0xf, 0x7, 0x1000, 0x7f, 0x3000, 0x4, 0x3f80000], [0xb6, 0x3, 0x2, 0xd3ac, 0x10000, 0x3, 0xfffffff9, 0xc, 0x434, 0x7fffffff, 0xfe, 0x5, 0x0, 0xfffffff9, 0x6, 0x3, 0xff, 0xfffffffd, 0x6, 0x0, 0xfffffffb, 0x2, 0x2, 0xd, 0x81, 0x9, 0x2, 0xe, 0x45c2ca16, 0xfffffff7, 0x3, 0x0, 0x7, 0x32d, 0xffffffff, 0x3, 0x400, 0x4, 0x7, 0xed2d, 0x7, 0x2, 0x2, 0x4, 0x7a2, 0x4fc0, 0x7fff, 0x5, 0x4, 0x4, 0x7, 0x4fe8, 0x3ffc0, 0x8, 0x2, 0x1ff, 0x7fff, 0xffffffff, 0x3895, 0x6, 0x6, 0x8, 0xffffffff], [0x4, 0x3, 0x800, 0x8, 0x565e, 0x80000001, 0x9ac1, 0x3, 0x92a4, 0xff, 0x9, 0x6, 0x1, 0x1, 0x3, 0x10000, 0x5, 0x1, 0xfffffff9, 0x1, 0x4, 0xfff, 0x5, 0x43eb, 0x7f, 0x1, 0x1, 0x5, 0x4, 0xfffffff7, 0x0, 0xaa03, 0x7f, 0x0, 0x6, 0x7, 0x3, 0x7, 0x1, 0x2, 0x1000, 0x80000000, 0x4, 0x28c5, 0x8, 0x7, 0xd1, 0x1, 0x3800000, 0x7, 0x0, 0x2, 0x0, 0x81, 0xf, 0x9, 0x81, 0x96, 0x313, 0x8, 0x100, 0x400, 0x3, 0x2], 0x21, ['\x00', '', '/dev/ptmx\x00', '*\x00', '}\x00', '^#(]+/\\!!&\x99&]\'\\$(\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001640)=0x14, 0x80000) sendto$packet(r4, &(0x7f0000001680)="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", 0x1000, 0x4080, &(0x7f0000002680)={0x11, 0xf5, r3, 0x1, 0x2, 0x6, @multicast}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r7) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000002700)={r6, 0x5, 0xe1, 0x4}) bind$802154_raw(r8, &(0x7f0000002740)={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x14) (async) getpeername(r4, &(0x7f0000002780)=@generic, &(0x7f0000002800)=0x80) (async) sendto$packet(r8, &(0x7f0000002840)="08767271c37246b2b61cfbfd52caf2c48fc9467388e1aab20dfb0a6ff8146e28eab0013514935e527d6d98d01611aa6a8211d123bc4954bf3090678fbf7f5cbd7908264588bf4f0bbeb88c283d9c28e2045360da891a19b3ff6687f5c6e764aca738b6217603e02088", 0x69, 0x20008850, &(0x7f00000028c0)={0x11, 0x17, r3, 0x1, 0x3, 0x6, @multicast}, 0x14) (async) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000002900)=r8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002980)=@o_path={&(0x7f0000002940)='./file0\x00', r8, 0x4000, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x4, 0x1, &(0x7f00000029c0)=@raw=[@exit], &(0x7f0000002a00)='GPL\x00', 0x10001, 0x8f, &(0x7f0000002a40)=""/143, 0x40f00, 0x41, '\x00', r5, @fallback=0x6, r8, 0x8, &(0x7f0000002b00)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x7, &(0x7f0000002b40)=[r8, r8], &(0x7f0000002b80)=[{0x1, 0x4, 0x0, 0x6}, {0x4, 0x2, 0xb, 0x5}, {0x2, 0x1, 0x10, 0x4}, {0x5, 0x4, 0x8, 0xc}, {0x2, 0x5, 0xd, 0xc}, {0x1, 0x3, 0x9, 0x3}, {0x3, 0x2, 0x5, 0x9}]}, 0x94) ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000002cc0)={0x7, 0xfb, 0x5, 0x2, 0x3, 0x0, 0x8}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x1110080}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x28, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x80, 0x38}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) io_uring_register$IORING_REGISTER_PBUF_STATUS(r8, 0x1a, &(0x7f0000002e80)={0x9f7}, 0x1) (async) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000002ec0)={0xb, 0x200, 0x69, 0x0, 0x9, 0x40}) (async) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000002f00)={'raw\x00', 0x0, [0x2980, 0x8, 0xfff, 0xfe, 0xfe5]}, &(0x7f0000002f80)=0x54) getdents(r8, &(0x7f0000002fc0)=""/146, 0x92) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000003080), 0x2, 0x0) (async) ioctl$LOOP_SET_DIRECT_IO(r8, 0x4c08, 0xc58400000000) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) pwritev2(r10, &(0x7f0000004500)=[{&(0x7f00000030c0)="58cae2f471e6f2be6182c3c217b88390e67c7b078a858aaca2c7a48ad636bc0828dec51418096dba2b877703d2448eaba81ac592d4aebd5830d1a4f14c4791b934ee5078211c0bc648c9f8e3ec1f0d2478e7bc4d621f23e8d9d8ac244fdbee410859cceb9183006513c599d56d6a17faf0f32a3f420620fa543a48b4322ebdfd154ac7eaebad51060929241d0ea84601cf2fd03740dc31a963daac0fefe7dc2b091e2e989243a7f3c358c6700e68c5d561b2c4ccf6e2a9511288134a5bab38fabc7d37386625bbe668651fae9bc58362332837122934a3a1c365afb18cb4e8dbb000398560b0caa72419ba68a836b6ae9c2ef2b76547477665ca8dfb143ee9f0c578ede7ed5942f193f4e70470cefcdb67533c47e946461013b9b826319a8c6286bc72e822e1cdca7842186420ab294c165b93b99e36ce43f210d5be3ee9be954a65348eba65b3d2e81fdefe02a002a22281019a3a937145dd7675aa713718bcbab19420103a078adf605b63ebc83bb8c98276f8eea586f79aeb82ae50672448cdc7426b59bc885470bb5b772943c7f0b5231817d6f33177c2d23d0defe399377754b65abd24f218680824b015532625c6fc0ca6b830a899271e018aeb94d4e62a204a60ca243b457c23cd651ef672e50322f021e30d244a29dce561c3771aeb6172ac3bfb3bd6399d2dcbdf5f347e18f7b1e9df2184c420e1d0c32d0f09f95968037cffec3a64c114cee977ec3b8ba62818973f1ee05fa3838db677026c8e056681806df06a6c4163a6ddb374621061b839578123f4c432e14a86f8e5eae008ef3b6f267c2ce60b254985fa175da5fb7f1833ec20736b070aac82d377b23c5a6d057573802d51d2c7a1398c62f4c7ff3935b91fa69be7aa5284eb3199a7d163978f968e025b60b27e12ef55f3de13cc629259161a1615b92515ada7bebafcfcde059b3a34e1b97941bab5292dfc08111f34a2187ae00cccf1152d738c04952e7f93e79e29b895bc5ec0f36ff5038fc5da54608c67eb1e9080c5d7ff93dcf48730cb0cdbce35132d744dfaf4090979ea1a32a9ec172ce53914493cbac63b5f8737264a7b22c8788779a841d196d5de5b0c2dd072e1958b764928194423253647246051fd64d9c6c808a33c523c86cfc22e9e94aaa2940c2fa712586a675c3dc061f2bfb731ed9ce94b9bb22f2e9b997c36e1f2d46ec4a24bd6b3449938014e6b746d0021456264fefcf2b0f3a1738ea4aea94d5eb9c73e658c80c86a26ef574dbcab1edb0174665fec6ae80cddc2f4e8bf2a4935c5d19f52c254d12d3eb2735d329621147ccee8fdd80413af48c15d1f7de09fd5cda52697efb665276145b8c2c3b454b253816bec2c4c79183cc7bd5eb1f58cd643b0b02fa7e06e43d61a4b5c8c1cc0b949f03f8f4bdb3c00425bcca9aa48e2e2ceffadd6ffb15be9d8a341f03fd18d66100a454d4238fa520eed61268443cc02accb629fa57a332d666abb087c568e9a961ddb089a178d383a950a3a6a1481340b8824f0a4ee04ffc957713134dad98fe578cda95d73f2b79ee67534724bd1e03cf50e7eba0fc9c23828f5017fb3e1df0fd285b61abf2a31d5c3a876830cac1f01a405e78cb369b35f2f78f4252e173dc92608a10b69333ccc36501087132c41d0c5a747a97362cdf6bdcae3232e51c561acdcc49b474ee98be4adf27666824188e7d6f2a95bd78b62841ccb24f25320021f77ee392842c81b2944f1f77cd3fb4e3a2bbd70187e12c00d2b54ee47848e31a3622e4297356222e9e7adefe633dbcf5ea964a4f882fabb3f57abaf468317c38879ee91b5db88e5e0b56124e1e907461dd636636fab8656a31ce0ba6ce1f6bb4187c05f98ea2930f630955ddce3f585b5ad5bcd711621142e1c3a0576ef506a1eb6983d9ee30e0842418c63ddc7f1bccab2e2f3992eb9f2fe6dac5abcc7f4a9b57c8726fbe15f971684012f4f25c2759b49cedf34044e560b0bccd7d40a11f9c86c0e8bc806a6392ef2a692b9d8bad1d655b0b363d39b9909f7b20247ca5d2e6caef3e35ca29169903901c51603bf8904f7b377e0e086ead94f22607787c8a4ece6d3e45a4e79fef028ca7571510de74084036e029368b87277009d1657d470b59a182759245bd5b5f5ea7f377d4a60d0f6248313c474149647194410fab0a9b85b8269b8a8cabc195ed58b4e1b51bcea2068a4f6dc3ccd9ea2791579943d89b10a0382dc88e74e1402cdd6464225a76b712fa1cedcc0437c52bdb21e962ce6c444f8370a71597de1d8c683e859be5017f5b64a9887bbb24a32805df144d8fb0118f51aedec3ca65325f2f027bf73bf0c5422025a2848c9521f0158bdeabcdf51a3e3e56c6c3fe3604575e05909159a1db811fd8fc7cffdab6026816c48be339f80b323a51a72810f3e69fed32807533cea6802ac1edbb95e91b9b4a6f612910ebb1272a211b54a9250d22e0c96886caad472874e0daea977e54df98caf1b33f0e18f6da23f5f9f0983ff14c957279a17fd448c89261b18a0991819d0fcdff63d95926cd1fc5058c289bd7fc752829880ab04de41430a4fd8e483c8de6f1e7034d85991e7bff86512909af5e974e277b46f7b1c00ef49f57968f0155ad474c9099ab3c6d730ffaa2a2942a3e6f9668a9029e8f0ba052d98d58c870c06ff1d46c905866b25216d9b67ab576247f88bf6d2377c64c67443e0c334df5ed11e7ab447cdb4baec83593efae87dde3bb370718dad7155fc8e806eff9b4becd0aa733350b6f5afe09dcf123f38c403495e0489e582734d525f0d70efbc9826c5c8d1bcd0c41064e30bb5f13e60c109da696baedbdd9a4677f068c1565f27a7381d8f51d9b95f3a8df447dd9b1e7807d24781f189a195f3413dd86996bc8546df278694490ae0a02e1b90ab52a25e2f1c8f85e3eef00d724c58e729a7e4e935068ff76f7e53905e2cba41fb77a259f51aeb575ff438475b2450776bdc132db04dbde59812cd96d4405cc5feea63e82892a43545bf2e1dc78b4b4595f2436e529e97a31ee61293a19984c146f7aa17d62857bc076732aa7c4862ee0c3ee1c0d0f684813c00d6b958ecaec257e3900a25a0f7c5e626766e8397adc6d591b79b9b74679a35b685e47bc6550b6146c61e33458ffa8b2906008e379b4f1944bf95b548225a06a2da9d61398e056195e1acc0e63987de11f2c66b8d2bd508103fb87ff39649bd52bfc207b2b6d4c907cb3f81b14eb7ad09eab6ef015cf2f23dc1a0e450917a21713cc53b0eb3bee8a700ba596ee67ac37eb20d8dbf09d5ef3d0b5605252f21949e0163b08402a27a797a13f6cb8ffca244f0dbde6cda64b9e0c59ce6a4351f484183a5e99a84ef81eedc27f7087558fc95565920fb5c756597037db825719b72db519aeec3dba4071fb0c336a5202f23c9eaf0d5e4a3d4992a7a72f64547c7f0e0c0c3913b41c8019cd8d6a945d9fc36ac7bf2ba4835a43bc0d3a665fa14c0cf80da3d46b49758f1ffd35a8295daf22a5e9f769e80f3eee0eecdd3253363d6c390af7226afa437b7c59c21ddadd3182c3d1e3f64d57d6fc995753f7ede60eecfabc5adb2eee66acff18d1df4336408d66ac314bf953324d36452b8102b25810864ff9a968cd16e312a01c5e943551a5fa3e589179a1b24aea44027802140a34b878f16f19974fb134fff15306f91ddfd713947daa1edc4f8d9a0224c135be0d55ba42b68d3b3b8ffd758cd6e2d2526a8e9d677e62773ed863d7422071e8f09a10776f7883b8b08c708f6329948aa558962e8c4e747aa044cec08e5cac69c90ad7759491d90269f4c3c846f8ce29ca6bc28281ce8e1b3aca514ca8824672a710e04425033170d348f9fa9fc38092f5a7ffd9da1c891f92d4a346e26f81938f9d83df2401023423ae58a06a3fc7cf06b3df63b2bbb889eb17598866c18622f101903f7772c1298d45259a09ae075a44714451948455fb4bbfb878c29925ccd99be5c4e3fdb15a0956a998286fe9f25b0ab0f648dd132dcebb3f1c0b60d0b9d5bbd3a4146c2a6a07cba8f51000db9a91eb43d4efaa41c6e7c0c53087e08c7b84e2fbc3440fa9075b6cbc41821d39acb09eac012932cc5c5a6f5c0773d1dffa74798e4af12859ae65c9486f7cd90ed995288531403b692107a45d35ffc58c96a3ff48ac59949eae9247ec600ffb05ac23ed59e5238b5f8f4df8011d86b14c201e4e83fce12b76cd1349b813cc1919abf2606655e634b8f8c73cc921c6221aaa5a135d1988c64a336014cfaf8a4cb19485cc3c32ec724b4f7db6560fdfde94344e04cfdbacc67fc519f4d4d6f2fb1f15e66bc95f5b2bf61b7d39526ff0594f43673c7ee825ffcdcb8a5bbcee20ebe6d4ff8f75dd3edc0ce038084386da8ba6175e9415a818b3d766993b04f139e64e124c998dc7aa51c3f1569122fcfd0df6ea778c97aea00e88a873e6e9a71fdb26dcf8fb8f3d0f3d62eb5491b1d7d294df81cd46de95aa920fe34f6d1f6866180721a07ea7d6dc6ada0bf9400d4ae77efd191e4da176a059c2a8d24ca45e8906be9a767b02dd2a03b36aee2fe1fe94d120c3b989a79c9ba0b69b0f3b7d8df469939e9aacebeb7b5392b5a57710fa343e020a3612d7d5ce69fd798547bc2c5b6aaccff2e031e957fd30fa882ed55dfc26b67aaf6d31c0d4b574a534317e9d08adf86ea0009741aa2ae1ba9f6b418d69397dc626d6affe528c9cd9646733e22380fc44fb570648f4bf1f60902da29f4db28f7662735ea9de3100209e90b8adc6925aacdb2df7c863d14db27de2b36bc2b0093f13dcc8f54a6b8b41467c3b3caaf4683b5bbbee3c32f609d4682c6fac3035980068eec0733ab0976c320e39ea47bc872a9c7e3d2772bdbfce9e7e891ad936d1dcdd8422cc4306c4d1d7a2452d5bb3198ef462228110f220ba79977d3c3f1572437d724e56ecd31b1ed79a71741bde8de152558ac0df680d10fa6b42e16fc464181818e7dd13c4f1f87eede69dd34317a732bb542801278af52dd27dabe1d80150bf4b9c9b7df6abd342649ee54901c2da67f952655c2444c2ad355ef55e44ce16bd240d786d20f7f4f4577f1d9672d570369d2c96230b8554062d990a043e3b465848709f1f4ef27f755fdd3cec0f571532aeb63b1c29808dd6e490987c5ac698a19b09949ee3a657b752b9a666e1c5efaadd2c24114086f88a98ec3b85ea47cf77caa4143c00b18430251a8098270a878feebbff4f37a0cf7475950465edd3e5cea22655db4a2458f9937fb30117491e766b4bdd1e07082b730a9f323b529d811b9c00c29fa99a94a1533e8d1765e27b3efcaf4d844fbe6fa089724408eb504b2820fb3552ef4b4c8e09c3a90976f61496cfffc447edd0fb488c38ce1cc05c25e4e4320471d3d05d41c23106b2a07277dbc218c69f316189f3245323b679c57c640f95ee1612bf43fe1ac3436ee1e368c3991f78dc0fd69d7c1541b35ba87d1b830e62eaf010750aabc249e474b10e3e269a21d89c40397aae5abdd9639279f672746f8af090deb4bf5581993674b966a948dcb3cf709e35c308d012efd4a7fcc65acb7eb0be19eb5fbe8b0fcc722f33268e13a8c35b6151b1e2b46833279d7d0aee889a305f683f603d235b96b08aaf03b67a8a27190c923bbd0f42630a566cfb4f50963899484ea7be373a36938df94d09c833c8a97e02c1010f6ec2af665b59ff7fd9fe2babf06dda63ba009005fcc955586df312ade9cb0724acefdb53d3a8b98c32cb1ccfb89d8db98471265f4098077552f6929e49f4cf0e602c2", 0x1000}, {&(0x7f00000040c0)="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", 0xfe}, {&(0x7f00000041c0)="8da04fc81373fad234c15d61ea022ec9957ad454819e0b296b8914a528f8348cd243344915fb1c372da15aa1df790bb717fbe012ec930d1b420cfe55299248418eba847e2e857651e2020ec3efddd7f8289c4d120b216904260e670a0b2d0e185b2ffde7e895196bd61b9c1c16d5f0f9a3f9d49ab54e1b7def5621f02e0d7ecfcdde10f0f50ade252dd3d404c35ef11ad6fa973114079216f687332e180bf448b4c1a4582758c94a5aa0c147fc3f27516c12a79fc0333ccc518434adc25b05c0596242fe0aae191729", 0xc9}, {&(0x7f00000042c0)="3b18983d789e15fa5dbff90ec43c4cf234a41d4b2a03f0e79de5b5d995e757a2283898b0969d24cb4b9a7548c8d2d301a95f5199f8acf338211efe10a6706786507e474a4dca2be7a93f830bc921ec53c69fa225c7355c8f14887cb1650b921505f48d8912b1745f28b1ac8e81fc9f10de1904a37b44adac0d756ce8b48a1e64493213bf96bd23ad63cdd26738e4c55d02ee7e78888237f2159d68b38a1531acbc884cfc1fb091302282892a2e0899cbbbcef0a85cd7d6b41f0d0446af3ebd55eb2b7cf1360e06c24924dc7609ea9b34209afb2375d3ed1969d2fa6616643a9afc370842e570b5f990e6faaef758800afe65ea9366", 0xf5}, {&(0x7f00000043c0)="f9e9075d33bae189fbaafa33d04206a3210b3da59f1d1bdf7db4d10910a61a", 0x1f}, {&(0x7f0000004400)="d8eb08cbb4f0bf366030e6753ffdbb9025c232904d2c36ecd96e612d7afcd78ae9cc7f2a1562a1bd01c8d01518ec5650963dac79b84db6acbd592a9112cec28bbd3c25427ec0c229400211b84f4b411be8aa9eff89da724ee3883c4e33eb19a0855831dd3e2ead81084e0c1fe1e03039a838e602fc08dbf7fca160e58637215da006299545b05f30b714f35cd6b89021c7d43c9fbb59a4f1141f3f54faa62c3ebab7cb89a97845c68607a33ce9c2482c294752ae94e6e7346c0aabbb8c3447c076bf7918ae8a12f8", 0xc8}], 0x6, 0xbf, 0x3336522a, 0x11) 3.462710908s ago: executing program 1 (id=436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1000, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x2800000, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noauto_da_alloc}, {@grpid}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x131400, 0x2c) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000801, 0x0, &(0x7f0000000200)={0xf, 0xe, 0x5, 0x3b47, 0x100000008, 0x5, 0x8000000000000001, 0x3817712c, 0x1}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003000000e27f00000100000001010000", @ANYRES32, @ANYBLOB="0820001766a0f653dc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) 3.462217388s ago: executing program 4 (id=437): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x1c0, 0x290, 0xfeffffff, 0x98, 0x0, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x3}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'team_slave_1\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x28}, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {0xff}, {}, 0x6, 0x0, 0x2}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@nat={'nat\x00', 0x670, 0x5, 0x400, 0x1c0, 0x290, 0xfeffffff, 0x98, 0x0, 0x368, 0x368, 0xffffffff, 0x368, 0x368, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3]}}}, @common=@set={{0x40}, {{0x0, [], 0x0, 0x3}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'team_slave_1\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x28}, @empty, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {0xff}, {}, 0x6, 0x0, 0x2}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) (async) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xe8, 0x0, 0x9, [{{0xfffffffffffffffc, 0x1, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x9, 0x80000000000000ff, 0x2, 0x0, 0x2, 0x3f, 0x3, 0x8000, 0x9, r3, r4, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x3e, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x12\x00\xf39\xfc\xd8m\x02W\x89\x85Z\xf0\xd0)\xb2\xf6:?m \xa7\xeb\x90\xc6\xde\xdfu\xadx\xc1\xc2\x06\x00\x00\x00\x00_\x86\xa7\xd4\x9b.\x00+\x13;\b\x00\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents(r5, &(0x7f0000000340)=""/151, 0x97) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402515a1a440000102030109025c05020100c0000904000001020d0000052406000105240000000d240f010000000000feffffff05241a000010"], 0x0) 1.883124485s ago: executing program 3 (id=447): r0 = syz_io_uring_setup(0x7fb, &(0x7f0000000c00)={0x0, 0x5d90, 0x840, 0x1, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0xfffd) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x4, 0xa75, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4d}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x104) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000180)={0x25, 0x0, 0x1f, 0x1, 0x0, r5, 0x0, 0x0, 0xa00, 0x0, 0x0, r5}]) clock_adjtime(0x4, 0x0) mkdirat(r5, &(0x7f0000000100)='./bus\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000880)="18b79fa4517f0dc2112d585c30abbed51e90e178bcc8c44c252c6cbf0313d84927faa8249e0141c3a2ae8706a6a4c51dadfa43de22bc2434c26fb0c6a871bc3231a2cf9081b2240e8b610ece95232984869df8e2fd168b018677c171b1c01ae0c61b6595f8cd3e60021c471b832cae2bb851bfb0", &(0x7f0000000900)="cbbf707fe8835a83ec71fa91a9f0d764220c0ee15cdda965406d6626626130fa114cc80070c73949dffd87e8be0e6cb16210751b0c371db95144ce5f39ea158df6db445283e0c2bb63b31db3254c68a222dc4e6c46cab9896658b8311ffc181acddf2703001548985f38121e698354fc43aafbe3a605b9ed72ab4d4cc286f729d9a619d6e75dd392bb0c65c2d5b22bae3b4968afc484f7e10677927a"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x8, 0xffff2d37, 0xffffff01, 0x6, 0x3b, 0x0, 0x7, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x4, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x2000005, 0x3e, 0x8c, 0x8, 0xffff, 0x0, 0x5, 0x100, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xb, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c8, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x4, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0x10000b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xbe7, 0xf, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x6, 0x93a, 0x5, 0xf, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0x2, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0xb, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x4, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x4, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0x82307202, &(0x7f00000009c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000240), 0x100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) fremovexattr(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="29e0"]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d5"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="862e6473f3930a103f00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da52deda337f8af0366be93702298a20b912b44091a10ec9d76ab09f3b44ee95c1de86a9fee94df8dc49001ce17774fea95cd2cbd5e662f1ea9d73351feabf5ef6f6bba0853c240188f92c5f4ae3c27038150a", &(0x7f0000000100), 0x1003, r8}, 0x38) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x2000000000000043, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000030002000000000000000000850000004100000095", @ANYRES64, @ANYRES64=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.754824918s ago: executing program 4 (id=448): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r4, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) lseek(r1, 0x851, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 1.754177378s ago: executing program 3 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x185240, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x10000) close(r0) fstatfs(r0, &(0x7f0000000240)=""/64) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe8, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000010}, 0x88c0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x208018}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x5, 0x5, 0xa, 0x9, {0x4e24, 0x4e21, [0x31, 0x0, 0x2bf0, 0x80000001], [0x0, 0x13e, 0x1, 0x3], 0x0, [0x77, 0xfffffff9]}, 0x6, 0xfffffff8}}, 0x4c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r7 = accept4$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs, &(0x7f0000000640)=0x6e, 0x40000) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r7, 0x40285881, &(0x7f00000006c0)={r8, 0x0, 0x9, 0x99, 0x7, 0x2}) r9 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece) ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r9, 0x54a6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r4, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x73}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x408c1) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4011}, 0x40080) mount$fuseblk(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x10000, &(0x7f0000000a00)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0xfff}}, {@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x80000001}}, {@default_permissions}, {@blksize}, {@default_permissions}], [{@dont_hash}]}}) nanosleep(&(0x7f0000000b80), &(0x7f0000000bc0)) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r4, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9d9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ba}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000ec0)={@empty, @multicast2, 0x0}, &(0x7f0000000f00)=0xc) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000fc0)={0x1b, 0x0, 0x0, 0xfffffff8, 0x0, r9, 0x7, '\x00', 0x0, r9, 0x2, 0x2, 0x1}, 0x50) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, @alu={0x4, 0x0, 0x9, 0xa, 0x1, 0x8, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000dc0)='syzkaller\x00', 0x3, 0xa5, &(0x7f0000000e00)=""/165, 0x40f00, 0x8, '\x00', r11, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0xe, 0x5, 0xffffff5c}, 0x10, 0x2fc, r3, 0x0, &(0x7f0000001040)=[r9, r9, r9, r12, r9], 0x0, 0x10, 0x800}, 0x94) io_uring_enter(r12, 0x667, 0xc3d8, 0x4, &(0x7f0000001140)={[0xff]}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x80, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r13, 0xc0385868, &(0x7f00000012c0)={r3, &(0x7f00000011c0)='\x93@\xfe-#}\x00', 0x0, &(0x7f0000001200)={@_ha_fsid={[0x3, 0x1a]}, {0x7, 0x5, 0x564, 0x9}}, 0x10, &(0x7f0000001240), &(0x7f0000001280)=0x2}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x38, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x1d}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe0}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.732207119s ago: executing program 3 (id=451): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x5, 0x40) r2 = syz_pidfd_open(r0, 0x0) r3 = syz_io_uring_setup(0x2aae, &(0x7f0000000340)={0x0, 0xebbf, 0x10000, 0x2, 0x39c}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000540)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000800)=[{r1, 0x81a0}, {r2, 0x4}, {r3, 0xe001}, {r4, 0x148}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x80}, {}, {0xffffffffffffffff, 0x1002}, {}], 0x9, &(0x7f0000000700), &(0x7f0000000780)={[0x1]}, 0x8) 1.70292121s ago: executing program 3 (id=452): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000006c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000100)='map_files\x00') fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x8000db, &(0x7f0000000540)=ANY=[], 0x0, 0x1060f, &(0x7f0000013b40)="$eJzs3EtvW0UUAOCx0/RFKRFiwa5XQkiJVFt1+hDsCrQCJFJFPBaswLEdy61fip3EFKEG1ohl/wis2LPnT7CrWCCxKyrynQlK+lBT6ry/T7o+d8Zzj89YVaPjazkAx9ZM9vdfhXA+nAkhTIUQzoWQnxfSkbsew5shhAshhOKWo5Dm/5s4GUI4Gx7dOz9OHnMW0lPf3d9YeDhaOJuyXtyfHQOTUn2Ja98OIXT68Xy9E2OvGePtNF9da+Wxc2UtxfhE504a92JcbyzlGdarm+tiZZebcX2vvzoYx+V2tTaOzdZyPt/vxhccrDU38+QX3K6u5ON6Y2mz3I38urtxMErx7qAQn0n/Wfa/ydOH4XAzxtdpjBpxP/07eax1h2m+F+urN0bjuJbiIE6HWq9dz+tY+r/v8sH3Sau7OsrWGiuDVq+bXS1X3ilXrpUqK716Y9i4Uqp26teuZLPN9nhZadiodq43e71mu1Gu9Tpz2WyzVitVKtnsjcZSq9rNKpXy5fKl0tW5dHYx+/DWF1m7ns2O4/ut7uqw1R5ky72VLF4xl82XL787l71VyT5bWMwWP715c2Hx869ufHnrvYWPP0iLnigrm52/ND9fqlwqzVfmXnDD/xzI/Y//RO/N/h9z+uUu57gr7GzZqd2uA+AQyfv/M2HS/X8Iz+7/v/31/p83fqj+rv+HY+ww9f+t1JA/2f/HPr5fT/n0/y/sgPS/e9f/P3j+/r/fsv9iOCD7P5EK1v9zkOyw/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oj5Y/rnj/KTmTh+Jc2/mqZeT+NCCKEYQnj0FFPh5LacUynP9DPWTz9Ww2+FkGcYv8apdJwNIVxPx8PXnl77iYm+EwAAAHA0/bJx4afYrceHmf0uiF1V2D6MH9oUz309wfTTMw8mlK04fnhjQsnyf98nwmhC2fIPsE5PKFn6UOzehNLtyNS2cHpLKMRQ3MtqAACAvbG9E3BHHQAA4Oj6cb8LYPJ2cv8uvx2cvoufvsB/KoZ0Q/DMthEAAABwCBX2uwAAAABg1+X9/2H+/T8AAADg+eLv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8y8795CwNhHEAfttSBf9EYlyaeBV3cAyP4NKdhAN4CY6AV/ACnAF3HsFQQ1siJTYSmZZInidpp9P2+31vCZuZIQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYEjfy+3y6+rdl57LxbU5h6pHGX1XOtI9EQAAAHBpX26X9cG86T9vz79sT71u+1lE5BF/HMwX8aSTWbQ5Zc/95UUN3yLqhOP/eNpuzyLifbv9fDX0pwAAAACPa7feLNol/no3v3dBDOpzt9tM2uQvPiSKzyKinP9IlJYfd28ShdXf70l8SpRWT2BNE4U1U26TVGlXKTrN9KzJmiYftRwAAGAU3ZHAuKMQAAAAxvTx7Hh1xzoYWRanpczTWnD9y/vfC4KzTg8AAAD4D2X3LgAAAAC40eyvd9Tjf+//AwAAgMfWvP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAIe3L7XK33ixuzTlU/+DttPnjqqoSPAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Iv9OccBEAZiALjhpkP5/2ORpUBHTTNTWXZSLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADflie0qtreek5zjX1KWFP38agl7JkSjswJZz70ny4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNmflxQIgSCIgjnjfyd9/8NKgp5BhAhoeFRRiwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7td7/8n5gaZ5K508bS8UiydtXYumrsPWgcPRhv/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNi5l9e4qjAA4N+dVx8iHaME6saKSkUxydQXgpsuhOBCcCUuh3RSRqcqbRBbsjAbF4L/gRvddiMEBKmL/gVduLLLuqmgWVRx4Spy7sxtbx7qRJs7k/T3g3PPlzsnc75zAyHfPXcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGHjbJwq4no6tPNj1EbnfryzupT6m9v65Hb36snUUpxVnPdB00jXaHbSWQAAAHDY1Yv6PiJuNdcXU19r5/X/M8WYVPOvPjyMi3p+e91f9EXtn9q1779+++5E7eE8zYj4tj3oLVS2wql2fXNzc6yBJ/7uhfa9ML+XMLxDU89/bLU31x7daOZXPfvixo03Wnl45H4kDgD8P3NFP7eW98vZp/nfR8v9Qa8z0cwAOLAa//5yMaSo/+vtCvICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmLCNtXi+iLOIeLxxL05u3lld2q2/3b16smgn3n3ss/J7prdoRsRyf9A7WuFaptnTY467dPnK+93BoHdxT8ET/+m7BA9e8PF0pCHYc7DPv6AAADhUmqOW6vpbzfXFdC6bidj8amv9f7oUx5j1//X+tdPlucr1f6eyFU63cev/+ZULH81funzlhf6F7vne+d4HZzovdV5deO3lzivz6XouDI/7nC0AAAAHVSuyaG2r/2szO/f/j5fiGLP+/+Hnd34pz1WP+PUh9f8We9//3+eEAAAAHmCPnPrjt2yX81mrFZ90V1YudobHu1+fGR4nkOo/O7bz1JFRK9f/9ZkJ5AYAAABUbmMt27L/f64Ux5j7/9899+eX5fesj25BLPcHvbmlDwfnqlvO1Nq5/9/edVwVHyeuYLkAAABMyLFRK+//N/Pn/2tPpvj3iKhFxLNPDceP/g3gWPX/643Pz5bnqpc+//9itcucOrXZ4fUY5/n/fOxsRGO2gsQAAAA4lI6OWqr/f2quL773zfG3Wp7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgL/bn3jZhIIzj8OtLosRtMkJ6i48ZaKgQrABISJY8AwOwEA0VrcUisAJIcK7pDMXzNP9fccW9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNu7Pn3xERFFpC5TpOn27/wZEV+Rdm07+b5nsb+cmp9HLg7HWc7fmP+XEVFG0cc5AAC9q7rNsd7Uq0HeYd5R3nHeqmzq5Ss/DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGMHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgrAAAAP//bxhdCg==") getdents64(r6, 0x0, 0x22) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x408, &(0x7f0000000580)=ANY=[], 0x5, 0x5516, &(0x7f0000000e40)="$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") socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1a}]}}]}, 0x3c}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1ab341, 0x5) 1.498764774s ago: executing program 8 (id=453): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) setrlimit(0x8, &(0x7f0000000000)={0x9, 0x7}) mlock(&(0x7f0000003000/0x2000)=nil, 0x2000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002ec0)=[{{&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)=""/69}, {&(0x7f0000000580)=""/246}, {&(0x7f0000002fc0)=""/236}, {&(0x7f0000000780)=""/8}, {&(0x7f0000000180)=""/12}], 0x0, &(0x7f0000000900)=""/86}, 0x400}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000980)=""/181}, {&(0x7f0000000a40)=""/4096}]}, 0x80}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001a80)=""/167}, {&(0x7f0000001b40)=""/122}, {&(0x7f0000001bc0)=""/221}], 0x0, &(0x7f0000001d00)=""/167}, 0x4}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000001dc0)=""/4096}], 0x0, &(0x7f0000002e00)=""/190}, 0x5}], 0x1, 0x2020, 0x0) 1.498023794s ago: executing program 8 (id=454): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (fail_nth: 22) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 1.492231604s ago: executing program 9 (id=455): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x7fe2, 0x1, 0x101, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) (fail_nth: 7) 1.448751126s ago: executing program 9 (id=456): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0x1000006, 0x800) io_setup(0x3ff, &(0x7f0000000500)=0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000140)={0x0, r4}) io_submit(r5, 0x2, &(0x7f0000000440)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x200, r4, 0x0, 0x0, 0x4, 0x0, 0x1, r4}]) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000810) recvmmsg(r6, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1.361858738s ago: executing program 1 (id=457): syz_read_part_table(0x1050, &(0x7f0000001880)="$eJzsz7EJAjEYBeDHnUgKUUt3cQXbqwRb17BzFxdzCeUk8VAcQET4viJ5f3gE/vBTm2RcvccuKS309WjxPL0ny1etJKfudjx8fNU6ZXuvzXWyr+NuHEsynxr1vg7PvEg/y3D56nIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CceAQAA//+EiQqF") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1'}, 0xb) r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r3 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x1) write(r3, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) readlinkat(r2, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) setsockopt$inet6_group_source_req(r1, 0x29, 0x15, &(0x7f0000000680)={0x7429, {{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x7e2}}, {{0xa, 0x4e24, 0x4, @local, 0xfffffffc}}}, 0x108) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x121042, 0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 1.024950276s ago: executing program 8 (id=458): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) socket(0x2, 0x3, 0x6) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x15) (async) setuid(0xee00) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a040, 0x0) (async) sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (async) 937.765078ms ago: executing program 9 (id=459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x41aa00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xeeee8000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x5, 0x0, 0x7000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da07000000000001090224"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 913.947938ms ago: executing program 4 (id=460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x10200, 0x3, 0x3000, 0x1000, &(0x7f000000d000/0x1000)=nil}) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000180)={&(0x7f0000001b00), 0x0, 0x8000000000000009, 0x0, 0x3a4, 0x0, 0x5, 0x7, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 858.2417ms ago: executing program 4 (id=461): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061119f0000000000850000001a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061119f0000000000850000001a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 858.11984ms ago: executing program 8 (id=462): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_open_dev$usbmon(&(0x7f0000000300), 0x5, 0x40) r2 = syz_pidfd_open(r0, 0x0) r3 = syz_io_uring_setup(0x2aae, &(0x7f0000000340)={0x0, 0xebbf, 0x10000, 0x2, 0x39c}, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) ppoll(&(0x7f0000000800)=[{r1, 0x81a0}, {r2, 0x4}, {r3, 0xe001}, {0xffffffffffffffff, 0x148}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x80}, {}, {0xffffffffffffffff, 0x1002}, {}], 0x9, &(0x7f0000000700), &(0x7f0000000780)={[0x1]}, 0x8) 857.88423ms ago: executing program 4 (id=463): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xa4) mount$bpf(0x0, 0x0, 0x0, 0x5805040, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=00']) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xc, 0xc012, r0, 0xfee70000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getgroups(0x7, &(0x7f00000000c0)=[0xee00, 0x0, 0xee01, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00]) r4 = getegid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x1, r2}, {0x8, 0x0, r3}, {0x8, 0x0, r4}, {0x8, 0x2, r5}, {0x8, 0x6, r6}, {0x8, 0x1, r7}, {0x8, 0x5, r7}, {0x8, 0x1, r3}, {0x8, 0x4}], {0x10, 0x3}, {0x20, 0x2}}, 0x6c, 0x1) setreuid(0xffffffffffffffff, 0xee01) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r8, 0x0, 0x0) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r8, 0x0, 0xd, 0x0, 0x0) recvmmsg(r8, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f0000000000)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 856.63153ms ago: executing program 4 (id=464): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setresgid(0xee00, 0x0, 0xee00) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = dup2(r1, r1) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x92, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201500200000040410e59414000010203010902800003010740090904000000010100000a24010f002a0002010209240304e0000403050724070604000209240603010104001307240701050004"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo\x00') openat(r0, &(0x7f0000000000)='./file0\x00', 0x10402, 0x190) fchdir(r4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000100)={0x9, {"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", 0x1000}}, 0x1006) sendmmsg$unix(r3, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {{&(0x7f0000000200)=@abs={0x1, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x2, 0x4000800) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) 785.432871ms ago: executing program 8 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000c8915986280012800e00010069703665727370616e0000001400028008000400000000200600020030"], 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f00000003c0)=ANY=[], 0x21, 0x1537, &(0x7f00000035c0)="$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") 737.978673ms ago: executing program 8 (id=466): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 533.492297ms ago: executing program 1 (id=467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4c80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0xfffffffffffffffe) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='vlan1\x00', 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008040, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@bh}, {@noquota}, {@debug}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1a3042, 0x15) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r4, 0x10, 0x3e6d, 0x683) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$tun(r6, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13137, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x42}, 0x90) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110c230000) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'syz_tun\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 464.886359ms ago: executing program 3 (id=468): stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x310890, &(0x7f00000000c0)={[{@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xfffffffffffffffa}}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@nodelalloc}, {@errors_remount}, {@resuid={'resuid', 0x3d, r0}}, {@jqfmt_vfsv1}, {@auto_da_alloc}], [{@smackfstransmute}, {@subj_type={'subj_type', 0x3d, '\xb3--'}}]}, 0x1, 0x58a, &(0x7f0000000a00)="$eJzs3d9rU1ccAPDvTdP6c7OCyLaHITiYw5nadj8cDHSPY5MJ27sLbSzS1EiTiu0E9WG+7GXIYMiEsT9g73uU/QP7K4RNkCFlexiDjJve1Njmh621qcvnA9Fzcu/Nud+c+709596EBDCwjqT/5CJejYhvk4gDLcvykS08srLe8qNrU+kjiXr98z+TSLLnmusn2f/7ssorEfHr1xHHc+vbrS4uzRbL5dJ8Vh+rzV0eqy4unbg4V5wpzZQuTUxOnnp3cuKD99/ruO/5Dcb61rm/73x27+NT3xxd/v7nBwdvJ3Em9mfLWuN4BjdaK0eK/2al4TizZsXxLWhsJ0n6vQNsylCWR8ORngMOxFCXrHp5W/cMeN6uR0QdGFCJ/IcB1RwHNOf2WzQPfmE8/GhlAtSIfaQ1/vzKtZHY3Zgb7V1OnpgZpfPd0S1oP23jlz/u3k4f0f06xJ4edYANuXEzIk7m8+vP/0l2/tu8k42Lx92tbWPQ/v5AP91Lxz9vtxv/5VbHP9Fm/LOvTe5uRu/8zz3YgmY6Ssd/H7Yd/66eukaHstpLjTHfcHLhYrl0MrsefizqPW99nFq+X++0rHX8lz7S9htjwTfuZGvkHuR3PbnNdLFWjIiRzUf92MObEa/l28WfrPZ/0qb/0/fjXPeXXn0DD5fuvt5ppY7xb5P6TxFvtu3/x92adL8/OdY4HsaaR8V6f906/Fun9vsdf9r/e7vHP5q03q+trnuJnrdhf9z9T6nTst7xtz/+R5IvGuVmElwt1mrz4xEjyafrn594vG2z3lw/jf/Y0e7nv3bHfzr5+rJX4Jlbh251XHUn9P/0hvp/44X7n3z1Q6f2n67/32mUjmXPZOe/9rJj5Wl38FnfPwAAAAAAANhJchGxP5JcYbWcyxUKK5/vOBR7c+VKtXb8QmXh0nQ0vis7GsO55p3uAy2fhxjPPg/brE+sqU9GxMGI+G5oT6NemKqUp/sdPAAAAAAAAAAAAAAAAAAAAOwQ+zp8/z/1+1C/9w547ho/bLCr33sB9EPPX3DZil96AnaknvkP/G/Jfxhc8h8Gl/yHwSX/YXDJfxhc8h8Gl/wHAAAAAAAAAAAAAAAAAAAAAAAAAACALXXu7Nn0UV9+dG0qrU9fWVyYrVw5MV2qzhbmFqYKU5X5y4WZSmWmXCpMVeZ6vV65Urk8PhELV8dqpWptrLq4dH6usnCpdv7iXHGmdL40vC1RAQAAAAAAAAAAAAAAAAAAwIulurg0WyyXS/MKaaFer19ft+h09H/HnmvhdHYwbGrz/E6JQqFD4WbWvRvbqo8nJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY478AAAD//+IfNCw=") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1a0005a, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_win95}, {@shortname_mixed}, {@utf8}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@nfs_stale_rw}], [{@subj_role={'subj_role', 0x3d, 'utf8=0'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', 0xee00}}, {@dont_appraise}, {@flag='rw'}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r0}}]}, 0x3, 0x350, &(0x7f0000001f80)="$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") r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd69000000001806fffe800000000000000000000000000039fe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="61c2"], 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000002440)) pipe2$9p(&(0x7f0000000540)={0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500), 0x2086000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, 'debug_want_extra_isize'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'smackfstransmute'}}, {@smackfshat={'smackfshat', 0x3d, '!*'}}, {@fsname={'fsname', 0x3d, 'maccyrillic'}}, {@euid_gt={'euid>', r0}}]}}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000002300)=""/4082, 0xff2) splice(r5, &(0x7f0000000240)=0x401, r3, &(0x7f0000000280)=0x3, 0x3, 0x0) 439.53592ms ago: executing program 1 (id=469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1081063, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0xf5, 0x2e5, &(0x7f0000000540)="$eJzs3U1rE0Ecx/F/kqZJWmt6EBFRGCqIIl2agDcPFmlBDChtI1hB2NqthmyTkg2FiNgeBK+ePfTgUQQRvHkR8dqLr8CnWy+9WbC4stndNE3WNa32yX4/h3a6M7+dyc6kD9N2s3Lp6WxxxtJ+2HVx8fRLVGJeeVHOf1j6fHr8/RH3Y6VGhycyWaWiInL74cuBd9Xem2+Ovk3Icv+dldXst+VTEyI/J+5LVBUsVbJtpaupcrkaccLTBauoKXXDNHTLUIWSZVSqXr0+ZRpqxizPzdWUXpru65mrGJal9FJNFY2aqpZVtVJT+j29UFKapqm+HkF9snzRtrpIWDD/Ys22ZdWZ+cSi2LYd0HrRL/hrI/F3g8V+0jL/oW3bFkdsJ0eG3bBmd3U8//j/uM//L8+Y/8Np/NbkteFcbmRMqaTI7JP5/Hzefe/Wf+qVgphiyNLYhcl1EbtBIs7b0au5kSFV1y9nZxe8/MJ83v3iMDzj5TOSdr5PacqLn8+4ebU5H5ee5nxW0nIsOJ/18xJtynfLuTNNeU3S8vGulMWUaXGyG/lHGaWuXM+19J+qtwMAAAAAAAAA4CDSVMPG/n2k8avelKYl6n/x0ahPOYeddm6Dxv76kKRlPXh/fihwf79LTnbt4QMHAAAAAOAQsWoPirppGpWdKcSep0K6iIuIUxB5POAMJvSEx70Rd9Z7t4i0V8XCu9hUSF10+3s15g1MdvJC/aOC/88aRd187VelJKhxdEsLYLA78Mond/UBSieNJbm9hZ3oeGm1FiLr/pETgW3syJ/PY+tm3D0iGzMYmrq8pafDbwvJ1gs1+NU9rxnySeN7Y4sPAAAAwAHS9IMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI9u6eZh/3/7NVeK9RHz7LdlaXyee+/4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Id+BQAA//+FlLca") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x0, 0x3ff, 0x0, 0x6}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="47e9bf5f78f8717b3d91d091171fdcf0d805bce5f8b97a6db58baad236d8ab3eefdcc6714f07c7ad14abbccef70f79401e7099f827e1abddc9dea75e3bc51bca86b2f9093ccbd3c100f1c32b1f0eb13880f50828deecba9a3057e0fefe4d650e9a60ee8407b2f01716961d37cda0a9c91815d52bd3e907349f32fdb6ecf0f33170a99917bbba38bb54b225f6020f33b96c86891aebc642e276fb05e39fc1bd703b529d6e40c7193d8bb2eb487f68567385e273f2b626d6b0027d5eb56dc7e217da547841959ef79b00f67569f0470add30f9cd1d96ef1736e941b5f7386287ec31d2182abcf8dcd15e52274219f02e177413", @ANYRES16=r0, @ANYRES32=r1], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x5, 0xe, 0x0, &(0x7f0000000940)="66d4492a0a1b30e6f5d85a6d99e5", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) 366.635031ms ago: executing program 1 (id=470): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x0, 0xffffffff, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) sched_getattr(r4, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f00003ad000/0x3000)=nil, 0x2000, 0x2}) lseek(r1, 0x851, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 0s ago: executing program 3 (id=471): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000004, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (fail_nth: 23) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.163975][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.173157][ T6] usb 2-1: config 0 descriptor?? [ 60.187904][ T389] usb 5-1: bad CDC descriptors [ 60.195561][ T389] usb 5-1: USB disconnect, device number 7 [ 60.239440][ T946] netlink: 128 bytes leftover after parsing attributes in process `syz.6.172'. [ 60.256336][ T289] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 60.264297][ T289] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 60.294525][ T697] usb 4-1: device descriptor read/64, error -71 [ 60.317294][ T308] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 60.411410][ T956] overlayfs: failed to resolve './file1': -2 [ 60.492092][ T971] FAULT_INJECTION: forcing a failure. [ 60.492092][ T971] name failslab, interval 1, probability 0, space 0, times 0 [ 60.505553][ T971] CPU: 1 PID: 971 Comm: syz.6.182 Not tainted syzkaller #0 [ 60.512797][ T971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.522874][ T971] Call Trace: [ 60.526181][ T971] [ 60.529130][ T971] __dump_stack+0x21/0x24 [ 60.533495][ T971] dump_stack_lvl+0x110/0x170 [ 60.538282][ T971] ? __cfi_dump_stack_lvl+0x8/0x8 [ 60.543354][ T971] dump_stack+0x15/0x24 [ 60.547566][ T971] should_fail_ex+0x3bf/0x510 [ 60.552272][ T971] ? security_inode_alloc+0x33/0x120 [ 60.557625][ T971] __should_failslab+0xac/0xf0 [ 60.562429][ T971] should_failslab+0x9/0x20 [ 60.566950][ T971] kmem_cache_alloc+0x3b/0x320 [ 60.571728][ T971] security_inode_alloc+0x33/0x120 [ 60.576873][ T971] inode_init_always+0x6ee/0x950 [ 60.581824][ T971] new_inode_pseudo+0xa2/0x1f0 [ 60.586656][ T971] __sock_create+0x12c/0x7c0 [ 60.588004][ T6] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 60.591320][ T971] ? do_user_addr_fault+0x9a5/0x1030 [ 60.591350][ T971] __sys_socket+0xcd/0x1a0 [ 60.605864][ T6] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 60.608777][ T971] __x64_sys_socket+0x7a/0x90 [ 60.625793][ T971] x64_sys_call+0x449/0x9a0 [ 60.630330][ T971] do_syscall_64+0x4c/0xa0 [ 60.634813][ T971] ? clear_bhb_loop+0x30/0x80 [ 60.639518][ T971] ? clear_bhb_loop+0x30/0x80 [ 60.644235][ T971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 60.650165][ T971] RIP: 0033:0x7fd2a6b9f947 [ 60.654620][ T971] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.674245][ T971] RSP: 002b:00007fd2a7addf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 60.682687][ T971] RAX: ffffffffffffffda RBX: 00007fd2a6e25fa0 RCX: 00007fd2a6b9f947 [ 60.690688][ T971] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 60.698684][ T971] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 60.706680][ T971] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 60.714673][ T971] R13: 00007fd2a6e26038 R14: 00007fd2a6e25fa0 R15: 00007ffc21927938 [ 60.722672][ T971] [ 60.726269][ T697] usb 4-1: device descriptor read/64, error -71 [ 60.730246][ T971] socket: no more sockets [ 60.752196][ T975] tmpfs: Too few inodes for current use [ 60.805089][ T904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.817381][ T904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.849893][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.857214][ T972] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.866340][ T972] device bridge_slave_0 entered promiscuous mode [ 60.883544][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.890701][ T972] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.898626][ T972] device bridge_slave_1 entered promiscuous mode [ 60.976295][ T972] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.983485][ T972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.990820][ T972] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.997898][ T972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.004567][ T697] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 61.033983][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.043258][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.051174][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.072034][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.080481][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.087560][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.095660][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.103919][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.110994][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.140566][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.149104][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.164546][ T697] usb 4-1: device descriptor read/64, error -71 [ 61.167982][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.203386][ T8] device bridge_slave_1 left promiscuous mode [ 61.209588][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.218109][ T8] device bridge_slave_0 left promiscuous mode [ 61.224284][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.232808][ T8] device veth1_macvtap left promiscuous mode [ 61.239385][ T8] device veth0_vlan left promiscuous mode [ 61.292878][ T1000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1000 comm=syz.6.188 [ 61.328503][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.336592][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.345784][ T972] device veth0_vlan entered promiscuous mode [ 61.352384][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.360502][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.379209][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.387771][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.396764][ T972] device veth1_macvtap entered promiscuous mode [ 61.415249][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.425334][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.436027][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.444655][ T697] usb 4-1: device descriptor read/64, error -71 [ 61.452083][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.460521][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.465943][ T415] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 61.482991][ T28] kauditd_printk_skb: 1864 callbacks suppressed [ 61.483004][ T28] audit: type=1400 audit(1786548926.126:2140): avc: denied { mount } for pid=972 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.525851][ T28] audit: type=1400 audit(1786548926.166:2141): avc: denied { mount } for pid=1008 comm="syz.7.177" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 61.564546][ T697] usb usb4-port1: attempt power cycle [ 61.665631][ T415] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 61.676584][ T415] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 61.685966][ T415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.834560][ C1] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 61.984504][ T697] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 62.015719][ T697] usb 4-1: device descriptor read/8, error -71 [ 62.100350][ T415] lg-g15 0003:046D:C222.0006: hidraw1: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 62.175616][ T697] usb 4-1: device descriptor read/8, error -71 [ 62.299814][ T415] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:046D:C222.0006/input/input6 [ 62.387797][ T28] audit: type=1400 audit(1786548927.026:2142): avc: denied { unmount } for pid=972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 62.413396][ T1018] FAULT_INJECTION: forcing a failure. [ 62.413396][ T1018] name failslab, interval 1, probability 0, space 0, times 0 [ 62.426261][ T1018] CPU: 0 PID: 1018 Comm: syz.7.193 Not tainted syzkaller #0 [ 62.433594][ T1018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.443664][ T1018] Call Trace: [ 62.444803][ T697] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 62.446964][ T1018] [ 62.446974][ T1018] __dump_stack+0x21/0x24 [ 62.461795][ T1018] dump_stack_lvl+0x110/0x170 [ 62.466525][ T1018] ? __cfi_dump_stack_lvl+0x8/0x8 [ 62.471585][ T1018] dump_stack+0x15/0x24 [ 62.475770][ T1018] should_fail_ex+0x3bf/0x510 [ 62.480478][ T1018] __should_failslab+0xac/0xf0 [ 62.485276][ T1018] should_failslab+0x9/0x20 [ 62.489809][ T1018] __kmem_cache_alloc_node+0x3d/0x2d0 [ 62.495221][ T1018] ? sk_prot_alloc+0xed/0x320 [ 62.499912][ T1018] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 62.505736][ T1018] ? sk_prot_alloc+0xed/0x320 [ 62.510437][ T1018] __kmalloc+0xa4/0x1e0 [ 62.514613][ T1018] sk_prot_alloc+0xed/0x320 [ 62.519131][ T1018] ? _raw_read_lock_irqsave+0x94/0xf0 [ 62.524515][ T1018] sk_alloc+0x3b/0x460 [ 62.528616][ T1018] netlink_create+0x3c2/0x640 [ 62.533308][ T1018] ? __cfi_genl_bind+0x10/0x10 [ 62.538091][ T1018] __sock_create+0x39e/0x7c0 [ 62.542700][ T1018] __sys_socket+0xcd/0x1a0 [ 62.547132][ T1018] __x64_sys_socket+0x7a/0x90 [ 62.551825][ T1018] x64_sys_call+0x449/0x9a0 [ 62.556347][ T1018] do_syscall_64+0x4c/0xa0 [ 62.560777][ T1018] ? clear_bhb_loop+0x30/0x80 [ 62.565466][ T1018] ? clear_bhb_loop+0x30/0x80 [ 62.570144][ T1018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.576077][ T1018] RIP: 0033:0x7fb7f259f947 [ 62.580506][ T1018] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.600138][ T1018] RSP: 002b:00007fb7f34c6f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 62.608569][ T1018] RAX: ffffffffffffffda RBX: 00007fb7f2825fa0 RCX: 00007fb7f259f947 [ 62.616567][ T1018] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 62.624549][ T1018] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 62.632623][ T1018] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 62.640600][ T1018] R13: 00007fb7f2826038 R14: 00007fb7f2825fa0 R15: 00007fffd4811848 [ 62.648589][ T1018] [ 62.652470][ T1021] netlink: 44 bytes leftover after parsing attributes in process `syz.4.189'. [ 62.673034][ T697] usb 4-1: device descriptor read/8, error -71 [ 62.676299][ T6] usb 2-1: USB disconnect, device number 4 [ 62.737864][ T1020] device wg1 entered promiscuous mode [ 62.758914][ T415] lg-g15 0003:046D:C222.0006: Error getting LED brightness: -71 [ 62.778571][ T415] lg-g15 0003:046D:C222.0006: Error getting LED brightness: -71 [ 62.809048][ T28] audit: type=1400 audit(1786548927.446:2143): avc: denied { map } for pid=1019 comm="syz.1.194" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 62.825266][ T697] usb 4-1: device descriptor read/8, error -71 [ 63.004224][ T1043] xt_hashlimit: size too large, truncated to 1048576 [ 63.011115][ T1043] xt_hashlimit: max too large, truncated to 1048576 [ 63.039725][ T697] usb usb4-port1: unable to enumerate USB device [ 63.049161][ T1044] netlink: 36 bytes leftover after parsing attributes in process `syz.3.199'. [ 63.685164][ T1054] SELinux: failed to load policy [ 63.825729][ T1040] loop4: detected capacity change from 0 to 40427 [ 63.840872][ T1040] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 63.855794][ T1040] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 63.869293][ T415] lg-g15 0003:046D:C222.0006: Error getting LED brightness: -71 [ 63.877904][ T1040] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 63.884240][ T415] lg-g15 0003:046D:C222.0006: Error getting LED brightness: -71 [ 63.893171][ T415] lg-g15 0003:046D:C222.0006: Error getting LED brightness: -71 [ 63.901708][ T1040] F2FS-fs (loop4): Found nat_bits in checkpoint [ 63.914690][ T415] lg-g15 0003:046D:C222.0006: Error getting LED brightness: -71 [ 63.930750][ T1064] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 63.935724][ T415] usb 5-1: USB disconnect, device number 8 [ 63.973548][ T1040] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 63.986821][ T1040] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 64.009951][ T1074] FAULT_INJECTION: forcing a failure. [ 64.009951][ T1074] name failslab, interval 1, probability 0, space 0, times 0 [ 64.022715][ T1074] CPU: 0 PID: 1074 Comm: syz.3.207 Not tainted syzkaller #0 [ 64.030041][ T1074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.040134][ T1074] Call Trace: [ 64.043442][ T1074] [ 64.046402][ T1074] __dump_stack+0x21/0x24 [ 64.050817][ T1074] dump_stack_lvl+0x110/0x170 [ 64.055537][ T1074] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.060585][ T1074] dump_stack+0x15/0x24 [ 64.064790][ T1074] should_fail_ex+0x3bf/0x510 [ 64.069588][ T1074] __should_failslab+0xac/0xf0 [ 64.074407][ T1074] should_failslab+0x9/0x20 [ 64.078946][ T1074] __kmem_cache_alloc_node+0x3d/0x2d0 [ 64.084374][ T1074] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 64.090123][ T1074] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 64.095880][ T1074] kmalloc_trace+0x29/0xb0 [ 64.100323][ T1074] selinux_sk_alloc_security+0x7e/0x1a0 [ 64.105912][ T1074] security_sk_alloc+0x83/0xb0 [ 64.110712][ T1074] sk_prot_alloc+0x108/0x320 [ 64.115334][ T1074] ? _raw_read_lock_irqsave+0x94/0xf0 [ 64.120750][ T1074] sk_alloc+0x3b/0x460 [ 64.124853][ T1074] netlink_create+0x3c2/0x640 [ 64.129571][ T1074] ? __cfi_genl_bind+0x10/0x10 [ 64.134376][ T1074] __sock_create+0x39e/0x7c0 [ 64.138994][ T1074] __sys_socket+0xcd/0x1a0 [ 64.143444][ T1074] __x64_sys_socket+0x7a/0x90 [ 64.148142][ T1074] x64_sys_call+0x449/0x9a0 [ 64.152677][ T1074] do_syscall_64+0x4c/0xa0 [ 64.157101][ T1074] ? clear_bhb_loop+0x30/0x80 [ 64.161806][ T1074] ? clear_bhb_loop+0x30/0x80 [ 64.166494][ T1074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.172402][ T1074] RIP: 0033:0x7f8f6c59f947 [ 64.176818][ T1074] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.196429][ T1074] RSP: 002b:00007f8f6d535f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 64.204852][ T1074] RAX: ffffffffffffffda RBX: 00007f8f6c825fa0 RCX: 00007f8f6c59f947 [ 64.212833][ T1074] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 64.220842][ T1074] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 64.228826][ T1074] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 64.236815][ T1074] R13: 00007f8f6c826038 R14: 00007f8f6c825fa0 R15: 00007ffc177bee28 [ 64.244892][ T1074] [ 64.287185][ T1070] fido_id[1070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 64.388129][ T1090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.213'. [ 64.566560][ T1105] syz.6.218 (1105): attempted to duplicate a private mapping with mremap. This is not supported. [ 64.583287][ T28] audit: type=1400 audit(1786548929.216:2144): avc: denied { create } for pid=1038 comm="syz.4.198" name="cpuset.effective_mems" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.674535][ T697] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 64.912197][ T28] audit: type=1400 audit(1786548929.546:2145): avc: denied { read append open } for pid=1038 comm="syz.4.198" path="/42/file0/cpuset.effective_mems" dev="loop4" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.998807][ T697] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 65.010658][ T697] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 65.021006][ T697] usb 8-1: can't read configurations, error -71 [ 65.174489][ T1110] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 65.304593][ T324] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 65.352844][ T28] audit: type=1400 audit(1786548929.986:2146): avc: denied { read } for pid=1114 comm="syz.1.220" name="usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.384529][ T1110] usb 5-1: Using ep0 maxpacket: 8 [ 65.396585][ T1119] FAULT_INJECTION: forcing a failure. [ 65.396585][ T1119] name failslab, interval 1, probability 0, space 0, times 0 [ 65.416712][ T28] audit: type=1400 audit(1786548929.986:2147): avc: denied { open } for pid=1114 comm="syz.1.220" path="/dev/usbmon5" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.419702][ T1119] CPU: 0 PID: 1119 Comm: syz.3.221 Not tainted syzkaller #0 [ 65.447657][ T1119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.457733][ T1119] Call Trace: [ 65.461028][ T1119] [ 65.463980][ T1119] __dump_stack+0x21/0x24 [ 65.468350][ T1119] dump_stack_lvl+0x110/0x170 [ 65.473103][ T1119] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.478155][ T1119] ? __kasan_check_write+0x14/0x20 [ 65.483298][ T1119] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 65.488828][ T1119] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 65.494759][ T1119] dump_stack+0x15/0x24 [ 65.498950][ T1119] should_fail_ex+0x3bf/0x510 [ 65.503649][ T1119] __should_failslab+0xac/0xf0 [ 65.508467][ T1119] should_failslab+0x9/0x20 [ 65.513019][ T1119] slab_pre_alloc_hook+0x30/0x1d0 [ 65.518089][ T1119] ? __sock_create+0x39e/0x7c0 [ 65.522881][ T1119] ? __sys_socket+0xcd/0x1a0 [ 65.527499][ T1119] ? __x64_sys_socket+0x7a/0x90 [ 65.532392][ T1119] kmem_cache_alloc_lru+0x49/0x280 [ 65.537551][ T1119] ? __d_alloc+0x34/0x6d0 [ 65.541657][ T28] audit: type=1400 audit(1786548930.176:2148): avc: denied { map } for pid=1038 comm="syz.4.198" path="/42/file0/cpuset.effective_mems" dev="loop4" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.541956][ T1119] __d_alloc+0x34/0x6d0 [ 65.570049][ T1119] d_alloc_pseudo+0x1d/0x70 [ 65.570235][ T28] audit: type=1400 audit(1786548930.176:2149): avc: denied { write } for pid=1038 comm="syz.4.198" path="/42/file0/cpuset.effective_mems" dev="loop4" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.574599][ T1119] alloc_file_pseudo+0xe0/0x200 [ 65.574625][ T1119] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 65.606174][ T1110] usb 5-1: unable to get BOS descriptor or descriptor too short [ 65.608984][ T1119] ? _raw_spin_unlock+0x4c/0x70 [ 65.621479][ T1119] ? alloc_fd+0x4c1/0x570 [ 65.625854][ T1119] sock_alloc_file+0xba/0x270 [ 65.630569][ T1119] __sys_socket+0x138/0x1a0 [ 65.635087][ T1119] __x64_sys_socket+0x7a/0x90 [ 65.635830][ T1110] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 65.639777][ T1119] x64_sys_call+0x449/0x9a0 [ 65.651820][ T1119] do_syscall_64+0x4c/0xa0 [ 65.656261][ T1119] ? clear_bhb_loop+0x30/0x80 [ 65.658232][ T1110] usb 5-1: can't read configurations, error -71 [ 65.660998][ T1119] ? clear_bhb_loop+0x30/0x80 [ 65.667872][ T324] usb 7-1: Using ep0 maxpacket: 16 [ 65.671922][ T1119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.671953][ T1119] RIP: 0033:0x7f8f6c59f947 [ 65.685723][ T324] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.687552][ T1119] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.687575][ T1119] RSP: 002b:00007f8f6d535f98 EFLAGS: 00000286 [ 65.697880][ T324] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 65.717241][ T1119] ORIG_RAX: 0000000000000029 [ 65.717251][ T1119] RAX: ffffffffffffffda RBX: 00007f8f6c825fa0 RCX: 00007f8f6c59f947 [ 65.717283][ T1119] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 65.717297][ T1119] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 65.723961][ T324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 65.734121][ T1119] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 65.734137][ T1119] R13: 00007f8f6c826038 R14: 00007f8f6c825fa0 R15: 00007ffc177bee28 [ 65.734155][ T1119] [ 65.803228][ T324] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 65.813070][ T324] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 65.827252][ T324] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.837554][ T324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 65.846547][ T324] usb 7-1: SerialNumber: syz [ 66.174503][ T697] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.207400][ T291] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 66.324520][ T697] usb 8-1: device descriptor read/64, error -71 [ 66.382565][ T1154] FAULT_INJECTION: forcing a failure. [ 66.382565][ T1154] name failslab, interval 1, probability 0, space 0, times 0 [ 66.394648][ T291] usb 4-1: Using ep0 maxpacket: 32 [ 66.395963][ T1154] CPU: 0 PID: 1154 Comm: syz.4.233 Not tainted syzkaller #0 [ 66.402431][ T291] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 66.407806][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.407821][ T1154] Call Trace: [ 66.407827][ T1154] [ 66.407834][ T1154] __dump_stack+0x21/0x24 [ 66.407865][ T1154] dump_stack_lvl+0x110/0x170 [ 66.416257][ T291] usb 4-1: config 0 has no interface number 0 [ 66.426033][ T1154] ? __cfi_dump_stack_lvl+0x8/0x8 [ 66.426066][ T1154] dump_stack+0x15/0x24 [ 66.436002][ T291] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 66.436652][ T1154] should_fail_ex+0x3bf/0x510 [ 66.441673][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.447423][ T1154] ? __alloc_file+0x28/0x2a0 [ 66.447453][ T1154] __should_failslab+0xac/0xf0 [ 66.447482][ T1154] should_failslab+0x9/0x20 [ 66.454388][ T291] usb 4-1: Product: syz [ 66.456669][ T1154] kmem_cache_alloc+0x3b/0x320 [ 66.456701][ T1154] ? __cfi__raw_spin_lock+0x10/0x10 [ 66.456728][ T1154] __alloc_file+0x28/0x2a0 [ 66.467125][ T291] usb 4-1: Manufacturer: syz [ 66.470434][ T1154] alloc_empty_file+0x97/0x180 [ 66.470464][ T1154] alloc_file+0x59/0x600 [ 66.479806][ T291] usb 4-1: SerialNumber: syz [ 66.483063][ T1154] ? _raw_spin_unlock+0x4c/0x70 [ 66.483095][ T1154] alloc_file_pseudo+0x180/0x200 [ 66.500629][ T291] usb 4-1: config 0 descriptor?? [ 66.501320][ T1154] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 66.519984][ T291] smsc95xx v2.0.0 [ 66.520315][ T1154] ? _raw_spin_unlock+0x4c/0x70 [ 66.557891][ T1154] ? alloc_fd+0x4c1/0x570 [ 66.562259][ T1154] sock_alloc_file+0xba/0x270 [ 66.567009][ T1154] __sys_socket+0x138/0x1a0 [ 66.571546][ T1154] __x64_sys_socket+0x7a/0x90 [ 66.576265][ T1154] x64_sys_call+0x449/0x9a0 [ 66.580832][ T1154] do_syscall_64+0x4c/0xa0 [ 66.585272][ T1154] ? clear_bhb_loop+0x30/0x80 [ 66.589967][ T1154] ? clear_bhb_loop+0x30/0x80 [ 66.594686][ T1154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.600608][ T1154] RIP: 0033:0x7fdaaf79f947 [ 66.605057][ T1154] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.624620][ T697] usb 8-1: device descriptor read/64, error -71 [ 66.631021][ T1154] RSP: 002b:00007fdab0745f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 66.631047][ T1154] RAX: ffffffffffffffda RBX: 00007fdaafa25fa0 RCX: 00007fdaaf79f947 [ 66.631064][ T1154] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 66.655436][ T1154] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 66.663420][ T1154] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 66.671407][ T1154] R13: 00007fdaafa26038 R14: 00007fdaafa25fa0 R15: 00007ffe836ea818 [ 66.679394][ T1154] [ 66.754538][ T295] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 66.754572][ T697] usb usb8-port1: attempt power cycle [ 66.904575][ T295] usb 2-1: device descriptor read/64, error -71 [ 67.094514][ T1110] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 67.174503][ T295] usb 2-1: device descriptor read/64, error -71 [ 67.174503][ T697] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.215449][ T697] usb 8-1: device descriptor read/8, error -71 [ 67.284537][ T1110] usb 5-1: Invalid ep0 maxpacket: 64 [ 67.320971][ T291] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 67.331876][ T291] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 67.365421][ T697] usb 8-1: device descriptor read/8, error -71 [ 67.434492][ T1110] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 67.444489][ T295] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 67.528447][ T1136] xt_hashlimit: size too large, truncated to 1048576 [ 67.579090][ T1161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 67.594507][ T295] usb 2-1: device descriptor read/64, error -71 [ 67.614495][ T1110] usb 5-1: Invalid ep0 maxpacket: 64 [ 67.619949][ T1110] usb usb5-port1: attempt power cycle [ 67.634477][ T697] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.665581][ T697] usb 8-1: device descriptor read/8, error -71 [ 67.835498][ T697] usb 8-1: device descriptor read/8, error -71 [ 67.865125][ T295] usb 2-1: device descriptor read/64, error -71 [ 67.954522][ T697] usb usb8-port1: unable to enumerate USB device [ 67.975174][ T324] usb 7-1: USB disconnect, device number 5 [ 67.984537][ T295] usb usb2-port1: attempt power cycle [ 68.054530][ T1110] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 68.085348][ T1110] usb 5-1: Invalid ep0 maxpacket: 64 [ 68.143658][ T1176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.239'. [ 68.154178][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 68.154192][ T28] audit: type=1400 audit(1786548932.786:2155): avc: denied { search } for pid=1175 comm="syz.6.239" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 68.234482][ T1110] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 68.274871][ T1110] usb 5-1: Invalid ep0 maxpacket: 64 [ 68.280313][ T1110] usb usb5-port1: unable to enumerate USB device [ 68.336329][ T291] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 68.357724][ T291] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 68.366127][ T291] usb 4-1: USB disconnect, device number 22 [ 68.394518][ T295] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 68.425806][ T295] usb 2-1: device descriptor read/8, error -71 [ 68.519499][ T28] audit: type=1400 audit(1786548933.156:2156): avc: denied { unmount } for pid=504 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 68.550921][ T28] audit: type=1400 audit(1786548933.186:2157): avc: denied { create } for pid=1180 comm="syz.6.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.570464][ T28] audit: type=1400 audit(1786548933.186:2158): avc: denied { ioctl } for pid=1180 comm="syz.6.241" path="socket:[20271]" dev="sockfs" ino=20271 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 68.571377][ T1181] netlink: 4 bytes leftover after parsing attributes in process `syz.6.241'. [ 68.605676][ T295] usb 2-1: device descriptor read/8, error -71 [ 68.754530][ T291] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 68.805892][ T1187] FAULT_INJECTION: forcing a failure. [ 68.805892][ T1187] name failslab, interval 1, probability 0, space 0, times 0 [ 68.818720][ T1187] CPU: 1 PID: 1187 Comm: syz.7.244 Not tainted syzkaller #0 [ 68.826045][ T1187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.836099][ T1187] Call Trace: [ 68.839387][ T1187] [ 68.842316][ T1187] __dump_stack+0x21/0x24 [ 68.846645][ T1187] dump_stack_lvl+0x110/0x170 [ 68.851412][ T1187] ? __cfi_dump_stack_lvl+0x8/0x8 [ 68.856462][ T1187] dump_stack+0x15/0x24 [ 68.860656][ T1187] should_fail_ex+0x3bf/0x510 [ 68.865357][ T1187] ? security_file_alloc+0x33/0x130 [ 68.870562][ T1187] __should_failslab+0xac/0xf0 [ 68.874646][ T295] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 68.875341][ T1187] should_failslab+0x9/0x20 [ 68.887212][ T1187] kmem_cache_alloc+0x3b/0x320 [ 68.891998][ T1187] ? __alloc_file+0x28/0x2a0 [ 68.896597][ T1187] security_file_alloc+0x33/0x130 [ 68.901654][ T1187] __alloc_file+0xb5/0x2a0 [ 68.906096][ T1187] alloc_empty_file+0x97/0x180 [ 68.906106][ T295] usb 2-1: device descriptor read/8, error -71 [ 68.917048][ T1187] alloc_file+0x59/0x600 [ 68.921291][ T1187] ? _raw_spin_unlock+0x4c/0x70 [ 68.926148][ T1187] alloc_file_pseudo+0x180/0x200 [ 68.931092][ T1187] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 68.936555][ T1187] ? _raw_spin_unlock+0x4c/0x70 [ 68.941428][ T1187] ? alloc_fd+0x4c1/0x570 [ 68.945768][ T1187] sock_alloc_file+0xba/0x270 [ 68.950486][ T1187] __sys_socket+0x138/0x1a0 [ 68.955015][ T1187] __x64_sys_socket+0x7a/0x90 [ 68.959694][ T1187] x64_sys_call+0x449/0x9a0 [ 68.964204][ T1187] do_syscall_64+0x4c/0xa0 [ 68.968645][ T1187] ? clear_bhb_loop+0x30/0x80 [ 68.973320][ T1187] ? clear_bhb_loop+0x30/0x80 [ 68.978002][ T1187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.983916][ T1187] RIP: 0033:0x7fb7f259f947 [ 68.988325][ T1187] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.007931][ T1187] RSP: 002b:00007fb7f34c6f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 69.016542][ T1187] RAX: ffffffffffffffda RBX: 00007fb7f2825fa0 RCX: 00007fb7f259f947 [ 69.024534][ T1187] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 69.032528][ T1187] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 69.040499][ T1187] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 69.048489][ T1187] R13: 00007fb7f2826038 R14: 00007fb7f2825fa0 R15: 00007fffd4811848 [ 69.056326][ T295] usb 2-1: device descriptor read/8, error -71 [ 69.056468][ T1187] [ 69.128262][ T28] audit: type=1400 audit(1786548933.766:2159): avc: denied { write } for pid=1189 comm="syz.7.245" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.155676][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.166667][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.176452][ T291] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.185151][ T295] usb usb2-port1: unable to enumerate USB device [ 69.190157][ T291] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.204807][ T291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.213448][ T291] usb 4-1: config 0 descriptor?? [ 69.634672][ T291] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 69.644789][ T291] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 69.742944][ T28] audit: type=1400 audit(1786548934.376:2160): avc: denied { unlink } for pid=1211 comm="syz.4.251" name="#1" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 69.838705][ T1178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.855766][ T1178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.187503][ T28] audit: type=1400 audit(1786548934.826:2161): avc: denied { watch watch_reads } for pid=1214 comm="syz.4.253" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 70.276402][ T1221] FAULT_INJECTION: forcing a failure. [ 70.276402][ T1221] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 70.304512][ T1221] CPU: 1 PID: 1221 Comm: syz.4.255 Not tainted syzkaller #0 [ 70.311866][ T1221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.321935][ T1221] Call Trace: [ 70.325229][ T1221] [ 70.328175][ T1221] __dump_stack+0x21/0x24 [ 70.332528][ T1221] dump_stack_lvl+0x110/0x170 [ 70.337220][ T1221] ? __cfi_dump_stack_lvl+0x8/0x8 [ 70.342276][ T1221] ? kernel_text_address+0xa0/0xd0 [ 70.347413][ T1221] ? unwind_get_return_address+0x4d/0x90 [ 70.353068][ T1221] dump_stack+0x15/0x24 [ 70.357233][ T1221] should_fail_ex+0x3bf/0x510 [ 70.361951][ T1221] should_fail_alloc_page+0x61/0x90 [ 70.367167][ T1221] prepare_alloc_pages+0x131/0x570 [ 70.372303][ T1221] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 70.377527][ T1221] __alloc_pages+0x15b/0x610 [ 70.382136][ T1221] ? __cfi___alloc_pages+0x10/0x10 [ 70.387268][ T1221] ? filemap_map_pages+0x5e6/0x1250 [ 70.392485][ T1221] pte_alloc_one+0x70/0x190 [ 70.397001][ T1221] ? __cfi_pte_alloc_one+0x10/0x10 [ 70.402220][ T1221] ? vma_data_pages+0xfc/0x130 [ 70.406993][ T1221] do_fault+0xf56/0x1e30 [ 70.411251][ T1221] ? pte_marker_clear+0x220/0x220 [ 70.416304][ T1221] ? __kasan_check_read+0x11/0x20 [ 70.421348][ T1221] handle_mm_fault+0x1363/0x26b0 [ 70.426306][ T1221] ? __cfi_handle_mm_fault+0x10/0x10 [ 70.431704][ T1221] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 70.436915][ T1221] do_user_addr_fault+0x900/0x1030 [ 70.442043][ T1221] ? debug_smp_processor_id+0x17/0x20 [ 70.447436][ T1221] exc_page_fault+0x51/0xb0 [ 70.451954][ T1221] asm_exc_page_fault+0x27/0x30 [ 70.456836][ T1221] RIP: 0033:0x7fdaaf788f61 [ 70.461261][ T1221] Code: 00 0f 1f 84 00 00 00 00 00 48 85 f6 74 37 49 89 f0 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 5f 02 00 00 fd 74 0f c5 fd d7 c1 48 83 fe 20 76 11 85 c0 74 6d f3 0f bc c0 [ 70.480884][ T1221] RSP: 002b:00007fdab0745f48 EFLAGS: 00010283 [ 70.486978][ T1221] RAX: 00000000000000c0 RBX: 00007fdab0746014 RCX: 0000000000000000 [ 70.494955][ T1221] RDX: 00002000000000c0 RSI: 000000000000000f RDI: 00002000000000c0 [ 70.502937][ T1221] RBP: 0000000000000005 R08: 000000000000000f R09: 0000000000000000 [ 70.510915][ T1221] R10: 00002000000000c0 R11: 0000000000000286 R12: 00002000000000c0 [ 70.519149][ T1221] R13: 00007fdab0745fb0 R14: 00007fdaafa25fa0 R15: 0000000000000000 [ 70.527136][ T1221] [ 70.530354][ T1221] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 70.591391][ T1226] loop4: detected capacity change from 0 to 512 [ 70.611818][ T1226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.630665][ T1226] EXT4-fs (loop4): orphan cleanup on readonly fs [ 70.638145][ T1226] EXT4-fs warning (device loop4): ext4_enable_quotas:7080: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 70.653728][ T1226] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 70.660803][ T1226] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.257: bad orphan inode 768 [ 70.671159][ T1226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.702789][ T28] audit: type=1400 audit(1786548935.336:2162): avc: denied { mounton } for pid=1225 comm="syz.4.257" path="/50/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.731755][ T290] EXT4-fs (loop4): unmounting filesystem. [ 70.808020][ T28] audit: type=1400 audit(1786548935.446:2163): avc: denied { mounton } for pid=1234 comm="syz.4.261" path="/proc/146/task" dev="proc" ino=21239 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 70.964631][ C0] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 71.461680][ T1235] loop4: detected capacity change from 0 to 131072 [ 71.514644][ T1110] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 71.522721][ T571] I/O error, dev loop4, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.572979][ T1252] xt_CT: No such helper "syz0" [ 71.678878][ T28] audit: type=1400 audit(1786548936.316:2164): avc: denied { create } for pid=1253 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 71.698766][ T1256] device vcan1 entered promiscuous mode [ 71.704523][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 71.730985][ T1257] xt_hashlimit: size too large, truncated to 1048576 [ 71.734511][ T1110] usb 2-1: Using ep0 maxpacket: 8 [ 71.786130][ T324] usb 4-1: USB disconnect, device number 23 [ 72.310191][ T1235] loop4: detected capacity change from 0 to 40427 [ 72.362169][ T1110] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.376952][ T1110] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 72.402614][ T1110] usb 2-1: can't read configurations, error -71 [ 72.470788][ T1261] FAULT_INJECTION: forcing a failure. [ 72.470788][ T1261] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.497597][ T1261] CPU: 1 PID: 1261 Comm: syz.3.267 Not tainted syzkaller #0 [ 72.504939][ T1261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 72.515012][ T1261] Call Trace: [ 72.518309][ T1261] [ 72.521261][ T1261] __dump_stack+0x21/0x24 [ 72.525636][ T1261] dump_stack_lvl+0x110/0x170 [ 72.530351][ T1261] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.535400][ T1261] ? do_fault+0x1b35/0x1e30 [ 72.539944][ T1261] dump_stack+0x15/0x24 [ 72.544134][ T1261] should_fail_ex+0x3bf/0x510 [ 72.548835][ T1261] should_fail+0xb/0x10 [ 72.553011][ T1261] should_fail_usercopy+0x1a/0x20 [ 72.558071][ T1261] _copy_from_user+0x1e/0xc0 [ 72.562694][ T1261] __sys_sendto+0x30b/0x660 [ 72.567234][ T1261] ? __cfi___sys_sendto+0x10/0x10 [ 72.572335][ T1261] ? do_user_addr_fault+0x9a5/0x1030 [ 72.577651][ T1261] __x64_sys_sendto+0xe5/0x100 [ 72.582454][ T1261] x64_sys_call+0x83/0x9a0 [ 72.586887][ T1261] do_syscall_64+0x4c/0xa0 [ 72.591328][ T1261] ? clear_bhb_loop+0x30/0x80 [ 72.596025][ T1261] ? clear_bhb_loop+0x30/0x80 [ 72.600712][ T1261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.606628][ T1261] RIP: 0033:0x7f8f6c55e90e [ 72.611058][ T1261] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 72.630676][ T1261] RSP: 002b:00007f8f6d535e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 72.639107][ T1261] RAX: ffffffffffffffda RBX: 00007f8f6d5376c0 RCX: 00007f8f6c55e90e [ 72.647095][ T1261] RDX: 000000000000001c RSI: 00007f8f6d536000 RDI: 0000000000000005 [ 72.655100][ T1261] RBP: 0000000000000000 R08: 00007f8f6d535f04 R09: 000000000000000c [ 72.663086][ T1261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 72.671070][ T1261] R13: 00007f8f6d535f58 R14: 00007f8f6d536000 R15: 0000000000000000 [ 72.679057][ T1261] [ 72.768310][ T1264] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 72.776525][ T1264] pim6reg0: ignored: set checksum disabled [ 73.124483][ T313] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 73.332079][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 73.332094][ T28] audit: type=1400 audit(1786548937.966:2167): avc: denied { append } for pid=1279 comm="syz.3.274" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 73.346428][ T313] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 73.371420][ T28] audit: type=1400 audit(1786548938.006:2168): avc: denied { write } for pid=1279 comm="syz.3.274" name="ipv6_route" dev="proc" ino=4026532440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 73.394511][ T313] usb 7-1: config 0 interface 0 has no altsetting 0 [ 73.411164][ T313] usb 7-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 73.429962][ T313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.438270][ T1110] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 73.455079][ T313] usb 7-1: config 0 descriptor?? [ 73.604493][ T1110] usb 2-1: device descriptor read/64, error -71 [ 73.663967][ T1274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.271'. [ 73.694586][ T415] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 73.874486][ T1110] usb 2-1: device descriptor read/64, error -71 [ 73.882432][ T313] cypress 0003:04B4:DE61.0008: unknown main item tag 0x2 [ 73.893886][ T313] cypress 0003:04B4:DE61.0008: global environment stack underflow [ 73.901877][ T313] cypress 0003:04B4:DE61.0008: item 0 4 1 11 parsing failed [ 73.906126][ T415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.909901][ T313] cypress 0003:04B4:DE61.0008: parse failed [ 73.924513][ T415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.935971][ T415] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 73.940361][ T313] cypress: probe of 0003:04B4:DE61.0008 failed with error -22 [ 73.949400][ T415] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 73.965588][ T415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.979627][ T415] usb 4-1: config 0 descriptor?? [ 73.994546][ T1110] usb usb2-port1: attempt power cycle [ 74.089206][ T295] usb 7-1: USB disconnect, device number 6 [ 74.387942][ T415] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 74.398028][ T415] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 74.404551][ T1110] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 74.455514][ T1110] usb 2-1: device descriptor read/8, error -71 [ 74.590341][ T1285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.598924][ T1285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.606033][ T1110] usb 2-1: device descriptor read/8, error -71 [ 74.676380][ T1309] FAULT_INJECTION: forcing a failure. [ 74.676380][ T1309] name failslab, interval 1, probability 0, space 0, times 0 [ 74.689206][ T1309] CPU: 1 PID: 1309 Comm: syz.4.281 Not tainted syzkaller #0 [ 74.696523][ T1309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.706613][ T1309] Call Trace: [ 74.709964][ T1309] [ 74.712907][ T1309] __dump_stack+0x21/0x24 [ 74.717284][ T1309] dump_stack_lvl+0x110/0x170 [ 74.722026][ T1309] ? __cfi_dump_stack_lvl+0x8/0x8 [ 74.727079][ T1309] ? release_sock+0x169/0x1c0 [ 74.731780][ T1309] dump_stack+0x15/0x24 [ 74.735976][ T1309] should_fail_ex+0x3bf/0x510 [ 74.740767][ T1309] __should_failslab+0xac/0xf0 [ 74.745576][ T1309] should_failslab+0x9/0x20 [ 74.750107][ T1309] kmem_cache_alloc_node+0x42/0x330 [ 74.755352][ T1309] ? __alloc_skb+0xe8/0x4a0 [ 74.759888][ T1309] __alloc_skb+0xe8/0x4a0 [ 74.764238][ T1309] netlink_sendmsg+0x635/0xbd0 [ 74.769037][ T1309] ? cgroup_rstat_updated+0xf0/0x360 [ 74.774393][ T1309] ? __cfi_netlink_sendmsg+0x10/0x10 [ 74.779753][ T1309] ? security_socket_sendmsg+0x93/0xb0 [ 74.785244][ T1309] __sys_sendto+0x4ac/0x660 [ 74.789786][ T1309] ? __cfi___sys_sendto+0x10/0x10 [ 74.794851][ T1309] ? do_user_addr_fault+0x9a5/0x1030 [ 74.800173][ T1309] __x64_sys_sendto+0xe5/0x100 [ 74.804967][ T1309] x64_sys_call+0x83/0x9a0 [ 74.809434][ T1309] do_syscall_64+0x4c/0xa0 [ 74.813970][ T1309] ? clear_bhb_loop+0x30/0x80 [ 74.818682][ T1309] ? clear_bhb_loop+0x30/0x80 [ 74.823384][ T1309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.829327][ T1309] RIP: 0033:0x7fdaaf75e90e [ 74.833768][ T1309] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.853485][ T1309] RSP: 002b:00007fdab0745e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 74.861930][ T1309] RAX: ffffffffffffffda RBX: 00007fdab07476c0 RCX: 00007fdaaf75e90e [ 74.869928][ T1309] RDX: 000000000000001c RSI: 00007fdab0746000 RDI: 0000000000000005 [ 74.877929][ T1309] RBP: 0000000000000000 R08: 00007fdab0745f04 R09: 000000000000000c [ 74.885926][ T1309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 74.893917][ T1309] R13: 00007fdab0745f58 R14: 00007fdab0746000 R15: 0000000000000000 [ 74.901915][ T1309] [ 75.054498][ T1110] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 75.085601][ T1110] usb 2-1: device descriptor read/8, error -71 [ 75.235494][ T1110] usb 2-1: device descriptor read/8, error -71 [ 75.354625][ T1110] usb usb2-port1: unable to enumerate USB device [ 75.684660][ C0] plantronics 0003:047F:FFFF.0009: usb_submit_urb(ctrl) failed: -1 [ 75.694226][ T415] usb 4-1: USB disconnect, device number 24 [ 75.914559][ T1110] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 76.064521][ T1110] usb 5-1: device descriptor read/64, error -71 [ 76.314475][ T295] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 76.334493][ T1110] usb 5-1: device descriptor read/64, error -71 [ 76.494461][ T295] usb 7-1: Using ep0 maxpacket: 8 [ 76.604470][ T1110] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 76.749574][ T295] usb 7-1: unable to get BOS descriptor or descriptor too short [ 76.764494][ T1110] usb 5-1: device descriptor read/64, error -71 [ 76.767849][ T295] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 76.794490][ T295] usb 7-1: can't read configurations, error -71 [ 77.034482][ T1110] usb 5-1: device descriptor read/64, error -71 [ 77.049857][ T28] audit: type=1400 audit(1786548941.686:2169): avc: denied { sqpoll } for pid=1340 comm="syz.1.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.095237][ T1344] netlink: 276 bytes leftover after parsing attributes in process `syz.1.291'. [ 77.154706][ T1110] usb usb5-port1: attempt power cycle [ 77.374377][ T28] audit: type=1326 audit(1786548942.006:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1364 comm="syz.6.298" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a6b9e0d9 code=0x7ffc0000 [ 77.399557][ T28] audit: type=1326 audit(1786548942.016:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1364 comm="syz.6.298" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd2a6b9e0d9 code=0x7ffc0000 [ 77.424648][ T28] audit: type=1326 audit(1786548942.016:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1364 comm="syz.6.298" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a6b9e0d9 code=0x7ffc0000 [ 77.450079][ T28] audit: type=1326 audit(1786548942.016:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1364 comm="syz.6.298" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fd2a6b9e0d9 code=0x7ffc0000 [ 77.484993][ T28] audit: type=1326 audit(1786548942.016:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1364 comm="syz.6.298" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a6b9e0d9 code=0x7ffc0000 [ 77.520817][ T28] audit: type=1326 audit(1786548942.016:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1364 comm="syz.6.298" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2a6b9e0d9 code=0x7ffc0000 [ 77.546026][ T28] audit: type=1326 audit(1786548942.016:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1364 comm="syz.6.298" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2a6b9e0d9 code=0x7ffc0000 [ 77.584634][ T1110] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 77.615974][ T1110] usb 5-1: device descriptor read/8, error -71 [ 77.765742][ T1110] usb 5-1: device descriptor read/8, error -71 [ 78.024507][ T324] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 78.054502][ T1110] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 78.085616][ T1110] usb 5-1: device descriptor read/8, error -71 [ 78.205625][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.223347][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.233320][ T324] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 78.246470][ T324] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 78.255830][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.264696][ T1110] usb 5-1: device descriptor read/8, error -71 [ 78.283324][ T324] usb 2-1: config 0 descriptor?? [ 78.325671][ T1375] binder: 1374:1375 ioctl c018620c 200000000040 returned -22 [ 78.376771][ T1382] FAULT_INJECTION: forcing a failure. [ 78.376771][ T1382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.390014][ T1382] CPU: 0 PID: 1382 Comm: syz.6.303 Not tainted syzkaller #0 [ 78.390835][ T1110] usb usb5-port1: unable to enumerate USB device [ 78.397331][ T1382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.397346][ T1382] Call Trace: [ 78.397352][ T1382] [ 78.397360][ T1382] __dump_stack+0x21/0x24 [ 78.424289][ T1382] dump_stack_lvl+0x110/0x170 [ 78.429005][ T1382] ? __cfi_dump_stack_lvl+0x8/0x8 [ 78.434056][ T1382] dump_stack+0x15/0x24 [ 78.438244][ T1382] should_fail_ex+0x3bf/0x510 [ 78.442946][ T1382] should_fail+0xb/0x10 [ 78.447150][ T1382] should_fail_usercopy+0x1a/0x20 [ 78.452198][ T1382] copyin+0x20/0xa0 [ 78.456022][ T1382] _copy_from_iter+0x3cd/0xfe0 [ 78.460829][ T1382] ? __cfi__copy_from_iter+0x10/0x10 [ 78.466136][ T1382] ? __kasan_check_write+0x14/0x20 [ 78.471268][ T1382] ? __build_skb_around+0x24c/0x470 [ 78.476491][ T1382] ? __check_object_size+0x45a/0x600 [ 78.481792][ T1382] netlink_sendmsg+0x73b/0xbd0 [ 78.486592][ T1382] ? cgroup_rstat_updated+0xf0/0x360 [ 78.491895][ T1382] ? __cfi_netlink_sendmsg+0x10/0x10 [ 78.497204][ T1382] ? security_socket_sendmsg+0x93/0xb0 [ 78.502696][ T1382] __sys_sendto+0x4ac/0x660 [ 78.507215][ T1382] ? __cfi___sys_sendto+0x10/0x10 [ 78.512292][ T1382] ? do_user_addr_fault+0x9a5/0x1030 [ 78.517612][ T1382] __x64_sys_sendto+0xe5/0x100 [ 78.522397][ T1382] x64_sys_call+0x83/0x9a0 [ 78.526832][ T1382] do_syscall_64+0x4c/0xa0 [ 78.531308][ T1382] ? clear_bhb_loop+0x30/0x80 [ 78.535996][ T1382] ? clear_bhb_loop+0x30/0x80 [ 78.540706][ T1382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.546650][ T1382] RIP: 0033:0x7fd2a6b5e90e [ 78.551090][ T1382] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.570735][ T1382] RSP: 002b:00007fd2a7adde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 78.579167][ T1382] RAX: ffffffffffffffda RBX: 00007fd2a7adf6c0 RCX: 00007fd2a6b5e90e [ 78.587165][ T1382] RDX: 000000000000001c RSI: 00007fd2a7ade000 RDI: 0000000000000005 [ 78.595176][ T1382] RBP: 0000000000000000 R08: 00007fd2a7addf04 R09: 000000000000000c [ 78.603169][ T1382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 78.611157][ T1382] R13: 00007fd2a7addf58 R14: 00007fd2a7ade000 R15: 0000000000000000 [ 78.619155][ T1382] [ 78.659685][ T504] EXT4-fs (loop6): unmounting filesystem. [ 78.674744][ T1387] loop4: detected capacity change from 0 to 512 [ 78.686379][ T1387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.695367][ T1387] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.695960][ T324] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 78.709535][ T1387] EXT4-fs (loop4): orphan cleanup on readonly fs [ 78.719605][ T1387] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.306: bg 0: block 64: padding at end of block bitmap is not set [ 78.734111][ T1387] __quota_error: 24 callbacks suppressed [ 78.734124][ T1387] Quota error (device loop4): write_blk: dquota write failed [ 78.747312][ T1387] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 78.749533][ T324] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 78.757871][ T1387] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.306: Failed to acquire dquot type 0 [ 78.781197][ T415] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 78.789380][ T1387] EXT4-fs (loop4): 1 truncate cleaned up [ 78.795337][ T1387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.901053][ T1371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.915594][ T1387] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 78.921706][ T1371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.935567][ T1387] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 78.967046][ T415] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 78.976253][ T415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.984271][ T415] usb 4-1: Product: syz [ 78.988740][ T415] usb 4-1: Manufacturer: syz [ 78.993356][ T415] usb 4-1: SerialNumber: syz [ 79.023771][ T290] EXT4-fs (loop4): unmounting filesystem. [ 79.045305][ T1396] xt_hashlimit: size too large, truncated to 1048576 [ 79.066549][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.073671][ T1394] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.081718][ T1394] device bridge_slave_0 entered promiscuous mode [ 79.091038][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.098207][ T1394] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.119344][ T1394] device bridge_slave_1 entered promiscuous mode [ 79.200856][ T1375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 79.221007][ T1375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.245299][ T1375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.273971][ T1394] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.281044][ T1394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.288347][ T1394] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.295399][ T1394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.317616][ T415] rtl8150 4-1:1.0: couldn't reset the device [ 79.325022][ T415] rtl8150: probe of 4-1:1.0 failed with error -5 [ 79.338970][ T415] usb 4-1: USB disconnect, device number 25 [ 79.346397][ T8] device bridge_slave_1 left promiscuous mode [ 79.352978][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.360720][ T8] device bridge_slave_0 left promiscuous mode [ 79.374887][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.385060][ T8] device veth1_macvtap left promiscuous mode [ 79.391162][ T8] device veth0_vlan left promiscuous mode [ 79.557757][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.565617][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.573028][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.595774][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.604152][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.611234][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.618991][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.628755][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.635853][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.654826][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.663088][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.678783][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.689029][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.697467][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.705492][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.713042][ T1394] device veth0_vlan entered promiscuous mode [ 79.726830][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.735304][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.744922][ T1394] device veth1_macvtap entered promiscuous mode [ 79.755886][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.763766][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.772701][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.791733][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.805798][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.832118][ T1400] loop4: detected capacity change from 0 to 131072 [ 79.839923][ T1400] F2FS-fs (loop4): Test dummy encryption mode enabled [ 79.850229][ T1400] F2FS-fs (loop4): invalid crc value [ 79.896530][ T1400] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.939206][ T1400] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.990638][ T1396] syz.4.309 (pid 1396) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 80.034981][ C1] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 80.260817][ T28] audit: type=1400 audit(1786548944.896:2201): avc: denied { create } for pid=1395 comm="syz.4.309" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 80.579533][ T1415] loop4: detected capacity change from 0 to 2048 [ 80.595679][ T1415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.604183][ T1415] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.644696][ T28] audit: type=1400 audit(1786548945.286:2202): avc: denied { ioctl } for pid=1414 comm="syz.4.311" path="/63/file0/file0/file0" dev="loop4" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.671017][ T1415] fs-verity: sha512 using implementation "sha512-avx2" [ 80.854624][ T1427] loop3: detected capacity change from 1024 to 0 [ 80.856270][ T1110] usb 2-1: USB disconnect, device number 13 [ 80.938336][ T1415] fs-verity (loop4, inode 13): Error -28 writing Merkle tree block 1441 [ 80.948370][ T1415] fs-verity (loop4, inode 13): Error -28 building Merkle tree [ 81.018949][ T1432] FAULT_INJECTION: forcing a failure. [ 81.018949][ T1432] name failslab, interval 1, probability 0, space 0, times 0 [ 81.051209][ T1432] CPU: 1 PID: 1432 Comm: syz.3.316 Not tainted syzkaller #0 [ 81.058528][ T1432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.068594][ T1432] Call Trace: [ 81.071889][ T1432] [ 81.074852][ T1432] __dump_stack+0x21/0x24 [ 81.079203][ T1432] dump_stack_lvl+0x110/0x170 [ 81.083897][ T1432] ? __cfi_dump_stack_lvl+0x8/0x8 [ 81.089027][ T1432] dump_stack+0x15/0x24 [ 81.093198][ T1432] should_fail_ex+0x3bf/0x510 [ 81.097890][ T1432] __should_failslab+0xac/0xf0 [ 81.102686][ T1432] should_failslab+0x9/0x20 [ 81.107205][ T1432] __kmem_cache_alloc_node+0x3d/0x2d0 [ 81.112611][ T1432] ? genl_family_rcv_msg_attrs_parse+0xac/0x2a0 [ 81.118869][ T1432] ? genl_family_rcv_msg_attrs_parse+0xac/0x2a0 [ 81.125132][ T1432] __kmalloc+0xa4/0x1e0 [ 81.129306][ T1432] genl_family_rcv_msg_attrs_parse+0xac/0x2a0 [ 81.135386][ T1432] genl_family_rcv_msg_doit+0xe6/0x370 [ 81.140864][ T1432] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 81.146778][ T1432] ? genl_get_cmd+0xec/0x8d0 [ 81.151385][ T1432] ? memcpy+0x56/0x70 [ 81.155375][ T1432] genl_rcv_msg+0x618/0x7a0 [ 81.159897][ T1432] ? __alloc_skb+0x226/0x4a0 [ 81.164505][ T1432] ? netlink_sendmsg+0x635/0xbd0 [ 81.169454][ T1432] ? __sys_sendto+0x4ac/0x660 [ 81.174155][ T1432] ? __cfi_genl_rcv_msg+0x10/0x10 [ 81.179198][ T1432] ? __cfi_ctrl_getfamily+0x10/0x10 [ 81.184413][ T1432] ? __cfi_ctrl_dumpfamily+0x10/0x10 [ 81.189727][ T1432] netlink_rcv_skb+0x200/0x450 [ 81.194515][ T1432] ? __cfi_genl_rcv_msg+0x10/0x10 [ 81.199557][ T1432] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 81.204860][ T1432] ? __netlink_lookup+0x387/0x3b0 [ 81.209891][ T1432] genl_rcv+0x28/0x40 [ 81.213874][ T1432] netlink_unicast+0x8c1/0xa60 [ 81.218646][ T1432] netlink_sendmsg+0x8b9/0xbd0 [ 81.223419][ T1432] ? cgroup_rstat_updated+0xf0/0x360 [ 81.228723][ T1432] ? __cfi_netlink_sendmsg+0x10/0x10 [ 81.234011][ T1432] ? security_socket_sendmsg+0x93/0xb0 [ 81.239474][ T1432] __sys_sendto+0x4ac/0x660 [ 81.243979][ T1432] ? __cfi___sys_sendto+0x10/0x10 [ 81.249014][ T1432] ? do_user_addr_fault+0x9a5/0x1030 [ 81.254309][ T1432] __x64_sys_sendto+0xe5/0x100 [ 81.259069][ T1432] x64_sys_call+0x83/0x9a0 [ 81.263487][ T1432] do_syscall_64+0x4c/0xa0 [ 81.267910][ T1432] ? clear_bhb_loop+0x30/0x80 [ 81.272591][ T1432] ? clear_bhb_loop+0x30/0x80 [ 81.277282][ T1432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.283197][ T1432] RIP: 0033:0x7f8f6c55e90e [ 81.287616][ T1432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.307228][ T1432] RSP: 002b:00007f8f6d535e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 81.315671][ T1432] RAX: ffffffffffffffda RBX: 00007f8f6d5376c0 RCX: 00007f8f6c55e90e [ 81.323660][ T1432] RDX: 000000000000001c RSI: 00007f8f6d536000 RDI: 0000000000000005 [ 81.331653][ T1432] RBP: 0000000000000000 R08: 00007f8f6d535f04 R09: 000000000000000c [ 81.339629][ T1432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 81.347604][ T1432] R13: 00007f8f6d535f58 R14: 00007f8f6d536000 R15: 0000000000000000 [ 81.355603][ T1432] [ 81.384606][ T368] loop: Write error at byte offset 9223372036854841343, length 1024. [ 81.392718][ C0] I/O error, dev loop3, sector 128 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 81.402479][ C0] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 81.411280][ T491] EXT4-fs error (device loop3): kmmpd:186: comm kmmpd-loop3: Error writing to MMP block [ 81.425793][ T290] EXT4-fs (loop4): unmounting filesystem. [ 81.431701][ T368] loop: Write error at byte offset 9223372036854776831, length 1024. [ 81.439996][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 81.449408][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 81.458797][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 81.467133][ T491] EXT4-fs (loop3): I/O error while writing superblock [ 81.473903][ T491] EXT4-fs (loop3): Remounting filesystem read-only [ 81.811092][ T1444] binfmt_misc: register: failed to install interpreter file ./file2 [ 81.827860][ T1425] loop8: detected capacity change from 0 to 131072 [ 81.848950][ T1425] F2FS-fs (loop8): Wrong SIT boundary, start(1536) end(4278192640) blocks(1024) [ 81.874488][ T1425] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 81.885497][ T1425] F2FS-fs (loop8): invalid crc value [ 81.891714][ T1425] F2FS-fs (loop8): Found nat_bits in checkpoint [ 81.923038][ T1425] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 81.935499][ T1425] F2FS-fs (loop8): Try to recover 1th superblock, ret: -30 [ 81.942776][ T1425] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 82.088175][ T1447] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 82.108603][ T1447] SELinux: failed to load policy [ 82.131041][ T1449] kvm [1448]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 83.064529][ T324] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 83.535635][ T324] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 83.564321][ T324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.602717][ T324] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 83.627571][ T324] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 83.655903][ T28] audit: type=1400 audit(1786548948.296:2203): avc: denied { setattr } for pid=1470 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 83.675518][ T324] usb 5-1: Manufacturer: syz [ 83.681147][ T324] usb 5-1: config 0 descriptor?? [ 83.807428][ T1473] loop8: detected capacity change from 0 to 512 [ 83.824536][ T1473] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.838359][ T1473] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 83.851713][ T1473] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.867871][ T1473] EXT4-fs (loop8): 1 truncate cleaned up [ 83.873554][ T1473] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 83.888921][ T1477] SELinux: failed to load policy [ 83.898748][ T28] audit: type=1400 audit(1786548948.536:2204): avc: denied { getopt } for pid=1472 comm="syz.8.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.923012][ T1473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.327'. [ 83.932579][ T1473] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 83.948171][ T1394] EXT4-fs (loop8): unmounting filesystem. [ 83.954629][ T1110] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 83.973289][ T1481] tmpfs: Unknown parameter 'ó' [ 84.184511][ T6] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 84.254559][ T1110] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 84.311485][ T1490] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.318750][ T1490] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.326283][ T1490] device bridge_slave_0 entered promiscuous mode [ 84.333285][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.340483][ T1490] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.347986][ T1490] device bridge_slave_1 entered promiscuous mode [ 84.375635][ T6] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 84.386571][ T6] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 84.404599][ T291] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 84.413374][ T6] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 84.422604][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.430682][ T6] usb 4-1: Product: syz [ 84.434864][ T6] usb 4-1: Manufacturer: syz [ 84.435163][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.439467][ T6] usb 4-1: SerialNumber: syz [ 84.451174][ T1490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.458512][ T1490] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.465578][ T1490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.474084][ T1110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.485078][ T1110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.495306][ T1110] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.508935][ T324] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 84.516775][ T1110] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.526157][ T1110] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.534368][ T368] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.541857][ T368] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.543607][ T1110] usb 9-1: config 0 descriptor?? [ 84.555058][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.562593][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.586147][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.594541][ T368] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.601604][ T368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.609114][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.617526][ T368] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.624620][ T368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.632199][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.640348][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.657628][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.671985][ T1490] device veth0_vlan entered promiscuous mode [ 84.678950][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.687935][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.695765][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.711589][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.721941][ T1490] device veth1_macvtap entered promiscuous mode [ 84.728713][ T324] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.735673][ T6] usb 4-1: Can't get UAC3 power state for id 10 [ 84.750785][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.752844][ T324] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.763869][ T6] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 84.772145][ T324] usb 2-1: config 0 interface 0 has no altsetting 0 [ 84.786148][ T324] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 84.797057][ T368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.804651][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.810072][ T6] usb 4-1: USB disconnect, device number 26 [ 84.833424][ T324] usb 2-1: config 0 descriptor?? [ 84.973133][ T1110] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 84.987265][ T1110] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 85.036019][ T577] udevd[577]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.145002][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.177462][ T1483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.186683][ T1483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.245757][ T324] input: HID 04fc:05d8 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04FC:05D8.000C/input/input7 [ 85.258682][ T324] sunplus 0003:04FC:05D8.000C: input,hidraw1: USB HID v80.00 Joystick [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 85.406942][ T415] usb 5-1: USB disconnect, device number 19 [ 85.494531][ T6] usb 2-1: USB disconnect, device number 14 [ 85.916888][ T1513] loop4: detected capacity change from 0 to 8192 [ 85.957146][ T1513] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.748991][ T367] loop: Write error at byte offset 9223372036854841343, length 1024. [ 86.762685][ C1] I/O error, dev loop3, sector 128 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 86.772397][ C1] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 86.822342][ T1519] SELinux: failed to load policy [ 86.908040][ C0] plantronics 0003:047F:FFFF.000B: usb_submit_urb(ctrl) failed: -1 [ 86.917712][ T324] usb 9-1: USB disconnect, device number 2 [ 87.924784][ T1539] FAULT_INJECTION: forcing a failure. [ 87.924784][ T1539] name failslab, interval 1, probability 0, space 0, times 0 [ 87.954492][ T1539] CPU: 1 PID: 1539 Comm: syz.3.346 Not tainted syzkaller #0 [ 87.961838][ T1539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.971910][ T1539] Call Trace: [ 87.975193][ T1539] [ 87.978132][ T1539] __dump_stack+0x21/0x24 [ 87.982493][ T1539] dump_stack_lvl+0x110/0x170 [ 87.987208][ T1539] ? __cfi_dump_stack_lvl+0x8/0x8 [ 87.992269][ T1539] ? __cfi_avc_has_perm+0x10/0x10 [ 87.997328][ T1539] dump_stack+0x15/0x24 [ 88.001514][ T1539] should_fail_ex+0x3bf/0x510 [ 88.006208][ T1539] __should_failslab+0xac/0xf0 [ 88.010990][ T1539] should_failslab+0x9/0x20 [ 88.015510][ T1539] __kmem_cache_alloc_node+0x3d/0x2d0 [ 88.020896][ T1539] ? __request_module+0x2a7/0x910 [ 88.025940][ T1539] ? __request_module+0x2a7/0x910 [ 88.030980][ T1539] kmalloc_trace+0x29/0xb0 [ 88.035412][ T1539] ? ctrl_getfamily+0x233/0x5a0 [ 88.040278][ T1539] __request_module+0x2a7/0x910 [ 88.045143][ T1539] ? radix_tree_next_chunk+0x95a/0xb30 [ 88.050632][ T1539] ? __cfi___request_module+0x10/0x10 [ 88.056020][ T1539] ? __kasan_check_write+0x14/0x20 [ 88.061143][ T1539] ? mutex_unlock+0x8f/0x230 [ 88.065788][ T1539] ? __cfi_mutex_unlock+0x10/0x10 [ 88.070848][ T1539] ctrl_getfamily+0x233/0x5a0 [ 88.075546][ T1539] ? __nla_parse+0x42/0x60 [ 88.079988][ T1539] ? __cfi_ctrl_getfamily+0x10/0x10 [ 88.085209][ T1539] ? genl_family_rcv_msg_attrs_parse+0x214/0x2a0 [ 88.091564][ T1539] genl_family_rcv_msg_doit+0x24f/0x370 [ 88.097128][ T1539] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 88.103045][ T1539] ? memcpy+0x56/0x70 [ 88.107049][ T1539] genl_rcv_msg+0x618/0x7a0 [ 88.111579][ T1539] ? __alloc_skb+0x226/0x4a0 [ 88.116190][ T1539] ? netlink_sendmsg+0x635/0xbd0 [ 88.121145][ T1539] ? __sys_sendto+0x4ac/0x660 [ 88.125848][ T1539] ? __cfi_genl_rcv_msg+0x10/0x10 [ 88.130895][ T1539] ? __cfi_ctrl_getfamily+0x10/0x10 [ 88.136218][ T1539] ? __cfi_ctrl_dumpfamily+0x10/0x10 [ 88.141531][ T1539] netlink_rcv_skb+0x200/0x450 [ 88.146308][ T1539] ? __cfi_genl_rcv_msg+0x10/0x10 [ 88.151353][ T1539] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 88.156669][ T1539] ? __netlink_lookup+0x387/0x3b0 [ 88.161719][ T1539] genl_rcv+0x28/0x40 [ 88.165741][ T1539] netlink_unicast+0x8c1/0xa60 [ 88.170550][ T1539] netlink_sendmsg+0x8b9/0xbd0 [ 88.175331][ T1539] ? cgroup_rstat_updated+0xf0/0x360 [ 88.180671][ T1539] ? __cfi_netlink_sendmsg+0x10/0x10 [ 88.185977][ T1539] ? security_socket_sendmsg+0x93/0xb0 [ 88.191446][ T1539] __sys_sendto+0x4ac/0x660 [ 88.195966][ T1539] ? __cfi___sys_sendto+0x10/0x10 [ 88.201106][ T1539] ? do_user_addr_fault+0x9a5/0x1030 [ 88.206414][ T1539] __x64_sys_sendto+0xe5/0x100 [ 88.211201][ T1539] x64_sys_call+0x83/0x9a0 [ 88.215648][ T1539] do_syscall_64+0x4c/0xa0 [ 88.220103][ T1539] ? clear_bhb_loop+0x30/0x80 [ 88.224811][ T1539] ? clear_bhb_loop+0x30/0x80 [ 88.229517][ T1539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.235450][ T1539] RIP: 0033:0x7f8f6c55e90e [ 88.239885][ T1539] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 88.259512][ T1539] RSP: 002b:00007f8f6d535e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 88.267968][ T1539] RAX: ffffffffffffffda RBX: 00007f8f6d5376c0 RCX: 00007f8f6c55e90e [ 88.275967][ T1539] RDX: 000000000000001c RSI: 00007f8f6d536000 RDI: 0000000000000005 [ 88.283964][ T1539] RBP: 0000000000000000 R08: 00007f8f6d535f04 R09: 000000000000000c [ 88.291946][ T1539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 88.299930][ T1539] R13: 00007f8f6d535f58 R14: 00007f8f6d536000 R15: 0000000000000000 [ 88.307930][ T1539] [ 88.314484][ T415] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 88.451259][ T1546] loop4: detected capacity change from 0 to 512 [ 88.475064][ T1546] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 88.515870][ T415] usb 10-1: unable to get BOS descriptor or descriptor too short [ 88.528765][ T415] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 88.541736][ T571] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 88.551946][ T415] usb 10-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 88.571301][ T415] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.584645][ T415] usb 10-1: Product: syz [ 88.588923][ T415] usb 10-1: Manufacturer: syz [ 88.603752][ T415] usb 10-1: SerialNumber: syz [ 88.654471][ T291] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 88.729723][ T1536] loop8: detected capacity change from 0 to 131072 [ 88.740652][ T1536] F2FS-fs (loop8): Wrong SIT boundary, start(1536) end(4278192640) blocks(1024) [ 88.750829][ T1536] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 88.761636][ T1536] F2FS-fs (loop8): invalid crc value [ 88.781641][ T1536] F2FS-fs (loop8): Found nat_bits in checkpoint [ 88.818963][ T415] snd-usb-audio: probe of 10-1:1.1 failed with error -2 [ 88.826780][ T1536] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 88.836844][ T415] usb 10-1: USB disconnect, device number 2 [ 88.844690][ T324] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 88.852783][ T1536] F2FS-fs (loop8): Try to recover 1th superblock, ret: -30 [ 88.853488][ T291] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 88.860225][ T1536] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 88.909197][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.940804][ T291] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 88.955551][ T291] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 88.973778][ T291] usb 4-1: Manufacturer: syz [ 88.986755][ T291] usb 4-1: config 0 descriptor?? [ 89.034693][ T324] usb 5-1: device descriptor read/64, error -71 [ 89.090666][ T1554] SELinux: failed to load policy [ 89.324478][ T324] usb 5-1: device descriptor read/64, error -71 [ 89.594475][ T324] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 89.614465][ T389] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 89.744512][ T324] usb 5-1: device descriptor read/64, error -71 [ 89.802664][ T1576] loop8: detected capacity change from 0 to 512 [ 89.814755][ T389] usb 2-1: Using ep0 maxpacket: 32 [ 89.821001][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.832241][ T389] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18419, setting to 1024 [ 89.843457][ T389] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.852590][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.861476][ T389] usb 2-1: config 0 descriptor?? [ 89.866764][ T1563] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.867688][ T571] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.881802][ T389] hub 2-1:0.0: USB hub found [ 90.014481][ T324] usb 5-1: device descriptor read/64, error -71 [ 90.095648][ T389] hub 2-1:0.0: 1 port detected [ 90.134565][ T324] usb usb5-port1: attempt power cycle [ 90.252461][ T1580] FAULT_INJECTION: forcing a failure. [ 90.252461][ T1580] name failslab, interval 1, probability 0, space 0, times 0 [ 90.265954][ T1580] CPU: 1 PID: 1580 Comm: syz.9.360 Not tainted syzkaller #0 [ 90.273277][ T1580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.283366][ T1580] Call Trace: [ 90.286707][ T1580] [ 90.289652][ T1580] __dump_stack+0x21/0x24 [ 90.294009][ T1580] dump_stack_lvl+0x110/0x170 [ 90.298719][ T1580] ? __cfi_dump_stack_lvl+0x8/0x8 [ 90.303772][ T1580] dump_stack+0x15/0x24 [ 90.304013][ T1563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 90.307956][ T1580] should_fail_ex+0x3bf/0x510 [ 90.307981][ T1580] __should_failslab+0xac/0xf0 [ 90.326289][ T1580] should_failslab+0x9/0x20 [ 90.330816][ T1580] __kmem_cache_alloc_node+0x3d/0x2d0 [ 90.336216][ T1580] ? __request_module+0x2c3/0x910 [ 90.337540][ T1563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.341263][ T1580] ? __request_module+0x2c3/0x910 [ 90.341285][ T1580] __kmalloc_node_track_caller+0xa1/0x1e0 [ 90.360443][ T1580] ? __kasan_kmalloc+0x95/0xb0 [ 90.365241][ T1580] kstrdup+0x3b/0x80 [ 90.367717][ T1563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.369154][ T1580] __request_module+0x2c3/0x910 [ 90.381820][ T1580] ? radix_tree_next_chunk+0x95a/0xb30 [ 90.387316][ T1580] ? __cfi___request_module+0x10/0x10 [ 90.392726][ T1580] ? __kasan_check_write+0x14/0x20 [ 90.397857][ T1580] ? mutex_unlock+0x8f/0x230 [ 90.402486][ T1580] ? __cfi_mutex_unlock+0x10/0x10 [ 90.407563][ T1580] ctrl_getfamily+0x233/0x5a0 [ 90.412268][ T1580] ? __nla_parse+0x42/0x60 [ 90.416724][ T1580] ? __cfi_ctrl_getfamily+0x10/0x10 [ 90.421952][ T1580] ? genl_family_rcv_msg_attrs_parse+0x214/0x2a0 [ 90.428308][ T1580] genl_family_rcv_msg_doit+0x24f/0x370 [ 90.433890][ T1580] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 90.439808][ T1580] ? memcpy+0x56/0x70 [ 90.443803][ T1580] genl_rcv_msg+0x618/0x7a0 [ 90.448330][ T1580] ? __alloc_skb+0x226/0x4a0 [ 90.450465][ T1578] loop8: detected capacity change from 0 to 131072 [ 90.452944][ T1580] ? netlink_sendmsg+0x635/0xbd0 [ 90.452967][ T1580] ? __sys_sendto+0x4ac/0x660 [ 90.469110][ T1580] ? __cfi_genl_rcv_msg+0x10/0x10 [ 90.472983][ T1578] F2FS-fs (loop8): Wrong SIT boundary, start(1536) end(4278192640) blocks(1024) [ 90.474158][ T1580] ? __cfi_ctrl_getfamily+0x10/0x10 [ 90.474186][ T1580] ? __cfi_ctrl_dumpfamily+0x10/0x10 [ 90.493707][ T1580] netlink_rcv_skb+0x200/0x450 [ 90.498693][ T1580] ? __cfi_genl_rcv_msg+0x10/0x10 [ 90.499591][ T1578] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 90.503747][ T1580] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 90.503773][ T1580] ? __netlink_lookup+0x387/0x3b0 [ 90.522241][ T1580] genl_rcv+0x28/0x40 [ 90.526244][ T1580] netlink_unicast+0x8c1/0xa60 [ 90.531055][ T1580] netlink_sendmsg+0x8b9/0xbd0 [ 90.533114][ T1578] F2FS-fs (loop8): invalid crc value [ 90.535837][ T1580] ? cgroup_rstat_updated+0xf0/0x360 [ 90.535862][ T1580] ? __cfi_netlink_sendmsg+0x10/0x10 [ 90.551724][ T1580] ? security_socket_sendmsg+0x93/0xb0 [ 90.557216][ T1580] __sys_sendto+0x4ac/0x660 [ 90.561758][ T1580] ? __cfi___sys_sendto+0x10/0x10 [ 90.566815][ T1580] ? do_user_addr_fault+0x9a5/0x1030 [ 90.572134][ T1580] __x64_sys_sendto+0xe5/0x100 [ 90.576932][ T1580] x64_sys_call+0x83/0x9a0 [ 90.579537][ T1578] F2FS-fs (loop8): Found nat_bits in checkpoint [ 90.581381][ T1580] do_syscall_64+0x4c/0xa0 [ 90.592056][ T1580] ? clear_bhb_loop+0x30/0x80 [ 90.596744][ T1580] ? clear_bhb_loop+0x30/0x80 [ 90.601447][ T1580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.602853][ T389] usb 2-1: USB disconnect, device number 15 [ 90.607396][ T1580] RIP: 0033:0x7f2a24b5e90e [ 90.607418][ T1580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 90.637329][ T1580] RSP: 002b:00007f2a25984e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 90.645855][ T1580] RAX: ffffffffffffffda RBX: 00007f2a259866c0 RCX: 00007f2a24b5e90e [ 90.653845][ T1580] RDX: 000000000000001c RSI: 00007f2a25985000 RDI: 0000000000000005 [ 90.661824][ T1580] RBP: 0000000000000000 R08: 00007f2a25984f04 R09: 000000000000000c [ 90.669800][ T1580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 90.677095][ T1578] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 90.677788][ T1580] R13: 00007f2a25984f58 R14: 00007f2a25985000 R15: 0000000000000000 [ 90.677812][ T1580] [ 90.699031][ T1578] F2FS-fs (loop8): Try to recover 1th superblock, ret: -30 [ 90.707161][ T1578] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 90.774584][ T324] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 90.788850][ T1584] SELinux: failed to load policy [ 90.815481][ T324] usb 5-1: device descriptor read/8, error -71 [ 90.965615][ T324] usb 5-1: device descriptor read/8, error -71 [ 91.167578][ T28] audit: type=1400 audit(1786548955.806:2205): avc: denied { setopt } for pid=1592 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.187165][ T6] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 91.197795][ T1593] incfs: Error accessing: ./file0. [ 91.203018][ T1593] incfs: mount failed -2 [ 91.234463][ T324] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 91.282469][ T28] audit: type=1400 audit(1786548955.916:2206): avc: denied { mount } for pid=1596 comm="syz.1.366" name="/" dev="configfs" ino=14244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.286298][ T324] usb 5-1: device descriptor read/8, error -71 [ 91.333027][ T1599] tipc: Started in network mode [ 91.338364][ T1599] tipc: Node identity 4aed62aec429, cluster identity 4711 [ 91.346280][ T1599] tipc: Enabled bearer , priority 10 [ 91.354184][ T1598] tipc: Resetting bearer [ 91.361863][ T1598] tipc: Disabling bearer [ 91.374484][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 91.381434][ T6] usb 10-1: unable to get BOS descriptor or descriptor too short [ 91.394602][ T389] usb 4-1: USB disconnect, device number 27 [ 91.395616][ T1589] loop8: detected capacity change from 0 to 131072 [ 91.404602][ T6] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 91.417049][ T6] usb 10-1: can't read configurations, error -61 [ 91.431492][ T1589] F2FS-fs (loop8): invalid crc value [ 91.464992][ T324] usb 5-1: device descriptor read/8, error -71 [ 91.482105][ T1589] F2FS-fs (loop8): Found nat_bits in checkpoint [ 91.521385][ T1616] FAULT_INJECTION: forcing a failure. [ 91.521385][ T1616] name failslab, interval 1, probability 0, space 0, times 0 [ 91.557511][ T1616] CPU: 0 PID: 1616 Comm: syz.1.371 Not tainted syzkaller #0 [ 91.564843][ T1616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.574917][ T1616] Call Trace: [ 91.578240][ T1616] [ 91.581207][ T1616] __dump_stack+0x21/0x24 [ 91.585575][ T1616] dump_stack_lvl+0x110/0x170 [ 91.590377][ T1616] ? __cfi_dump_stack_lvl+0x8/0x8 [ 91.595430][ T1616] dump_stack+0x15/0x24 [ 91.599602][ T1616] should_fail_ex+0x3bf/0x510 [ 91.604310][ T1616] __should_failslab+0xac/0xf0 [ 91.609128][ T1616] should_failslab+0x9/0x20 [ 91.613646][ T1616] __kmem_cache_alloc_node+0x3d/0x2d0 [ 91.619048][ T1616] ? call_usermodehelper_setup+0x8e/0x210 [ 91.624808][ T1616] ? call_usermodehelper_setup+0x8e/0x210 [ 91.630563][ T1616] kmalloc_trace+0x29/0xb0 [ 91.631570][ T324] usb usb5-port1: unable to enumerate USB device [ 91.635017][ T1616] call_usermodehelper_setup+0x8e/0x210 [ 91.635044][ T1616] ? __cfi_free_modprobe_argv+0x10/0x10 [ 91.652463][ T1616] __request_module+0x391/0x910 [ 91.657384][ T1616] ? radix_tree_next_chunk+0x95a/0xb30 [ 91.662899][ T1616] ? __cfi___request_module+0x10/0x10 [ 91.668295][ T1616] ? __kasan_check_write+0x14/0x20 [ 91.673431][ T1616] ? mutex_unlock+0x8f/0x230 [ 91.678051][ T1616] ? __cfi_mutex_unlock+0x10/0x10 [ 91.683111][ T1616] ctrl_getfamily+0x233/0x5a0 [ 91.687816][ T1616] ? __nla_parse+0x42/0x60 [ 91.692258][ T1616] ? __cfi_ctrl_getfamily+0x10/0x10 [ 91.697484][ T1616] ? genl_family_rcv_msg_attrs_parse+0x214/0x2a0 [ 91.703840][ T1616] genl_family_rcv_msg_doit+0x24f/0x370 [ 91.709418][ T1616] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 91.715344][ T1616] ? memcpy+0x56/0x70 [ 91.719366][ T1616] genl_rcv_msg+0x618/0x7a0 [ 91.723893][ T1616] ? __alloc_skb+0x226/0x4a0 [ 91.728504][ T1616] ? netlink_sendmsg+0x635/0xbd0 [ 91.733474][ T1616] ? __sys_sendto+0x4ac/0x660 [ 91.738172][ T1616] ? __cfi_genl_rcv_msg+0x10/0x10 [ 91.743245][ T1616] ? __cfi_ctrl_getfamily+0x10/0x10 [ 91.748500][ T1616] ? __cfi_ctrl_dumpfamily+0x10/0x10 [ 91.753829][ T1616] netlink_rcv_skb+0x200/0x450 [ 91.758641][ T1616] ? __cfi_genl_rcv_msg+0x10/0x10 [ 91.763703][ T1616] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 91.769009][ T1616] ? __netlink_lookup+0x387/0x3b0 [ 91.774063][ T1616] genl_rcv+0x28/0x40 [ 91.778079][ T1616] netlink_unicast+0x8c1/0xa60 [ 91.782883][ T1616] netlink_sendmsg+0x8b9/0xbd0 [ 91.787708][ T1616] ? cgroup_rstat_updated+0xf0/0x360 [ 91.793054][ T1616] ? __cfi_netlink_sendmsg+0x10/0x10 [ 91.798375][ T1616] ? security_socket_sendmsg+0x93/0xb0 [ 91.803878][ T1616] __sys_sendto+0x4ac/0x660 [ 91.808425][ T1616] ? __cfi___sys_sendto+0x10/0x10 [ 91.813482][ T1616] ? do_user_addr_fault+0x9a5/0x1030 [ 91.815782][ T367] loop: Write error at byte offset 9223372036854841343, length 1024. [ 91.818795][ T1616] __x64_sys_sendto+0xe5/0x100 [ 91.831628][ T1616] x64_sys_call+0x83/0x9a0 [ 91.836075][ T1616] do_syscall_64+0x4c/0xa0 [ 91.840524][ T1616] ? clear_bhb_loop+0x30/0x80 [ 91.845216][ T1616] ? clear_bhb_loop+0x30/0x80 [ 91.846967][ C1] I/O error, dev loop3, sector 128 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 91.849908][ T1616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.859623][ C1] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 91.865459][ T1616] RIP: 0033:0x7f75bc15e90e [ 91.865479][ T1616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 91.897836][ T1616] RSP: 002b:00007f75bd00ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 91.906277][ T1616] RAX: ffffffffffffffda RBX: 00007f75bd00e6c0 RCX: 00007f75bc15e90e [ 91.914265][ T1616] RDX: 000000000000001c RSI: 00007f75bd00d000 RDI: 0000000000000005 [ 91.922266][ T1616] RBP: 0000000000000000 R08: 00007f75bd00cf04 R09: 000000000000000c [ 91.930279][ T1616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 91.938274][ T1616] R13: 00007f75bd00cf58 R14: 00007f75bd00d000 R15: 0000000000000000 [ 91.946274][ T1616] [ 91.949753][ T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 91.962255][ T1589] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 92.012855][ T1623] SELinux: failed to load policy [ 92.057172][ T28] audit: type=1400 audit(1786548956.696:2207): avc: denied { ioctl } for pid=1629 comm="syz.4.376" path="socket:[23271]" dev="sockfs" ino=23271 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.111633][ T1632] netlink: 176 bytes leftover after parsing attributes in process `syz.4.377'. [ 92.123725][ T28] audit: type=1400 audit(1786548956.766:2208): avc: denied { setopt } for pid=1631 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 92.134565][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 92.151490][ T6] usb 10-1: unable to get BOS descriptor or descriptor too short [ 92.171213][ T6] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 92.180078][ T1634] loop4: detected capacity change from 0 to 128 [ 92.188091][ T6] usb 10-1: can't read configurations, error -61 [ 92.194955][ T6] usb usb10-port1: attempt power cycle [ 92.208989][ T1634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.218683][ T1634] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.294549][ T415] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 92.363709][ T290] EXT4-fs (loop4): unmounting filesystem. [ 92.394947][ T1645] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 92.454599][ T415] usb 2-1: device descriptor read/64, error -71 [ 92.482761][ T1653] mmap: syz.4.383 (1653) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.524788][ T28] audit: type=1400 audit(1786548957.166:2209): avc: denied { search } for pid=1655 comm="syz.4.384" name="/" dev="configfs" ino=14244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.594544][ T389] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 92.614526][ T6] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 92.644944][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 92.651463][ T6] usb 10-1: unable to get BOS descriptor or descriptor too short [ 92.660271][ T6] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 92.667979][ T6] usb 10-1: can't read configurations, error -61 [ 92.724533][ T415] usb 2-1: device descriptor read/64, error -71 [ 92.775555][ T389] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 92.783949][ T389] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.794496][ T389] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 92.803631][ T389] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 92.811637][ T389] usb 4-1: Manufacturer: syz [ 92.816305][ T6] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 92.825610][ T389] usb 4-1: config 0 descriptor?? [ 92.834510][ T1110] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 92.844984][ T6] usb 10-1: Using ep0 maxpacket: 16 [ 92.851643][ T6] usb 10-1: unable to get BOS descriptor or descriptor too short [ 92.860607][ T6] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 92.868359][ T6] usb 10-1: can't read configurations, error -61 [ 92.874838][ T6] usb usb10-port1: unable to enumerate USB device [ 92.994522][ T415] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 93.015525][ T1110] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.025705][ T1110] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 93.039588][ T1110] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.048689][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.056747][ T1110] usb 5-1: SerialNumber: syz [ 93.144497][ T415] usb 2-1: device descriptor read/64, error -71 [ 93.268777][ T1110] cdc_ether 5-1:1.0: skipping garbage [ 93.274274][ T1110] usb 5-1: bad CDC descriptors [ 93.283605][ T1110] usb 5-1: USB disconnect, device number 24 [ 93.414525][ T415] usb 2-1: device descriptor read/64, error -71 [ 93.534517][ T415] usb usb2-port1: attempt power cycle [ 93.926074][ T1680] loop9: detected capacity change from 0 to 128 [ 93.932748][ T1680] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.946942][ T415] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 93.956295][ T1680] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.005634][ T415] usb 2-1: device descriptor read/8, error -71 [ 94.072436][ T367] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.101692][ T1684] netlink: 'syz.9.394': attribute type 12 has an invalid length. [ 94.109930][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 94.133387][ T1684] loop9: detected capacity change from 0 to 256 [ 94.155549][ T415] usb 2-1: device descriptor read/8, error -71 [ 94.166434][ T1684] FAT-fs (loop9): Directory bread(block 64) failed [ 94.172980][ T1684] FAT-fs (loop9): Directory bread(block 65) failed [ 94.194475][ T1684] FAT-fs (loop9): Directory bread(block 66) failed [ 94.201018][ T1684] FAT-fs (loop9): Directory bread(block 67) failed [ 94.224524][ T1684] FAT-fs (loop9): Directory bread(block 68) failed [ 94.231074][ T1684] FAT-fs (loop9): Directory bread(block 69) failed [ 94.250723][ T1684] FAT-fs (loop9): Directory bread(block 70) failed [ 94.262722][ T1684] FAT-fs (loop9): Directory bread(block 71) failed [ 94.269445][ T1684] FAT-fs (loop9): Directory bread(block 72) failed [ 94.276027][ T1684] FAT-fs (loop9): Directory bread(block 73) failed [ 94.383448][ T1689] netlink: 'syz.8.395': attribute type 2 has an invalid length. [ 94.395231][ T1689] loop8: detected capacity change from 0 to 512 [ 94.434521][ T415] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 94.475470][ T415] usb 2-1: device descriptor read/8, error -71 [ 94.486126][ T571] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 94.635422][ T415] usb 2-1: device descriptor read/8, error -71 [ 94.682910][ T1697] incfs: Can't find or create .index dir in ./cgroup [ 94.690721][ T1697] incfs: mount failed -22 [ 94.696882][ T1697] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 94.707205][ T1697] SELinux: failed to load policy [ 94.712846][ T1699] incfs: Can't find or create .index dir in ./cgroup [ 94.720170][ T1699] incfs: mount failed -22 [ 94.726092][ T1699] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 94.736705][ T1699] SELinux: failed to load policy [ 94.754858][ T415] usb usb2-port1: unable to enumerate USB device [ 94.760623][ T28] audit: type=1326 audit(1786548959.396:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.8.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc3b9e0d9 code=0x7ffc0000 [ 94.785986][ T28] audit: type=1326 audit(1786548959.396:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.8.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc3b9e0d9 code=0x7ffc0000 [ 94.810914][ T28] audit: type=1326 audit(1786548959.396:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.8.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcc3b9e0d9 code=0x7ffc0000 [ 94.836258][ T28] audit: type=1326 audit(1786548959.396:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.8.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc3b9e0d9 code=0x7ffc0000 [ 94.861651][ T28] audit: type=1326 audit(1786548959.396:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.8.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efcc3b9e0d9 code=0x7ffc0000 [ 94.872368][ T1705] loop8: detected capacity change from 0 to 512 [ 94.909373][ T1705] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 95.188824][ T1795] netlink: 20 bytes leftover after parsing attributes in process `syz.9.402'. [ 95.475971][ T324] usb 4-1: USB disconnect, device number 28 [ 95.569694][ T1802] overlayfs: unrecognized mount option "verity=require" or missing value [ 95.603338][ T1791] Disabled LAPIC found during irq injection [ 95.609342][ T1791] kvm: apic: phys broadcast and lowest prio [ 95.620053][ T1806] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 95.658220][ T1814] incfs: Can't find or create .incomplete dir in ./cgroup [ 95.747413][ T1815] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 95.772525][ T1814] incfs: mount failed -22 [ 95.773433][ T1815] SELinux: failed to load policy [ 96.038787][ T1827] netlink: 8 bytes leftover after parsing attributes in process `syz.9.414'. [ 96.065245][ T1827] device ip6erspan0 entered promiscuous mode [ 96.084548][ T415] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 96.209798][ T1831] loop9: detected capacity change from 0 to 512 [ 96.242635][ T1831] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 96.274471][ T415] usb 5-1: Using ep0 maxpacket: 32 [ 96.280981][ T1831] EXT4-fs (loop9): 1 truncate cleaned up [ 96.284205][ T415] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 96.294626][ T1831] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 96.299032][ T415] usb 5-1: config 0 has no interface number 0 [ 96.330577][ T415] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 96.344002][ T1831] EXT4-fs error (device loop9) in ext4_setattr:5697: Corrupt filesystem [ 96.349934][ T415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.360443][ T415] usb 5-1: Product: syz [ 96.364654][ T415] usb 5-1: Manufacturer: syz [ 96.369273][ T415] usb 5-1: SerialNumber: syz [ 96.374905][ T415] usb 5-1: config 0 descriptor?? [ 96.380753][ T415] smsc95xx v2.0.0 [ 96.418952][ T1490] EXT4-fs (loop9): unmounting filesystem. [ 96.580549][ T415] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 96.600412][ T415] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 96.621474][ T415] usb 5-1: USB disconnect, device number 25 [ 96.678565][ T1847] kvm [1846]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xb3b6 [ 96.688852][ T1847] kvm [1846]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xf0f8 [ 96.698758][ T1847] kvm [1846]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xc899 [ 96.774536][ T389] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 96.824659][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 96.824674][ T28] audit: type=1326 audit(1786548961.466:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.8.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc3b9e0d9 code=0x7ffc0000 [ 96.824914][ T1774] loop: Write error at byte offset 9223372036854841343, length 1024. [ 96.834639][ T28] audit: type=1326 audit(1786548961.466:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1702 comm="syz.8.401" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc3b9e0d9 code=0x7ffc0000 [ 96.856780][ C0] I/O error, dev loop3, sector 128 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 96.897979][ C0] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 96.907662][ T1851] SELinux: failed to load policy [ 96.934523][ T1853] fuse: Unknown parameter 'oroup_id' [ 96.955750][ T389] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 96.967512][ T389] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.986574][ T389] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 97.004489][ T389] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 97.012643][ T389] usb 10-1: Manufacturer: syz [ 97.035181][ T389] usb 10-1: config 0 descriptor?? [ 97.093399][ T1860] Invalid ELF header len 9 [ 97.098124][ T28] audit: type=1400 audit(1786548961.726:2226): avc: denied { module_load } for pid=1859 comm="syz.1.426" path="/97/file1" dev="tmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 97.281053][ T1881] loop4: detected capacity change from 0 to 128 [ 97.309286][ T1881] FAT-fs (loop4): Directory bread(block 524322) failed [ 97.316493][ T1881] FAT-fs (loop4): Directory bread(block 524323) failed [ 97.323415][ T1881] FAT-fs (loop4): Directory bread(block 524324) failed [ 97.330845][ T1881] FAT-fs (loop4): Directory bread(block 524325) failed [ 97.337903][ T1881] FAT-fs (loop4): Directory bread(block 524326) failed [ 97.345147][ T1881] FAT-fs (loop4): Directory bread(block 524327) failed [ 97.363290][ T1881] FAT-fs (loop4): Directory bread(block 524328) failed [ 97.370466][ T1881] FAT-fs (loop4): Directory bread(block 524329) failed [ 97.384611][ T1394] EXT4-fs (loop8): unmounting filesystem. [ 97.392043][ T1881] FAT-fs (loop4): Directory bread(block 524322) failed [ 97.400213][ T28] audit: type=1400 audit(1786548962.046:2227): avc: denied { ioctl } for pid=1883 comm="syz.1.434" path="socket:[24174]" dev="sockfs" ino=24174 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.411226][ T1881] FAT-fs (loop4): Directory bread(block 524323) failed [ 97.477801][ T1895] xt_TCPMSS: Only works on TCP SYN packets [ 97.495940][ T1894] xt_TCPMSS: Only works on TCP SYN packets [ 97.714504][ T389] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 97.884484][ T324] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 97.904552][ T389] usb 2-1: Using ep0 maxpacket: 16 [ 97.910937][ T389] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.936762][ T389] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.950153][ T389] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 97.968987][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.983361][ T1889] loop8: detected capacity change from 0 to 131072 [ 97.991167][ T389] usb 2-1: config 0 descriptor?? [ 98.082584][ T324] usb 5-1: config index 0 descriptor too short (expected 1372, got 92) [ 98.102188][ T324] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.129755][ T324] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.149034][ T324] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.173573][ T324] usb 5-1: New USB device found, idVendor=1525, idProduct=a4a1, bcdDevice= 0.40 [ 98.192813][ T324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.213014][ T324] usb 5-1: Product: syz [ 98.217282][ T324] usb 5-1: Manufacturer: syz [ 98.221900][ T324] usb 5-1: SerialNumber: syz [ 98.227457][ T1889] loop8: detected capacity change from 0 to 40427 [ 98.237104][ T324] cdc_ncm 5-1:1.0: skipping garbage [ 98.242791][ T324] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 98.249810][ T324] cdc_ncm 5-1:1.0: bind() failure [ 98.393060][ T28] audit: type=1400 audit(1786548963.026:2228): avc: denied { setopt } for pid=1906 comm="syz.8.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.437536][ T324] usb 5-1: USB disconnect, device number 26 [ 98.444059][ T1909] FAULT_INJECTION: forcing a failure. [ 98.444059][ T1909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 98.461261][ T1909] CPU: 1 PID: 1909 Comm: syz.8.442 Not tainted syzkaller #0 [ 98.468591][ T1909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.478677][ T1909] Call Trace: [ 98.481990][ T1909] [ 98.484938][ T1909] __dump_stack+0x21/0x24 [ 98.489319][ T1909] dump_stack_lvl+0x110/0x170 [ 98.494032][ T1909] ? __cfi_dump_stack_lvl+0x8/0x8 [ 98.499081][ T1909] ? kasan_set_track+0x60/0x70 [ 98.503884][ T1909] ? kasan_set_track+0x4b/0x70 [ 98.508672][ T1909] ? kasan_save_free_info+0x2b/0x40 [ 98.513896][ T1909] ? __kasan_slab_free+0x11/0x20 [ 98.518871][ T1909] ? slab_free_freelist_hook+0xc2/0x190 [ 98.524446][ T1909] ? kmem_cache_free+0x12d/0x300 [ 98.529426][ T1909] dump_stack+0x15/0x24 [ 98.533605][ T1909] should_fail_ex+0x3bf/0x510 [ 98.538303][ T1909] should_fail_alloc_page+0x61/0x90 [ 98.543530][ T1909] prepare_alloc_pages+0x131/0x570 [ 98.548679][ T1909] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 98.553903][ T1909] __alloc_pages+0x15b/0x610 [ 98.558523][ T1909] ? __cfi___alloc_pages+0x10/0x10 [ 98.563664][ T1909] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 98.569146][ T1909] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 98.575067][ T1909] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 98.580900][ T1909] ? __wake_up+0x12e/0x1a0 [ 98.585347][ T1909] __folio_alloc+0x12/0x40 [ 98.589792][ T1909] wp_page_copy+0x27e/0x1490 [ 98.594404][ T1909] ? kfree_skbmem+0x10c/0x180 [ 98.599108][ T1909] ? netlink_recvmsg+0xafa/0xe00 [ 98.604098][ T1909] ? fault_dirty_shared_page+0x310/0x310 [ 98.609757][ T1909] ? __cfi_netlink_recvmsg+0x10/0x10 [ 98.615069][ T1909] do_wp_page+0x9b5/0xf70 [ 98.619417][ T1909] handle_mm_fault+0x114f/0x26b0 [ 98.624378][ T1909] ? __cfi_handle_mm_fault+0x10/0x10 [ 98.629696][ T1909] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 98.634924][ T1909] do_user_addr_fault+0x900/0x1030 [ 98.640072][ T1909] ? debug_smp_processor_id+0x17/0x20 [ 98.645477][ T1909] exc_page_fault+0x51/0xb0 [ 98.650015][ T1909] asm_exc_page_fault+0x27/0x30 [ 98.654897][ T1909] RIP: 0033:0x7efcc3b5dec5 [ 98.659332][ T1909] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 98.678989][ T1909] RSP: 002b:00007efcc4ae0de0 EFLAGS: 00010293 [ 98.685104][ T1909] RAX: 0000000000000008 RBX: 00007efcc4957e20 RCX: 0000000000000000 [ 98.693121][ T1909] RDX: 0000000000000000 RSI: 00007efcc3c52561 RDI: 00007efcc4957e20 [ 98.701122][ T1909] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 98.709120][ T1909] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efcc3c523ef [ 98.717134][ T1909] R13: ffffffffffffffe8 R14: 0000000000000002 R15: 00007efcc3c52561 [ 98.725129][ T1909] [ 98.734160][ T1909] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 98.747452][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.764494][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.771486][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.793780][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.801101][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.808208][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.815278][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.824395][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.831956][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.841691][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.850347][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.857384][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.864358][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.871618][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.874086][ T28] audit: type=1400 audit(1786548963.516:2229): avc: denied { write } for pid=1918 comm="syz.8.445" name="usb_gadget" dev="configfs" ino=14245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.878620][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.878645][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.878668][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.917788][ T28] audit: type=1400 audit(1786548963.556:2230): avc: denied { add_name } for pid=1918 comm="syz.8.445" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 98.922558][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.943897][ T28] audit: type=1400 audit(1786548963.556:2231): avc: denied { create } for pid=1918 comm="syz.8.445" name="g_uac2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 98.950437][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 98.977869][ T28] audit: type=1400 audit(1786548963.566:2232): avc: denied { write } for pid=1918 comm="syz.8.445" name="c_chmask" dev="configfs" ino=24242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 98.988389][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 99.009015][ T28] audit: type=1400 audit(1786548963.566:2233): avc: denied { open } for pid=1918 comm="syz.8.445" path="/23/config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask" dev="configfs" ino=24242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 99.011486][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 99.050280][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 99.057336][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 99.064315][ T389] elecom 0003:056E:011C.000D: unknown main item tag 0x0 [ 99.083101][ T389] elecom 0003:056E:011C.000D: hidraw0: USB HID v10.00 Device [HID 056e:011c] on usb-dummy_hcd.1-1/input0 [ 99.099544][ T389] usb 2-1: USB disconnect, device number 20 [ 99.124807][ T1926] fido_id[1926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 99.460606][ T415] usb 10-1: USB disconnect, device number 7 [ 99.493227][ T1945] FAULT_INJECTION: forcing a failure. [ 99.493227][ T1945] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 99.596041][ T1945] CPU: 1 PID: 1945 Comm: syz.8.454 Not tainted syzkaller #0 [ 99.603387][ T1945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.613473][ T1945] Call Trace: [ 99.616769][ T1945] [ 99.619722][ T1945] __dump_stack+0x21/0x24 [ 99.624084][ T1945] dump_stack_lvl+0x110/0x170 [ 99.628792][ T1945] ? __cfi_dump_stack_lvl+0x8/0x8 [ 99.633844][ T1945] ? kasan_set_track+0x60/0x70 [ 99.638646][ T1945] ? kasan_set_track+0x4b/0x70 [ 99.643433][ T1945] ? kasan_save_free_info+0x2b/0x40 [ 99.648645][ T1945] ? __kasan_slab_free+0x11/0x20 [ 99.653606][ T1945] ? slab_free_freelist_hook+0xc2/0x190 [ 99.659169][ T1945] ? kmem_cache_free+0x12d/0x300 [ 99.664141][ T1945] dump_stack+0x15/0x24 [ 99.668337][ T1945] should_fail_ex+0x3bf/0x510 [ 99.673056][ T1945] should_fail_alloc_page+0x61/0x90 [ 99.678292][ T1945] prepare_alloc_pages+0x131/0x570 [ 99.683445][ T1945] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 99.688679][ T1945] __alloc_pages+0x15b/0x610 [ 99.693349][ T1945] ? __cfi___alloc_pages+0x10/0x10 [ 99.698511][ T1945] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 99.703992][ T1945] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 99.709917][ T1945] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 99.715748][ T1945] ? __wake_up+0x12e/0x1a0 [ 99.720197][ T1945] __folio_alloc+0x12/0x40 [ 99.724648][ T1945] wp_page_copy+0x27e/0x1490 [ 99.729279][ T1945] ? kfree_skbmem+0x10c/0x180 [ 99.733985][ T1945] ? netlink_recvmsg+0xafa/0xe00 [ 99.738946][ T1945] ? fault_dirty_shared_page+0x310/0x310 [ 99.744605][ T1945] ? __cfi_netlink_recvmsg+0x10/0x10 [ 99.749920][ T1945] do_wp_page+0x9b5/0xf70 [ 99.754275][ T1945] handle_mm_fault+0x114f/0x26b0 [ 99.759227][ T1945] ? __cfi_handle_mm_fault+0x10/0x10 [ 99.764521][ T1945] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 99.769737][ T1945] do_user_addr_fault+0x900/0x1030 [ 99.774871][ T1945] ? debug_smp_processor_id+0x17/0x20 [ 99.780277][ T1945] exc_page_fault+0x51/0xb0 [ 99.784800][ T1945] asm_exc_page_fault+0x27/0x30 [ 99.789671][ T1945] RIP: 0033:0x7efcc3b5dec5 [ 99.794133][ T1945] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 99.813760][ T1945] RSP: 002b:00007efcc4ae0de0 EFLAGS: 00010293 [ 99.819844][ T1945] RAX: 0000000000000008 RBX: 00007efcc4957e20 RCX: 0000000000000000 [ 99.827829][ T1945] RDX: 0000000000000000 RSI: 00007efcc3c52561 RDI: 00007efcc4957e20 [ 99.835816][ T1945] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 99.843826][ T1945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efcc3c523ef [ 99.851813][ T1945] R13: ffffffffffffffe8 R14: 0000000000000002 R15: 00007efcc3c52561 [ 99.859817][ T1945] [ 99.868191][ T1945] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 99.868297][ T1951] netlink: 8 bytes leftover after parsing attributes in process `syz.9.456'. [ 99.884894][ T1951] netlink: 8 bytes leftover after parsing attributes in process `syz.9.456'. [ 99.893833][ T1951] netlink: 8 bytes leftover after parsing attributes in process `syz.9.456'. [ 99.902718][ T1951] netlink: 8 bytes leftover after parsing attributes in process `syz.9.456'. [ 100.144311][ T1977] loop8: detected capacity change from 0 to 256 [ 100.159450][ T1977] exFAT-fs (loop8): bogus number of FAT structure [ 100.166015][ T1977] exFAT-fs (loop8): failed to read boot sector [ 100.172345][ T1977] exFAT-fs (loop8): failed to recognize exfat type [ 100.314526][ T291] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 100.384502][ T415] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 100.498270][ T291] usb 10-1: Using ep0 maxpacket: 16 [ 100.503594][ T324] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 100.524106][ T291] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.542531][ T291] usb 10-1: config 0 has no interfaces? [ 100.548455][ T291] usb 10-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 100.558486][ T291] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.571310][ T291] usb 10-1: config 0 descriptor?? [ 100.585949][ T415] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.591653][ T1984] xt_hashlimit: size too large, truncated to 1048576 [ 100.597110][ T415] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.615188][ T415] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.636720][ T415] usb 5-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice= 0.40 [ 100.648042][ T415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.660452][ T415] usb 5-1: Product: syz [ 100.666233][ T415] usb 5-1: Manufacturer: syz [ 100.673049][ T415] usb 5-1: SerialNumber: syz [ 100.695515][ T324] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 100.714026][ T324] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.734859][ T324] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 100.743977][ T324] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 100.766331][ T324] usb 9-1: Manufacturer: syz [ 100.777815][ T324] usb 9-1: config 0 descriptor?? [ 100.780631][ T389] usb 10-1: USB disconnect, device number 8 [ 100.897450][ T415] usb 5-1: 0:1 : does not exist [ 100.904817][ T415] usb 5-1: 0:2 : does not exist [ 100.917994][ T415] usb 5-1: USB disconnect, device number 27 [ 100.963827][ T1993] FAULT_INJECTION: forcing a failure. [ 100.963827][ T1993] name failslab, interval 1, probability 0, space 0, times 0 [ 100.977004][ T1993] CPU: 0 PID: 1993 Comm: syz.3.471 Not tainted syzkaller #0 [ 100.984317][ T1993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.994424][ T1993] Call Trace: [ 100.997719][ T1993] [ 101.000670][ T1993] __dump_stack+0x21/0x24 [ 101.005024][ T1993] dump_stack_lvl+0x110/0x170 [ 101.009750][ T1993] ? __cfi_dump_stack_lvl+0x8/0x8 [ 101.014793][ T1993] ? prep_new_page+0x1c/0x110 [ 101.019526][ T1993] ? get_page_from_freelist+0x2ca9/0x2d20 [ 101.025279][ T1993] dump_stack+0x15/0x24 [ 101.029456][ T1993] should_fail_ex+0x3bf/0x510 [ 101.034152][ T1993] ? mas_alloc_nodes+0x2d8/0x850 [ 101.039108][ T1993] __should_failslab+0xac/0xf0 [ 101.043929][ T1993] should_failslab+0x9/0x20 [ 101.048475][ T1993] kmem_cache_alloc+0x3b/0x320 [ 101.053266][ T1993] mas_alloc_nodes+0x2d8/0x850 [ 101.058052][ T1993] mas_preallocate+0xe3d/0x1430 [ 101.062964][ T1993] ? __cfi_mas_preallocate+0x10/0x10 [ 101.068280][ T1993] ? rwsem_write_trylock+0x136/0x300 [ 101.073627][ T1993] vma_expand+0x437/0xad0 [ 101.077987][ T1993] mmap_region+0xf04/0x2130 [ 101.082537][ T1993] ? __cfi_mmap_region+0x10/0x10 [ 101.087498][ T1993] ? cap_mmap_addr+0x165/0x2e0 [ 101.092290][ T1993] ? get_unmapped_area+0x30c/0x370 [ 101.097438][ T1993] do_mmap+0x858/0xdd0 [ 101.101538][ T1993] ? __count_memcg_events+0x8f/0xe0 [ 101.106787][ T1993] ? __cfi_do_mmap+0x10/0x10 [ 101.111433][ T1993] vm_mmap_pgoff+0x206/0x3f0 [ 101.116044][ T1993] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 101.121181][ T1993] ? up_read+0x56/0x1d0 [ 101.125373][ T1993] ksys_mmap_pgoff+0xf6/0x1d0 [ 101.130077][ T1993] __x64_sys_mmap+0xfa/0x110 [ 101.134768][ T1993] x64_sys_call+0x8fd/0x9a0 [ 101.139285][ T1993] do_syscall_64+0x4c/0xa0 [ 101.143727][ T1993] ? clear_bhb_loop+0x30/0x80 [ 101.148434][ T1993] ? clear_bhb_loop+0x30/0x80 [ 101.153156][ T1993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.159106][ T1993] RIP: 0033:0x7f8f6c59de42 [ 101.163540][ T1993] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 101.183172][ T1993] RSP: 002b:00007f8f6d535d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.191626][ T1993] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f6c59de42 [ 101.199619][ T1993] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 101.207601][ T1993] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 101.215592][ T1993] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 101.223577][ T1993] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f8f6c652561 [ 101.231601][ T1993] [ 101.239181][ T1993] ------------[ cut here ]------------ [ 101.244693][ T1993] kernel BUG at mm/mmap.c:2854! [ 101.254096][ T1993] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 101.260181][ T1993] CPU: 0 PID: 1993 Comm: syz.3.471 Not tainted syzkaller #0 [ 101.267473][ T1993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.277540][ T1993] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 101.282938][ T1993] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 101.302577][ T1993] RSP: 0018:ffffc9001616fa40 EFLAGS: 00010293 [ 101.308654][ T1993] RAX: ffffffff81adab58 RBX: 00007f8f6aff8000 RCX: ffff8881441ae540 [ 101.316632][ T1993] RDX: 0000000000000000 RSI: 00007f8f6aff7fff RDI: 00007f8f6aff8000 [ 101.324694][ T1993] RBP: ffffc9001616fc30 R08: ffff8881441ae540 R09: 0000000000000003 [ 101.332687][ T1993] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f8f6aff7fff [ 101.340751][ T1993] R13: 00007f8f6aff8000 R14: dffffc0000000000 R15: 00007f8f62ff8000 [ 101.348734][ T1993] FS: 00007f8f6d5376c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 101.357702][ T1993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.364299][ T1993] CR2: 0000001b2ed23e7c CR3: 0000000131710000 CR4: 00000000003506b0 [ 101.372286][ T1993] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.380261][ T1993] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.388247][ T1993] Call Trace: [ 101.391535][ T1993] [ 101.394481][ T1993] ? __cfi_mmap_region+0x10/0x10 [ 101.399436][ T1993] ? cap_mmap_addr+0x165/0x2e0 [ 101.404230][ T1993] ? get_unmapped_area+0x30c/0x370 [ 101.409366][ T1993] do_mmap+0x858/0xdd0 [ 101.413451][ T1993] ? __count_memcg_events+0x8f/0xe0 [ 101.418665][ T1993] ? __cfi_do_mmap+0x10/0x10 [ 101.423261][ T1993] vm_mmap_pgoff+0x206/0x3f0 [ 101.427857][ T1993] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 101.432977][ T1993] ? up_read+0x56/0x1d0 [ 101.437144][ T1993] ksys_mmap_pgoff+0xf6/0x1d0 [ 101.441830][ T1993] __x64_sys_mmap+0xfa/0x110 [ 101.446437][ T1993] x64_sys_call+0x8fd/0x9a0 [ 101.450955][ T1993] do_syscall_64+0x4c/0xa0 [ 101.455377][ T1993] ? clear_bhb_loop+0x30/0x80 [ 101.460055][ T1993] ? clear_bhb_loop+0x30/0x80 [ 101.464734][ T1993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.470666][ T1993] RIP: 0033:0x7f8f6c59de42 [ 101.475093][ T1993] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 101.494710][ T1993] RSP: 002b:00007f8f6d535d08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 101.503130][ T1993] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f6c59de42 [ 101.511107][ T1993] RDX: 0000000000000000 RSI: 0000000008000000 RDI: 0000000000000000 [ 101.519077][ T1993] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 101.527055][ T1993] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000004000000 [ 101.535032][ T1993] R13: 0000000000001000 R14: 0000000000000022 R15: 00007f8f6c652561 [ 101.543098][ T1993] [ 101.546128][ T1993] Modules linked in: [ 101.551795][ T1993] ---[ end trace 0000000000000000 ]--- [ 101.557447][ T1993] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 101.563062][ T1993] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 101.582912][ T1993] RSP: 0018:ffffc9001616fa40 EFLAGS: 00010293 [ 101.589144][ T1993] RAX: ffffffff81adab58 RBX: 00007f8f6aff8000 RCX: ffff8881441ae540 [ 101.597340][ T1993] RDX: 0000000000000000 RSI: 00007f8f6aff7fff RDI: 00007f8f6aff8000 [ 101.605492][ T1993] RBP: ffffc9001616fc30 R08: ffff8881441ae540 R09: 0000000000000003 [ 101.613673][ T1993] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f8f6aff7fff [ 101.621731][ T1993] R13: 00007f8f6aff8000 R14: dffffc0000000000 R15: 00007f8f62ff8000 [ 101.630180][ T1993] FS: 00007f8f6d5376c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 101.639293][ T1993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.646211][ T1993] CR2: 00007efcc4ac1d58 CR3: 0000000131710000 CR4: 00000000003506b0 [ 101.646497][ T571] udevd[571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 101.655317][ T1993] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.678133][ T1993] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.686262][ T1993] Kernel panic - not syncing: Fatal exception [ 101.692887][ T1993] Kernel Offset: disabled [ 101.697225][ T1993] Rebooting in 86400 seconds..