last executing test programs: 26.338867894s ago: executing program 4 (id=51): r0 = syz_mount_image$ext4(&(0x7f0000001f80)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000540)={[{@nodioread_nolock}, {@discard}, {@nodelalloc}, {@data_err_ignore}, {@quota}]}, 0x1, 0x251, &(0x7f0000000240)="$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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x3174, &(0x7f0000000380)={0x0, 0xa111, 0x10a69, 0x3, 0x20000219}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48341, 0xb5) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x2d, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r10, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000003980)=""/4109, 0x100d}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000001500)=""/173, 0xad}], 0x3}, 0x9}], 0x3, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x2, 0xe, 0x6b}, {0xfffa, 0x6, 0x0, 0xffffffff}, {0x3ff, 0xc8, 0x3, 0x80000001}, {0xff, 0x8, 0x8, 0x7}, {0x9, 0xeb, 0x13, 0x13}, {0x3, 0x9, 0x9, 0xd2}, {0x200, 0x7, 0x0, 0x8}, {0xd, 0x10, 0x6e, 0xc5d}, {0xc, 0x4, 0x2, 0x7f}, {0x80, 0x5, 0x86}]}) openat(r0, &(0x7f0000000040)='./file1\x00', 0x206942, 0xe) 24.378618838s ago: executing program 4 (id=56): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = io_uring_setup(0x3c92, &(0x7f0000000080)={0x0, 0x2fcd, 0x0, 0x2, 0x13c, 0x0, r0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x10d000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0xe, &(0x7f0000000480)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x181042, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x50082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=t']) r7 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f00000014c0)=ANY=[@ANYBLOB], 0x0) accept(r7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 22.395470769s ago: executing program 1 (id=59): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) bind$inet(r1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581219f"], 0x0) 19.882226717s ago: executing program 1 (id=62): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = io_uring_setup(0x3c92, &(0x7f0000000080)={0x0, 0x2fcd, 0x0, 0x2, 0x13c, 0x0, r0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x10d000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0xe, &(0x7f0000000480)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x181042, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x50082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=t']) r7 = socket$vsock_stream(0x28, 0x1, 0x0) accept(r7, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 16.877260821s ago: executing program 1 (id=65): openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 14.503290438s ago: executing program 2 (id=70): r0 = syz_mount_image$ext4(&(0x7f0000001f80)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000540)={[{@nodioread_nolock}, {@discard}, {@nodelalloc}, {@data_err_ignore}, {@quota}]}, 0x1, 0x251, &(0x7f0000000240)="$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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x3174, &(0x7f0000000380)={0x0, 0xa111, 0x10a69, 0x3, 0x20000219}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48341, 0xb5) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x2d, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x2, 0xe, 0x6b}, {0xfffa, 0x6, 0x0, 0xffffffff}, {0x3ff, 0xc8, 0x3, 0x80000001}, {0xff, 0x8, 0x8, 0x7}, {0x9, 0xeb, 0x13, 0x13}, {0x3, 0x9, 0x9, 0xd2}, {0x200, 0x7, 0x0, 0x8}, {0xd, 0x10, 0x6e, 0xc5d}, {0xc, 0x4, 0x2, 0x7f}, {0x80, 0x5, 0x86}]}) r11 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x206942, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305829, &(0x7f0000000200)={0x17c04, r8, 0x5, 0x7fc, 0x1ff, 0xffffffffffffffdf}) 14.381797739s ago: executing program 0 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{}, {0x3, 0xc8, 0xc9, 0x9}}}, 0x64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r7, 0x90004) r8 = accept4(r7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_genetlink_get_family_id$ethtool(0x0, r6) socket$nl_generic(0x10, 0x3, 0x10) 12.65538625s ago: executing program 0 (id=73): r0 = syz_mount_image$ext4(&(0x7f0000001f80)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000540)={[{@nodioread_nolock}, {@discard}, {@nodelalloc}, {@data_err_ignore}, {@quota}]}, 0x1, 0x251, &(0x7f0000000240)="$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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x3174, &(0x7f0000000380)={0x0, 0xa111, 0x10a69, 0x3, 0x20000219}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48341, 0xb5) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x2d, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x2, 0xe, 0x6b}, {0xfffa, 0x6, 0x0, 0xffffffff}, {0x3ff, 0xc8, 0x3, 0x80000001}, {0xff, 0x8, 0x8, 0x7}, {0x9, 0xeb, 0x13, 0x13}, {0x3, 0x9, 0x9, 0xd2}, {0x200, 0x7, 0x0, 0x8}, {0xd, 0x10, 0x6e, 0xc5d}, {0xc, 0x4, 0x2, 0x7f}, {0x80, 0x5, 0x86}]}) r11 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x206942, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305829, &(0x7f0000000200)={0x17c04, r8, 0x5, 0x7fc, 0x1ff, 0xffffffffffffffdf}) 12.653467529s ago: executing program 2 (id=74): r0 = syz_mount_image$ext4(&(0x7f0000001f80)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000540)={[{@nodioread_nolock}, {@discard}, {@nodelalloc}, {@data_err_ignore}, {@quota}]}, 0x1, 0x251, &(0x7f0000000240)="$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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x3174, &(0x7f0000000380)={0x0, 0xa111, 0x10a69, 0x3, 0x20000219}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48341, 0xb5) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x2d, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) recvmmsg(r10, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000003980)=""/4109, 0x100d}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000001500)=""/173, 0xad}], 0x3}, 0x9}], 0x3, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x2, 0xe, 0x6b}, {0xfffa, 0x6, 0x0, 0xffffffff}, {0x3ff, 0xc8, 0x3, 0x80000001}, {0xff, 0x8, 0x8, 0x7}, {0x9, 0xeb, 0x13, 0x13}, {0x3, 0x9, 0x9, 0xd2}, {0x200, 0x7, 0x0, 0x8}, {0xd, 0x10, 0x6e, 0xc5d}, {0xc, 0x4, 0x2, 0x7f}, {0x80, 0x5, 0x86}]}) r11 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x206942, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305829, &(0x7f0000000200)={0x17c04, r8, 0x5, 0x7fc, 0x1ff, 0xffffffffffffffdf}) 11.714475672s ago: executing program 3 (id=75): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = gettid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000200)="952b"}) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) process_vm_writev(r4, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) gettid() timer_settime(0x0, 0x236bd4336e4642df, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) 10.076769863s ago: executing program 4 (id=76): r0 = syz_mount_image$ext4(&(0x7f0000001f80)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000540)={[{@nodioread_nolock}, {@discard}, {@nodelalloc}, {@data_err_ignore}, {@quota}]}, 0x1, 0x251, &(0x7f0000000240)="$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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x3174, &(0x7f0000000380)={0x0, 0xa111, 0x10a69, 0x3, 0x20000219}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48341, 0xb5) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x2d, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r10, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000003980)=""/4109, 0x100d}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000001500)=""/173, 0xad}], 0x3}, 0x9}], 0x3, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x2, 0xe, 0x6b}, {0xfffa, 0x6, 0x0, 0xffffffff}, {0x3ff, 0xc8, 0x3, 0x80000001}, {0xff, 0x8, 0x8, 0x7}, {0x9, 0xeb, 0x13, 0x13}, {0x3, 0x9, 0x9, 0xd2}, {0x200, 0x7, 0x0, 0x8}, {0xd, 0x10, 0x6e, 0xc5d}, {0xc, 0x4, 0x2, 0x7f}, {0x80, 0x5, 0x86}]}) r11 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x206942, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305829, &(0x7f0000000200)={0x17c04, r8, 0x5, 0x7fc, 0x1ff, 0xffffffffffffffdf}) 9.834163054s ago: executing program 0 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 9.832157122s ago: executing program 2 (id=78): r0 = syz_mount_image$ext4(&(0x7f0000001f80)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000540)={[{@nodioread_nolock}, {@discard}, {@nodelalloc}, {@data_err_ignore}, {@quota}]}, 0x1, 0x251, &(0x7f0000000240)="$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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x3174, &(0x7f0000000380)={0x0, 0xa111, 0x10a69, 0x3, 0x20000219}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48341, 0xb5) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x2d, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x2, 0xe, 0x6b}, {0xfffa, 0x6, 0x0, 0xffffffff}, {0x3ff, 0xc8, 0x3, 0x80000001}, {0xff, 0x8, 0x8, 0x7}, {0x9, 0xeb, 0x13, 0x13}, {0x3, 0x9, 0x9, 0xd2}, {0x200, 0x7, 0x0, 0x8}, {0xd, 0x10, 0x6e, 0xc5d}, {0xc, 0x4, 0x2, 0x7f}, {0x80, 0x5, 0x86}]}) r11 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x206942, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305829, &(0x7f0000000200)={0x17c04, r8, 0x5, 0x7fc, 0x1ff, 0xffffffffffffffdf}) 9.830451957s ago: executing program 3 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{}, {0x3, 0xc8, 0xc9, 0x9}}}, 0x64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r7, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r8 = accept4(r7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_genetlink_get_family_id$ethtool(0x0, r6) socket$nl_generic(0x10, 0x3, 0x10) 8.571321267s ago: executing program 3 (id=80): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = io_uring_setup(0x3c92, &(0x7f0000000080)={0x0, 0x2fcd, 0x0, 0x2, 0x13c, 0x0, r0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x10d000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0xe, &(0x7f0000000480)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x181042, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x50082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwrite64(r4, &(0x7f0000000000)="ec", 0x1, 0x3fffc) r8 = socket$vsock_stream(0x28, 0x1, 0x0) accept(r8, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 7.772880457s ago: executing program 2 (id=81): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48341, 0xb5) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 7.770798357s ago: executing program 4 (id=82): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70d31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x4e24, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x10}, 0x4}, 0x0, {[0xe, 0xfffffffd, 0x0, 0xfffffef9, 0x0, 0x1, 0x8]}}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7.576709343s ago: executing program 0 (id=83): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 7.461911614s ago: executing program 1 (id=84): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000005d40)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x1, 0x5bff, &(0x7f0000005d80)="$eJzs3Q+MHNX9GPCZ3Tv7zuc/ZxLAMX98gHENDXDGpIBFxEEV/jQxIZCYJBBsB5/NEf8Bnx2DE2KDFBIRmlpqlaSREiGUSFQIJS1qmj+NTFRC1NAollJq0jYlgkQNrYgjAomLKffT3c7s7c7N29nb3TM2fD7S3dzMvv2+933zbm7m7dxuBAAAwDvC018c/dt1iz/wy/uHX9tzzY+33Bf1lSe296QF+pPl3W9VCzmaZnctmlhmx8W+oVlPX/7Qh5771qe++8KLC5ev+M4dVx25a+7qBx8c+s3FR3715r1FcdPxdM7kevxyHEWn/Xr51x74+TMnj2+Loygqx/17o2hhXPrZwjgTYvD1KIo2VNtZ/+ATr63cOL7c+5XZddsXZIIY7+9sPck4+9JPt536p/Ovem7/b698bbDn9e17J4vEPTXjKYrmr6t9fncURb3J17h0tC1Kn5wsr4+iaE7N8y4paNeZTbb/vMD64mQ5K1n2FcRJHz8js97dZDu6MsueJp/XqtIMx0+l+2/uDNefPbhl61mYLH+QLM+ZZvxy+hVHpTjqqla3OZ4cI1HNfoujeKLuyfVS3ViIM2MjjqI4s17KrJe7M3lN1JsMtHIc129Py2W2DyTbu5LtZxSMtRsD29+T5pv8oh7O5J8N2jflh2peE9J2/b5BW/JlR1Z7SjXHoLztaXt7kp3Rl2zri0+Y8pyxHOlja1786vde2P3tpf2BdsTfj5P48UT8udOM/+yWSw8u2/27Q4tC8deVkvillto/ev4rj790wy9ODsbfl8YvtxT/+YuWff0ne3YdDvVPOrz6oq6W4pdXnXtkxf2Da4Ltfzjt/56W4j9y5WPfnP++px4P7t/BtH96W+ufkZ1v3PzoiYdC8ZPtXeN/NVuJf8WrJ529attjm4LtfzLtn76W4j8zOrL6gduX7BoIxT+Qxp/XUvwz/3DLzfsPDj8fbP9Q2v/9LcV//9Irrl99aOtDoWNnvPdo/YUFeHt6V3KO9eVkvdXrzHbVXC98oz+unPPNTb7mlTtZU73xeubPXHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3qEe6d8w/OaPTn+jK1mfnfxwermyTLfPiqK4N4qi0R3rt+8Y2bpp4I5tO7dvXb95YP2OgeGtO7bfM3DRe5dEUbR5/T3jjw6et7LyvBOiuLKMT5tS99jY2Fipv35bWt9nLv6XTwycfvC/R9Hgib85vSvY/g/fu/ifLsz5nhEPjW3+F2ff+tLc/7yzsqE/aVd/oF1RoF2XPfryqj/9uPefR9HgSY3a9b+XX/3zugZNbJiMkyjNjkoTP8yO5+S2o9rqpD1pf3VtHNk8PFjcv+VAHn88/O8+tmv0tr2V/u0J5tFk//YOjf196w+fvO2y3ddXNhyr+72ov9Ms0val/deT9Pf8JK/5gby6Ank9cPYZ/+u//estL++NBrv+umRq3UV5dScDoDt+T1P1pjXMiev7pCcpn+7x9HkX7Nhy5wWj9+w+b2TL+k3Dm4a3rly58pKLVl548YX/5IKJ1CvfO5Z/Wv8/ajL/6Y6n7mQ5vfG07eKhkfR7znjqmjqeitpV1B/j7Sruj9oWhX7/3v3Rq//Hff9+3w2VDePjvNRgnKelq8eTZDlnfDeviGrG29S+ysurqB+6A/2w6ca+f/PqwLb/V3Qcqt0ztd8z4qGxv478l8vn7j/r1sqGo3Kcr21Qi8f5aquT9nTXHndWHLv9OzsqJ3n15bbrrPtf+fh//VE8UG3frFnR3et37Ni+ovL9KOX17hs/n2a0J6/YtPO6ZNn/vWv3uvsWTsnrwsr3uUlL58an5LYruzXNa8nE93KUdEu6iHpK+fl1R5X21f5dWHX55POyvdqXxOyLT8jNKyt9bM2LX/3eC7u/vTTU0/H3KzX2RvMqy/jUQMnNmSeWq4nm1V80PqIoWle7Le3HJ3/4rwb2/3LhlsLxURkZU75n0xsa+8Klc/84etOB1ZUNR+e4MtGU2VEUtXxcqbZ6sj0T/TVxXLnwqOZR+Z7kUc7k8dbt57pfrHhobP+p79208j/uSH7ti/q3Wjqvf1dGUdFxYElmvZPHgdrnZeuZLJ8fbyCz3heVWzpuPH/Rsq//ZM+uw8Hjxl+aPW58vm6t3OZxIw6Mp4Nf+Ld//9zBZ6/t3HHj2mXlT/7PJSuTDn2rft+yx42eZFz3BMZ1tdVJe+LacX3+bds2b6hsP3bPf5NlwfVP+vd79J7dn1m/efPw9tHm8mr2vCStJ9vLU89LmjvfSn/7TijIK91fk3nN3A/N9Fezv29p+zdk+6vF3zfI0xfFLf09e3bLpQeX7f7dof5A3HhdKYlfain+6PmvPP7SDb84ORh/Xxq/q6X45VXnHllx/+CaYPyH4yR+T0vxH7nysW/Of99TjwfjD6bt723tfGJk5xs3P3piuP+jNH5fS/GfGR1Z/cDtS3YF4x+Ik3rGz+2i6InXVm6srMcTc049Ne3ormtXlF2PM+ulzHq5dr1UmYOvVlCO4/rtablk+xk1bclzUxRFB2ZP3Z6ePfYsqiwPp+tR9ofG2481pZpzgrzt2fPr3qPZOAA4ytLX/9NzjfT1/yXJH8Sa1/8ry3hW3fMXJedTiyY3TVzn3TdQ+UM63Xm9tB3Zeb00/vKz6mO0Oq9XNC93ZmY9bdeSpFfS9jSYl5sbNTEvN7WexvNymfSL580GvpzZ0DUxtxfab93JTEXO68wPLKhv79zxCO2eZy/Kb3X1PDs07rLzHenr9HGT4y57X0S6f7P3RaTxF2cm0Fq9L6LdcZdOazQYdxOZFc+nTh0XUYN+nRwX+dGy46LBOMqW76+Mo5l9Xeq4vt7/e+9MzL/XvbLwjplPiPbW90+T8wlNXe931z7v6F7vp9vT40NXk/MAawLbOzUPkB4u0nb9vkFbjobpzgMAwNtRev2fnlOMX/+P/60eyJznF123ZK8y0njB+1jK+e0puv6dej/bnJbOK6949aSzV217bFPwuuHJZu9LubNubU7BfSlF/bg0iq6tXS/sx8CtIEXzDssy5fuieS3145l/uOXm/QeHnw/241DlRKrSj/fljJTUvrq1eW324/LMemE/due3qqgfs/UUjd9zMut9yR1B0+339y+94vrVh7Y+FOz3vbX93mj8Ply31l/Q767TA/Grr8vP7H1yzV+n1w/A4+46Pds/R+l1/6L5yLfsdf9k3nqm5gFuDGyf7jxA35QfqnlNOO7mAQJ/FwDgeJZe/1fvl0+u//9Tply714fB87ahztzPGjxvq57X1pyXj+1pOn56Xh5sf/W8vL3romD86nVRe9ctwf6pXre0d90VjF+97mpvnibYP0+m/TP1vH9PE/HT8/7Qvwuk5/3H/3XRzM4zuC5K1qPsDxV510Ul10UAABxl6fV/erqa3v//VLKePTee+evcmb4Onenr6PZe/yueZ5jpeZLj/Tr36M8zNBO/+XmGmZ5neyfPA4wtmOY8QPXumg7PA0y5ejYPAADATPhAsry1yfJdyXvhfPq22y9cu2H4s2s3bh8eHr1z/W3Da0e2juyoluueuPKaep90qL6i+6Tzys9pUH5tMH59e64KlA9pN/9QfUX555VvlP+6YPz69lwdKB/Sbv6h+oryzyvfKP/1wfj17bkmUD6k3fxD9RXln1e+Uf6fDsavb8+1gfIh7eYfqq8o/7zyjfK/LRi/vj3/LFA+pN38Q/UV5Z9XvlH+2ffLDOX/wUD5kHbzD9VXlH9e+Sn5T05PRcPB+PXt+VCgfEi7+YfqK8o/r3yj/b8xGL++PasD5UPazT9UX1H+eeUb5b8pGL++PdcFyoe0m3+ovqL888o3yv/2YPz69nw4UD6k3fxD9RXln1e+Uf4jwfj17bk+UL5OzcRxu/mH6ivKP698o/zvCMavb89HAuVD2s0/VF9R/nnlG+X/mWD8+vbcECgf0m7+ofqK8s8r3yj/zcH49e25MVA+pN38Q/UV5Z9XvlH+W4Lx69vz0UD5kHbzD9VXlP+U8qWoYf5bg/Hr2/OxQPmQdvMP1VeUf175RvlvC8avb8+aQPmQdvMP1VeUf175RvnfGYxf356bAuVD2s0/VF9R/nnlG+V/VzB+fXs+Higf0m7+ofqK8s8rX4k/NjaW8xFW24Px69vziUD5kHbzD9VXlH9e+Ub7fzQYv749nwyUD2k3/1B93cktANPJp1H+O3LKRzntuTlQPqTd/KfUV8q2r/l8GuW/M6d8lNOeWwLlQ9rNP1RfUf555Rvl/9lg/Pr2fCpQPqTd/EP1FeWfV75R/ruC8evbc2ugfEi7+YfqK8o/r3yj/O8Oxq9vz9pA+ZBq/ju2Dw+v3XnnhvU7htdu3bZheHTtru0jO3YMJydq7d6XGLyvLLkvsTvqapj/4sz6guTWrQWB9wfKlk/DnjLxw9T3B8pW21XwPjlF+ytbf9H7DOWVzxtvof1bdDxodjxk1f1+VAbJyNbR4e1Tj9+9DfujdkxEE7fNVT6Boyc+qany2bfrDFRTqPl8ehrmk908O7kRcHZ8YlPlo8DnwU1X8/nEwXzy2jHdz7FLw07rc+wy36bIeY/Wunw3jk4cpEfWbx7ZPTy1/XOOgfY30497O96O0pR2FO3/ONMfC5OWLAx93lug/3b94P888uc//4cPRtHgieVT2+q/eGhs3eGTPv3ry2ZfMN7+UsP2V0umn6tc8PmH2fJpPl2bt43u+Mcbt+3cmv8KWnq/c6m6PkP3Oyd5lpv8P+bQ/R7TvX85nvLDsanZ+5cBAADeKdL//0+vVxcl/4O6MDNF0Pw8cHv/Hx2cBz7Q3DxwdjaiaB44Wz5Nu2geOL0m72tzHjhbf2iettSgfKPXXZqdB/5koPx0NT9O2nsfgOA4SXqqaJxk/w+/aJxkyzc7TlK9bY6TbP1F4ySvfKPXp5sdJzfll1+Q3+rpjIcW3ndiYPJ9J4LjYbC58ZD9XM2i8ZAtP93x0NPmeMjWXzQe8so3ul+nufEweaNs268fFY6P9t4XJjg+1jU3PrKfl1I0PrLlpzs+4jbHR7b+ovGRV77R/YzNHi8+Eiifan7/t/e+PcH9v6+5/Z/93Jai/Z8tP939X2pz/2frL9r/eeUb3c/d7P6/LlA+Vb//x3f8xH4fXrtr2/bae6An93/8Zv0rv5353JaQ5ts3s59b06rm2z9T7/sU1b+AOWPtb3A+2TU1hfSxZt9Xaubb3951U7D9B9p7pav59s/s5we3qhOvxy6pX89/PTY5FSp6H+qi12k/Edg+vddpeyfrntWgsmOA12kBAABg5qWv/6cfx5++P/xXkmXgY/pbdnx9vvfkxOXk+/vP7DzX8f/++zM7j3nU/r/imJrPi8znAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvMPM7lo0sXz6i6N/u27xB355//Bre6758Zb79g3Nevryhz703Lc+9d0XXly4fMV37rjqyF1zVz/44NBvLj7yqzfvLQzcX1mck6z2RFH8chxFp/16+dce+PkzJ48tqGwvx/17o2hhXPpZnI0w+HoURRuq7ax/8InXVm4cX+79yuy67QsyQbJ5RX3ltD117YzuLsyI49D4fh4fWV/66bZT/3T+Vc/t/+2Vrw32vL5972SRuGd8CCXjKYrmr6t9fncURb3J17h0tC1Kn5wsr4+iaE7N8y4paNeZTbb/vMD64mQ5K1n2FcRJHz8js97dZDu6MsueJp/XqtLMhv//Y2NjEz+k+2/uDNc/5eiWqWdhsvxBsjxnmvHL6VccleKoq1rd5nhyjEQ1+y2O4ol9P7leqhsLcWZsxFEUZ9ZLmfVydyaviXqTgVaO4/rtabnM9oFke1ey/YyCsXZjYPt70nyTX9TDmfyzQfum/FDNa0Lart83aMvRUKo5BuVtT9vbk+yMvmRbX3zClOeM5UgfW/PiV7/3wu5vL+0P1Bd/P07ixzXxy03Hf3bLpQeX7f7doUWBPON1pSR+qaX2j57/yuMv3fCLk4Px96Xxyy3Ff/6iZV//yZ5dh/tD8f+S9k9XS/HLq849suL+wTXB9j+cxu9pKf4jVz72zfnve+rxYPsH0/7pba1/Rna+cfOjJx4Kxo/S+HNain/FqyedvWrbY5uC8Z9M+6evpfjPjI6sfuD2JbsGQvEPpPHntRT/zD/ccvP+g8PPB9s/lPZPf0vx37/0iutXH9r6UOjYGe+d4b+wAG9z70rOsb6crDe8zqyZt8heZ7ar5nrhG/1x5ZxvbvI1r5MVZYzXM38G4wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8PY0fPU39lx9YO01XXEUxYEyYznSx8qzhoYGWqi3vOrcIyvuH1xTu21RC3EAAACAYul1eKm6pSdaFO2Ke6NTcsuncwSnpGtx/fbsHELvZMmOxCl1KE65Q3G6OhSnu0NxZnUozuwOxekpiNMTNRent2GcUtPtmdOhOH0dijO3Q3HmdSjO/A7FWdChOP0N4zQ/Dhd2KM4JHYrzrg7FeXeH4pzYoTgndSjOyR2Kk51Tnu44nJeUXByKM/FDuTBOV1yuPpA3n57Wc1rmeaVp1tPXZD3ZOfvp1tPbZD1ntVlPT5P1LGuznrjJes5ps55SQT3puL072760nnStyfF/T4fi7O5QnM91KM7nOxTn3g7F+UKH4uxpMw5As9Lr/8nrxv5odtdl0ZzkiJOdBUivd5dUnj3leNSTvUBPpPFOzWyfVRQve6Geibekw+07M7O9uy5eV/W8qUG8/tp4SzMPFuabnVDItG/5dONlJxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6BXbuLkassHwD+np1PtoX/9B+oAyl0pLRiRFq6KB+p4aAXs8SgBPAjYLpbylA33XaRbVNYkbVeEC9UMJq4emEMVxhCjBoUlWS50BiUhE0UmwhKohJFAyRA0pqYjNmdc+arM51lBFvw90tzPt73eZ9nzkyzyfPOAAAAAAAAAADAm6hWXZivLk2Mhygs/+up3kM6l8nHcWWIuh//81e+96e5b1/QPlbIdgUt3jNEZgAAAKBb2ofnmiPFUMhuDfko3xFXTPYBisl9ptQ4R5WRlfNotO6E8dkkfuuBfbdvnb1r7r1T+3btqe2p7R8bG7v80rHtl21//9bbpqZr2xrHUBiQL5fkm71rbu+u6enaHbON++7XXU7WlVtDk8uHw8nr/v9edYqt+yiJb9V58y76f0rdGyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBy1KoL89WlifHRKISoT0y9h3Quk4/jyhB1r35t/eYrZx7a0z5WyA6RCAAAABgo7cNzzZFiKGQzIRPOXrk7vxVaCqHV9wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP97atWF+erSxPiaKISoT0y9h3Quk4/jyhB1fz07de29n954qH2sPEQeAAAAYLC0Dx9pjhRDOWwKuejsjrh0b+CcrvUrcbnWfZrn3F5x4fi47r2DfnGbVhm3ZZVx7x4Q95HkfGcAAACAt760/882R0qhkD29b/8/qK9P4zZ2xWWS8zC/FQAAAAD+M2n/n2+OlEMhW27266vt98/vikvXD/rePl0/6Hv7NO7CPnW6v88HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE5dterCfHVpYjwThRD1ian3kM5l8nFcGaLuc5du+cbP5g8dax8rZIdIBAAAAAyU9uGt1rsYCtnRkAtrVvr+y7f84zNzk4fX5UrJdD4f7tx14MAd2xvHNG7TF1755G9/ElWOi7ukcTwpDwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyhatWF+erSxPhpUQhRn5h6D+lcJh/HlSHqPjd18F83P3jWy+1j5SHyAAAAAIOlfXir9y+GcsiHfFi/ctfe6y8b6Vrfb88AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePuYvWtu767p6VqUXtzhwoULFyf7LxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCqqFUX5qtLE+PFKISoT0y9h3Quk4/jyhB1H/jgQ986430/f7h9rDxEHgAAAGCwtA9v9f7FUA65kAtnrdz12hNY6f9L/8UXCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBJq1YX56tLE+OlRCFGfmHq3fGsuk4/jyhB1z//Lp25ePFJ7rn2skB0iEQAAADBQ2oe3WvpiKGQvCYWwIbmf7lwQZZJzj32Ber3eWnd7x7LRVa+7u2NdZtXrvtj1ZNnkaRrrimm+UuPcXFc5fl0lhFBO1pVbE5Md68L9HatOX/Xr/E7HutKAdQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQbXqwnx1aWI8ikKI+sTUe0jnMvk4rqymUFfyp/ddcWTL3B9ebh8rD/UEAAAAwCBpH95qz4uhHM4NZ4RzV/r+UOqMT+N2PPjilX/76WlfDmHb+t+cl+2b/68XVn/RfQhhpDNoJIT/S+pFfeod+tHfH3jppR9/OIRtZ2U2vN56nSnj+uSx9bc8taOw9QRvDAAAALyNpP1/rjlSCoXs/r79f9p5v67+f+bMG+5elxyTjrxrxUgpqTfSp97ey772w8p5R36/3P+fqN5HP3fOh9aFmcviqfTYGOkSxfXp+zbvfGHtEwfTp27Uz3TVT9+X54/94GOHZnd/vlG/GIrJ+DnZXvWPP3Y5La4f3f/o47t3zF3XWT/b5/nv3fzOP/7um/teXK7/6sbRZv13neD5T1z/zBurzxx+5P7rO+vn+tTfc8Oa775Wmfln4/m/2pwfDWFve3zyzjc+8LZPoUsU11+devKqtYubdnbWDyFMtgem7//jj369svirdfvS9z/9rciFmzoTt/9Xaz927TlFcX1xw0V7xh47sKazftRVP33+I/d8/+hnjzx9Tffnf2tYbf3u579mS+amZzeOrerHMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbz216sJ8dWliPGRCiPrE1HtI5zL5OK4MUfcDF1x93bUv7/9S+1ghO0QiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A1Tqy7MV5cmxkeiEKI+MfUe0rlMPo4rQ9SdvfiVh1+4/pfvaB8rD5EHAAAAGCztw1u9fzGUQz7kw+hK3z95bP0tT+0obA2lxmyUnLPTM7MH3nPbzMH9t56kVw4AAACsVtr/Z5sjpVDIXhBySf+/uOGiPWOPHViT9v8hhMnlQ/G2qenaWGjuE1yzJXPTsxvHKs19gva4i3fPTCfbBGnee65Y+/zsJ5au7Zl3eyvu1aknr1q7uGlnGpdLzitxl7Tipu/bvPOFtU8cTONG0n2K5bhtrbij+x99fPeOuevS+Ux7vra4M2+sPnP4kfuvb+ZJzqNJXQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWF/ToKsaqI4wA8c++uXr3rtluUmxSpmGiQrFRUQrQKSQ9tSIEvFviQlZFJLWEI4SZkYRI+VQRFREEgUhD0UIQFZZBEQYT2EIb2UA+xEW2IGxW7O7N79+hpt1OrIN8Hh3Hm3POb/5kznr0XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDza25bz1h7+OmB3+9cdNvnu7cM77r9/W1P7e+bc/jWfXcce+XeN0+c7F6x+o2H1o882tG/d2/f1zeOfPHnk9MGPzHerEzdRgjx5xjClV+ueGHPp0cWjo7FEEI9dg2G0B1rH3fHQkLv6RDCfRN1Tj357vB194+2g8/NnTJ+USGkeF+hWc/1jOuaWi8XlkbaZ898uP2KH1etP3bo23XDvY3Tjw1OfiQ2WvZTCJ2bW69vDyHMS8eovNt68sWp3RBCmN9y3U3T1LV0hvVfW9JflNo5qW1Ok5PPLyn022dYR1uhbczwuqpqs5yf5efXMcvzF19uxXm6U/tealf+y/x6PmKoxdA2Md3DcXKPhJbnFkMce/aT/dqUvRALeyOGEAv9WqFfby/c19i8aaPVY5w6nj9XGF+cxtvS+JJp9trdJeOX5/tN/1FPFe6/GNo84x8T9zUm1/X9P9RyLtRa3kFnG8/1NtLDaKaxZrz4jGv+Oot8buPJ598+sfPVZV0ldcR3YsqPlfK/2Xbz0eU7vxvqKcvfXEv5tUr5A6t+PfjTXZ8tLM3fn/PrlfKPX7/8xQ927ThVuj6/5PVpq5RfX3PNyOrdvRtL638t5zcq5b++7sDLnTd8crC0/t68PvOqrc/Wx//Y9NalQ6X5IefPr5S/9rfLrl6z/cADpfkf5fVpVso/MrC1f8+DV+1YXJb/Vc5fUCl/6Q/3bDp0dMvx0vr78vp0Vcq/ZdnaDf1Dj+wre3fGwXP1FxbgwnRJ+o71bOpX/Z35X7X8XnipK45/5+tIx4L/c6KC0Xk6ZzEfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgb3bggAQAAABA0P/X7QgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApwIAAP//gfFYwA==") syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) 6.650228527s ago: executing program 3 (id=85): r0 = syz_mount_image$ext4(&(0x7f0000001f80)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000540)={[{@nodioread_nolock}, {@discard}, {@nodelalloc}, {@data_err_ignore}, {@quota}]}, 0x1, 0x251, &(0x7f0000000240)="$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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x3174, &(0x7f0000000380)={0x0, 0xa111, 0x10a69, 0x3, 0x20000219}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48341, 0xb5) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x2d, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) recvmmsg(r10, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000003980)=""/4109, 0x100d}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000001500)=""/173, 0xad}], 0x3}, 0x9}], 0x3, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x2, 0xe, 0x6b}, {0xfffa, 0x6, 0x0, 0xffffffff}, {0x3ff, 0xc8, 0x3, 0x80000001}, {0xff, 0x8, 0x8, 0x7}, {0x9, 0xeb, 0x13, 0x13}, {0x3, 0x9, 0x9, 0xd2}, {0x200, 0x7, 0x0, 0x8}, {0xd, 0x10, 0x6e, 0xc5d}, {0xc, 0x4, 0x2, 0x7f}, {0x80, 0x5, 0x86}]}) r11 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x206942, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305829, &(0x7f0000000200)={0x17c04, r8, 0x5, 0x7fc, 0x1ff, 0xffffffffffffffdf}) 6.647256024s ago: executing program 4 (id=86): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = io_uring_setup(0x3c92, &(0x7f0000000080)={0x0, 0x2fcd, 0x0, 0x2, 0x13c, 0x0, r0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x10d000, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240), 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0xe, &(0x7f0000000480)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x181042, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x50082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=t']) pwrite64(r4, &(0x7f0000000000)="ec", 0x1, 0x3fffc) syz_emit_ethernet(0x32, &(0x7f00000014c0)=ANY=[@ANYBLOB], 0x0) accept(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 6.439359698s ago: executing program 2 (id=87): r0 = syz_mount_image$ext4(&(0x7f0000001f80)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000540)={[{@nodioread_nolock}, {@discard}, {@nodelalloc}, {@data_err_ignore}, {@quota}]}, 0x1, 0x251, &(0x7f0000000240)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggonIjbKRYgJdlkrGwutVVLZBLEzWkqaYKMIVlFTxEbQYGGw0GJldxKJyfqVjTNH5veD2ZnZ+fi/w87zzjbvboDWOp/kYpJOktkkvSTFwR3urqbze6srMxtXk+HwiZ+K8X7VemX/uHNJBkkeSrJeFnmpmyytPbP9y+Zj97252Lv3/bWnZ2q9yD0721uP7753+Y2PLj249MVXP1wucjH9P13XySsmvNctklv+j2LXiaLbdAv4N6689uHXo9zfmuSecf57KVN9eG8t3LDeywPv/tWxb//45e11thU4ecNhb/QMHAyB1imT9FOUc0mq5bKcm6u+w3/TOVu+PL/w6uyL84vXXmi6pwJOSj/ZevSTMx+fO5T/7ztV/oHTa5T/J6+sfjta3u003RqgFndUs1H+Z59bvj/yD60j/9Be8g/tJf/QXvIP7SX/0F7yD6dYb39hMHGz/EN7VfmvhuHJP7SL5z+018H8AwDtMjzzt6OD6xuIDNSu6f4HAAAAAAAAAAAAAAAAAAA4amVm4+r+VFfNz95Jdh5J0p1UvzP+P+LkxvHr2Z+L0W5/KKrDpvLsXVOeYEofNDz6+qbvmq3/+Z3N1l++lgxeT3Kh2z16/xV799/x3fwP23vPT1ngPyoOrT/8VL31D/tttdn6lzaTT0f9z4VJ/U+Z28bzyf1P/+BPLB/TK79OeQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABq83sAAAD//3oobDA=") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x3174, &(0x7f0000000380)={0x0, 0xa111, 0x10a69, 0x3, 0x20000219}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48341, 0xb5) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x2d, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r10, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000003980)=""/4109, 0x100d}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000001500)=""/173, 0xad}], 0x3}, 0x9}], 0x3, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x2, 0xe, 0x6b}, {0xfffa, 0x6, 0x0, 0xffffffff}, {0x3ff, 0xc8, 0x3, 0x80000001}, {0xff, 0x8, 0x8, 0x7}, {0x9, 0xeb, 0x13, 0x13}, {0x3, 0x9, 0x9, 0xd2}, {0x200, 0x7, 0x0, 0x8}, {0xd, 0x10, 0x6e, 0xc5d}, {0xc, 0x4, 0x2, 0x7f}, {0x80, 0x5, 0x86}]}) r11 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x206942, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305829, &(0x7f0000000200)={0x17c04, r8, 0x5, 0x7fc, 0x1ff, 0xffffffffffffffdf}) 5.609027013s ago: executing program 3 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{}, {0x3, 0xc8, 0xc9, 0x9}}}, 0x64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(0xffffffffffffffff, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_genetlink_get_family_id$ethtool(0x0, r6) socket$nl_generic(0x10, 0x3, 0x10) 4.625137819s ago: executing program 0 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{}, {0x3, 0xc8, 0xc9, 0x9}}}, 0x64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r7, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r8 = accept4(r7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_genetlink_get_family_id$ethtool(0x0, r6) socket$nl_generic(0x10, 0x3, 0x10) 3.551016046s ago: executing program 1 (id=90): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) recvfrom(r0, &(0x7f00000000c0)=""/120, 0x78, 0x0, 0x0, 0x0) r1 = getpid() syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1210801, &(0x7f0000002ac0)=ANY=[], 0x1, 0x1fc, &(0x7f0000000680)="$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") sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0xc08, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) fchown(r4, 0x0, 0xee01) 1.872861074s ago: executing program 0 (id=91): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) preadv(r5, 0x0, 0x0, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000005d40)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x1, 0x5bff, &(0x7f0000005d80)="$eJzs3Q+MHNX9GPCZ3Tv7zuc/ZxLAMX98gHENDXDGpIBFxEEV/jQxIZCYJBBsB5/NEf8Bnx2DE2KDFBIRmlpqlaSREiGUSFQIJS1qmj+NTFRC1NAollJq0jYlgkQNrYgjAomLKffT3c7s7c7N29nb3TM2fD7S3dzMvv2+933zbm7m7dxuBAAAwDvC018c/dt1iz/wy/uHX9tzzY+33Bf1lSe296QF+pPl3W9VCzmaZnctmlhmx8W+oVlPX/7Qh5771qe++8KLC5ev+M4dVx25a+7qBx8c+s3FR3715r1FcdPxdM7kevxyHEWn/Xr51x74+TMnj2+Loygqx/17o2hhXPrZwjgTYvD1KIo2VNtZ/+ATr63cOL7c+5XZddsXZIIY7+9sPck4+9JPt536p/Ovem7/b698bbDn9e17J4vEPTXjKYrmr6t9fncURb3J17h0tC1Kn5wsr4+iaE7N8y4paNeZTbb/vMD64mQ5K1n2FcRJHz8js97dZDu6MsueJp/XqtIMx0+l+2/uDNefPbhl61mYLH+QLM+ZZvxy+hVHpTjqqla3OZ4cI1HNfoujeKLuyfVS3ViIM2MjjqI4s17KrJe7M3lN1JsMtHIc129Py2W2DyTbu5LtZxSMtRsD29+T5pv8oh7O5J8N2jflh2peE9J2/b5BW/JlR1Z7SjXHoLztaXt7kp3Rl2zri0+Y8pyxHOlja1786vde2P3tpf2BdsTfj5P48UT8udOM/+yWSw8u2/27Q4tC8deVkvillto/ev4rj790wy9ODsbfl8YvtxT/+YuWff0ne3YdDvVPOrz6oq6W4pdXnXtkxf2Da4Ltfzjt/56W4j9y5WPfnP++px4P7t/BtH96W+ufkZ1v3PzoiYdC8ZPtXeN/NVuJf8WrJ529attjm4LtfzLtn76W4j8zOrL6gduX7BoIxT+Qxp/XUvwz/3DLzfsPDj8fbP9Q2v/9LcV//9Irrl99aOtDoWNnvPdo/YUFeHt6V3KO9eVkvdXrzHbVXC98oz+unPPNTb7mlTtZU73xeubPXHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3qEe6d8w/OaPTn+jK1mfnfxwermyTLfPiqK4N4qi0R3rt+8Y2bpp4I5tO7dvXb95YP2OgeGtO7bfM3DRe5dEUbR5/T3jjw6et7LyvBOiuLKMT5tS99jY2Fipv35bWt9nLv6XTwycfvC/R9Hgib85vSvY/g/fu/ifLsz5nhEPjW3+F2ff+tLc/7yzsqE/aVd/oF1RoF2XPfryqj/9uPefR9HgSY3a9b+XX/3zugZNbJiMkyjNjkoTP8yO5+S2o9rqpD1pf3VtHNk8PFjcv+VAHn88/O8+tmv0tr2V/u0J5tFk//YOjf196w+fvO2y3ddXNhyr+72ov9Ms0val/deT9Pf8JK/5gby6Ank9cPYZ/+u//estL++NBrv+umRq3UV5dScDoDt+T1P1pjXMiev7pCcpn+7x9HkX7Nhy5wWj9+w+b2TL+k3Dm4a3rly58pKLVl548YX/5IKJ1CvfO5Z/Wv8/ajL/6Y6n7mQ5vfG07eKhkfR7znjqmjqeitpV1B/j7Sruj9oWhX7/3v3Rq//Hff9+3w2VDePjvNRgnKelq8eTZDlnfDeviGrG29S+ysurqB+6A/2w6ca+f/PqwLb/V3Qcqt0ztd8z4qGxv478l8vn7j/r1sqGo3Kcr21Qi8f5aquT9nTXHndWHLv9OzsqJ3n15bbrrPtf+fh//VE8UG3frFnR3et37Ni+ovL9KOX17hs/n2a0J6/YtPO6ZNn/vWv3uvsWTsnrwsr3uUlL58an5LYruzXNa8nE93KUdEu6iHpK+fl1R5X21f5dWHX55POyvdqXxOyLT8jNKyt9bM2LX/3eC7u/vTTU0/H3KzX2RvMqy/jUQMnNmSeWq4nm1V80PqIoWle7Le3HJ3/4rwb2/3LhlsLxURkZU75n0xsa+8Klc/84etOB1ZUNR+e4MtGU2VEUtXxcqbZ6sj0T/TVxXLnwqOZR+Z7kUc7k8dbt57pfrHhobP+p79208j/uSH7ti/q3Wjqvf1dGUdFxYElmvZPHgdrnZeuZLJ8fbyCz3heVWzpuPH/Rsq//ZM+uw8Hjxl+aPW58vm6t3OZxIw6Mp4Nf+Ld//9zBZ6/t3HHj2mXlT/7PJSuTDn2rft+yx42eZFz3BMZ1tdVJe+LacX3+bds2b6hsP3bPf5NlwfVP+vd79J7dn1m/efPw9tHm8mr2vCStJ9vLU89LmjvfSn/7TijIK91fk3nN3A/N9Fezv29p+zdk+6vF3zfI0xfFLf09e3bLpQeX7f7dof5A3HhdKYlfain+6PmvPP7SDb84ORh/Xxq/q6X45VXnHllx/+CaYPyH4yR+T0vxH7nysW/Of99TjwfjD6bt723tfGJk5xs3P3piuP+jNH5fS/GfGR1Z/cDtS3YF4x+Ik3rGz+2i6InXVm6srMcTc049Ne3ormtXlF2PM+ulzHq5dr1UmYOvVlCO4/rtablk+xk1bclzUxRFB2ZP3Z6ePfYsqiwPp+tR9ofG2481pZpzgrzt2fPr3qPZOAA4ytLX/9NzjfT1/yXJH8Sa1/8ry3hW3fMXJedTiyY3TVzn3TdQ+UM63Xm9tB3Zeb00/vKz6mO0Oq9XNC93ZmY9bdeSpFfS9jSYl5sbNTEvN7WexvNymfSL580GvpzZ0DUxtxfab93JTEXO68wPLKhv79zxCO2eZy/Kb3X1PDs07rLzHenr9HGT4y57X0S6f7P3RaTxF2cm0Fq9L6LdcZdOazQYdxOZFc+nTh0XUYN+nRwX+dGy46LBOMqW76+Mo5l9Xeq4vt7/e+9MzL/XvbLwjplPiPbW90+T8wlNXe931z7v6F7vp9vT40NXk/MAawLbOzUPkB4u0nb9vkFbjobpzgMAwNtRev2fnlOMX/+P/60eyJznF123ZK8y0njB+1jK+e0puv6dej/bnJbOK6949aSzV217bFPwuuHJZu9LubNubU7BfSlF/bg0iq6tXS/sx8CtIEXzDssy5fuieS3145l/uOXm/QeHnw/241DlRKrSj/fljJTUvrq1eW324/LMemE/due3qqgfs/UUjd9zMut9yR1B0+339y+94vrVh7Y+FOz3vbX93mj8Ply31l/Q767TA/Grr8vP7H1yzV+n1w/A4+46Pds/R+l1/6L5yLfsdf9k3nqm5gFuDGyf7jxA35QfqnlNOO7mAQJ/FwDgeJZe/1fvl0+u//9Tply714fB87ahztzPGjxvq57X1pyXj+1pOn56Xh5sf/W8vL3romD86nVRe9ctwf6pXre0d90VjF+97mpvnibYP0+m/TP1vH9PE/HT8/7Qvwuk5/3H/3XRzM4zuC5K1qPsDxV510Ul10UAABxl6fV/erqa3v//VLKePTee+evcmb4Onenr6PZe/yueZ5jpeZLj/Tr36M8zNBO/+XmGmZ5neyfPA4wtmOY8QPXumg7PA0y5ejYPAADATPhAsry1yfJdyXvhfPq22y9cu2H4s2s3bh8eHr1z/W3Da0e2juyoluueuPKaep90qL6i+6Tzys9pUH5tMH59e64KlA9pN/9QfUX555VvlP+6YPz69lwdKB/Sbv6h+oryzyvfKP/1wfj17bkmUD6k3fxD9RXln1e+Uf6fDsavb8+1gfIh7eYfqq8o/7zyjfK/LRi/vj3/LFA+pN38Q/UV5Z9XvlH+2ffLDOX/wUD5kHbzD9VXlH9e+Sn5T05PRcPB+PXt+VCgfEi7+YfqK8o/r3yj/b8xGL++PasD5UPazT9UX1H+eeUb5b8pGL++PdcFyoe0m3+ovqL888o3yv/2YPz69nw4UD6k3fxD9RXln1e+Uf4jwfj17bk+UL5OzcRxu/mH6ivKP698o/zvCMavb89HAuVD2s0/VF9R/nnlG+X/mWD8+vbcECgf0m7+ofqK8s8r3yj/zcH49e25MVA+pN38Q/UV5Z9XvlH+W4Lx69vz0UD5kHbzD9VXlP+U8qWoYf5bg/Hr2/OxQPmQdvMP1VeUf175RvlvC8avb8+aQPmQdvMP1VeUf175RvnfGYxf356bAuVD2s0/VF9R/nnlG+V/VzB+fXs+Higf0m7+ofqK8s8rX4k/NjaW8xFW24Px69vziUD5kHbzD9VXlH9e+Ub7fzQYv749nwyUD2k3/1B93cktANPJp1H+O3LKRzntuTlQPqTd/KfUV8q2r/l8GuW/M6d8lNOeWwLlQ9rNP1RfUf555Rvl/9lg/Pr2fCpQPqTd/EP1FeWfV75R/ruC8evbc2ugfEi7+YfqK8o/r3yj/O8Oxq9vz9pA+ZBq/ju2Dw+v3XnnhvU7htdu3bZheHTtru0jO3YMJydq7d6XGLyvLLkvsTvqapj/4sz6guTWrQWB9wfKlk/DnjLxw9T3B8pW21XwPjlF+ytbf9H7DOWVzxtvof1bdDxodjxk1f1+VAbJyNbR4e1Tj9+9DfujdkxEE7fNVT6Boyc+qany2bfrDFRTqPl8ehrmk908O7kRcHZ8YlPlo8DnwU1X8/nEwXzy2jHdz7FLw07rc+wy36bIeY/Wunw3jk4cpEfWbx7ZPTy1/XOOgfY30497O96O0pR2FO3/ONMfC5OWLAx93lug/3b94P888uc//4cPRtHgieVT2+q/eGhs3eGTPv3ry2ZfMN7+UsP2V0umn6tc8PmH2fJpPl2bt43u+Mcbt+3cmv8KWnq/c6m6PkP3Oyd5lpv8P+bQ/R7TvX85nvLDsanZ+5cBAADeKdL//0+vVxcl/4O6MDNF0Pw8cHv/Hx2cBz7Q3DxwdjaiaB44Wz5Nu2geOL0m72tzHjhbf2iettSgfKPXXZqdB/5koPx0NT9O2nsfgOA4SXqqaJxk/w+/aJxkyzc7TlK9bY6TbP1F4ySvfKPXp5sdJzfll1+Q3+rpjIcW3ndiYPJ9J4LjYbC58ZD9XM2i8ZAtP93x0NPmeMjWXzQe8so3ul+nufEweaNs268fFY6P9t4XJjg+1jU3PrKfl1I0PrLlpzs+4jbHR7b+ovGRV77R/YzNHi8+Eiifan7/t/e+PcH9v6+5/Z/93Jai/Z8tP939X2pz/2frL9r/eeUb3c/d7P6/LlA+Vb//x3f8xH4fXrtr2/bae6An93/8Zv0rv5353JaQ5ts3s59b06rm2z9T7/sU1b+AOWPtb3A+2TU1hfSxZt9Xaubb3951U7D9B9p7pav59s/s5we3qhOvxy6pX89/PTY5FSp6H+qi12k/Edg+vddpeyfrntWgsmOA12kBAABg5qWv/6cfx5++P/xXkmXgY/pbdnx9vvfkxOXk+/vP7DzX8f/++zM7j3nU/r/imJrPi8znAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvMPM7lo0sXz6i6N/u27xB355//Bre6758Zb79g3Nevryhz703Lc+9d0XXly4fMV37rjqyF1zVz/44NBvLj7yqzfvLQzcX1mck6z2RFH8chxFp/16+dce+PkzJ48tqGwvx/17o2hhXPpZnI0w+HoURRuq7ax/8InXVm4cX+79yuy67QsyQbJ5RX3ltD117YzuLsyI49D4fh4fWV/66bZT/3T+Vc/t/+2Vrw32vL5972SRuGd8CCXjKYrmr6t9fncURb3J17h0tC1Kn5wsr4+iaE7N8y4paNeZTbb/vMD64mQ5K1n2FcRJHz8js97dZDu6MsueJp/XqtLMhv//Y2NjEz+k+2/uDNc/5eiWqWdhsvxBsjxnmvHL6VccleKoq1rd5nhyjEQ1+y2O4ol9P7leqhsLcWZsxFEUZ9ZLmfVydyaviXqTgVaO4/rtabnM9oFke1ey/YyCsXZjYPt70nyTX9TDmfyzQfum/FDNa0Lart83aMvRUKo5BuVtT9vbk+yMvmRbX3zClOeM5UgfW/PiV7/3wu5vL+0P1Bd/P07ixzXxy03Hf3bLpQeX7f7doUWBPON1pSR+qaX2j57/yuMv3fCLk4Px96Xxyy3Ff/6iZV//yZ5dh/tD8f+S9k9XS/HLq849suL+wTXB9j+cxu9pKf4jVz72zfnve+rxYPsH0/7pba1/Rna+cfOjJx4Kxo/S+HNain/FqyedvWrbY5uC8Z9M+6evpfjPjI6sfuD2JbsGQvEPpPHntRT/zD/ccvP+g8PPB9s/lPZPf0vx37/0iutXH9r6UOjYGe+d4b+wAG9z70rOsb6crDe8zqyZt8heZ7ar5nrhG/1x5ZxvbvI1r5MVZYzXM38G4wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8PY0fPU39lx9YO01XXEUxYEyYznSx8qzhoYGWqi3vOrcIyvuH1xTu21RC3EAAACAYul1eKm6pSdaFO2Ke6NTcsuncwSnpGtx/fbsHELvZMmOxCl1KE65Q3G6OhSnu0NxZnUozuwOxekpiNMTNRent2GcUtPtmdOhOH0dijO3Q3HmdSjO/A7FWdChOP0N4zQ/Dhd2KM4JHYrzrg7FeXeH4pzYoTgndSjOyR2Kk51Tnu44nJeUXByKM/FDuTBOV1yuPpA3n57Wc1rmeaVp1tPXZD3ZOfvp1tPbZD1ntVlPT5P1LGuznrjJes5ps55SQT3puL072760nnStyfF/T4fi7O5QnM91KM7nOxTn3g7F+UKH4uxpMw5As9Lr/8nrxv5odtdl0ZzkiJOdBUivd5dUnj3leNSTvUBPpPFOzWyfVRQve6Geibekw+07M7O9uy5eV/W8qUG8/tp4SzMPFuabnVDItG/5dONlJxYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6BXbuLkassHwD+np1PtoX/9B+oAyl0pLRiRFq6KB+p4aAXs8SgBPAjYLpbylA33XaRbVNYkbVeEC9UMJq4emEMVxhCjBoUlWS50BiUhE0UmwhKohJFAyRA0pqYjNmdc+arM51lBFvw90tzPt73eZ9nzkyzyfPOAAAAAAAAAADAm6hWXZivLk2Mhygs/+up3kM6l8nHcWWIuh//81e+96e5b1/QPlbIdgUt3jNEZgAAAKBb2ofnmiPFUMhuDfko3xFXTPYBisl9ptQ4R5WRlfNotO6E8dkkfuuBfbdvnb1r7r1T+3btqe2p7R8bG7v80rHtl21//9bbpqZr2xrHUBiQL5fkm71rbu+u6enaHbON++7XXU7WlVtDk8uHw8nr/v9edYqt+yiJb9V58y76f0rdGyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBy1KoL89WlifHRKISoT0y9h3Quk4/jyhB1r35t/eYrZx7a0z5WyA6RCAAAABgo7cNzzZFiKGQzIRPOXrk7vxVaCqHV9wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP97atWF+erSxPiaKISoT0y9h3Quk4/jyhB1fz07de29n954qH2sPEQeAAAAYLC0Dx9pjhRDOWwKuejsjrh0b+CcrvUrcbnWfZrn3F5x4fi47r2DfnGbVhm3ZZVx7x4Q95HkfGcAAACAt760/882R0qhkD29b/8/qK9P4zZ2xWWS8zC/FQAAAAD+M2n/n2+OlEMhW27266vt98/vikvXD/rePl0/6Hv7NO7CPnW6v88HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE5dterCfHVpYjwThRD1ian3kM5l8nFcGaLuc5du+cbP5g8dax8rZIdIBAAAAAyU9uGt1rsYCtnRkAtrVvr+y7f84zNzk4fX5UrJdD4f7tx14MAd2xvHNG7TF1755G9/ElWOi7ukcTwpDwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyhatWF+erSxPhpUQhRn5h6D+lcJh/HlSHqPjd18F83P3jWy+1j5SHyAAAAAIOlfXir9y+GcsiHfFi/ctfe6y8b6Vrfb88AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePuYvWtu767p6VqUXtzhwoULFyf7LxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCqqFUX5qtLE+PFKISoT0y9h3Quk4/jyhB1H/jgQ986430/f7h9rDxEHgAAAGCwtA9v9f7FUA65kAtnrdz12hNY6f9L/8UXCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBJq1YX56tLE+OlRCFGfmHq3fGsuk4/jyhB1z//Lp25ePFJ7rn2skB0iEQAAADBQ2oe3WvpiKGQvCYWwIbmf7lwQZZJzj32Ber3eWnd7x7LRVa+7u2NdZtXrvtj1ZNnkaRrrimm+UuPcXFc5fl0lhFBO1pVbE5Md68L9HatOX/Xr/E7HutKAdQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOQbXqwnx1aWI8ikKI+sTUe0jnMvk4rqymUFfyp/ddcWTL3B9ebh8rD/UEAAAAwCBpH95qz4uhHM4NZ4RzV/r+UOqMT+N2PPjilX/76WlfDmHb+t+cl+2b/68XVn/RfQhhpDNoJIT/S+pFfeod+tHfH3jppR9/OIRtZ2U2vN56nSnj+uSx9bc8taOw9QRvDAAAALyNpP1/rjlSCoXs/r79f9p5v67+f+bMG+5elxyTjrxrxUgpqTfSp97ey772w8p5R36/3P+fqN5HP3fOh9aFmcviqfTYGOkSxfXp+zbvfGHtEwfTp27Uz3TVT9+X54/94GOHZnd/vlG/GIrJ+DnZXvWPP3Y5La4f3f/o47t3zF3XWT/b5/nv3fzOP/7um/teXK7/6sbRZv13neD5T1z/zBurzxx+5P7rO+vn+tTfc8Oa775Wmfln4/m/2pwfDWFve3zyzjc+8LZPoUsU11+devKqtYubdnbWDyFMtgem7//jj369svirdfvS9z/9rciFmzoTt/9Xaz927TlFcX1xw0V7xh47sKazftRVP33+I/d8/+hnjzx9Tffnf2tYbf3u579mS+amZzeOrerHMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbz216sJ8dWliPGRCiPrE1HtI5zL5OK4MUfcDF1x93bUv7/9S+1ghO0QiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A1Tqy7MV5cmxkeiEKI+MfUe0rlMPo4rQ9SdvfiVh1+4/pfvaB8rD5EHAAAAGCztw1u9fzGUQz7kw+hK3z95bP0tT+0obA2lxmyUnLPTM7MH3nPbzMH9t56kVw4AAACsVtr/Z5sjpVDIXhBySf+/uOGiPWOPHViT9v8hhMnlQ/G2qenaWGjuE1yzJXPTsxvHKs19gva4i3fPTCfbBGnee65Y+/zsJ5au7Zl3eyvu1aknr1q7uGlnGpdLzitxl7Tipu/bvPOFtU8cTONG0n2K5bhtrbij+x99fPeOuevS+Ux7vra4M2+sPnP4kfuvb+ZJzqNJXQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf7MDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWF/ToKsaqI4wA8c++uXr3rtluUmxSpmGiQrFRUQrQKSQ9tSIEvFviQlZFJLWEI4SZkYRI+VQRFREEgUhD0UIQFZZBEQYT2EIb2UA+xEW2IGxW7O7N79+hpt1OrIN8Hh3Hm3POb/5kznr0XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDza25bz1h7+OmB3+9cdNvnu7cM77r9/W1P7e+bc/jWfXcce+XeN0+c7F6x+o2H1o882tG/d2/f1zeOfPHnk9MGPzHerEzdRgjx5xjClV+ueGHPp0cWjo7FEEI9dg2G0B1rH3fHQkLv6RDCfRN1Tj357vB194+2g8/NnTJ+USGkeF+hWc/1jOuaWi8XlkbaZ898uP2KH1etP3bo23XDvY3Tjw1OfiQ2WvZTCJ2bW69vDyHMS8eovNt68sWp3RBCmN9y3U3T1LV0hvVfW9JflNo5qW1Ok5PPLyn022dYR1uhbczwuqpqs5yf5efXMcvzF19uxXm6U/tealf+y/x6PmKoxdA2Md3DcXKPhJbnFkMce/aT/dqUvRALeyOGEAv9WqFfby/c19i8aaPVY5w6nj9XGF+cxtvS+JJp9trdJeOX5/tN/1FPFe6/GNo84x8T9zUm1/X9P9RyLtRa3kFnG8/1NtLDaKaxZrz4jGv+Oot8buPJ598+sfPVZV0ldcR3YsqPlfK/2Xbz0eU7vxvqKcvfXEv5tUr5A6t+PfjTXZ8tLM3fn/PrlfKPX7/8xQ927ThVuj6/5PVpq5RfX3PNyOrdvRtL638t5zcq5b++7sDLnTd8crC0/t68PvOqrc/Wx//Y9NalQ6X5IefPr5S/9rfLrl6z/cADpfkf5fVpVso/MrC1f8+DV+1YXJb/Vc5fUCl/6Q/3bDp0dMvx0vr78vp0Vcq/ZdnaDf1Dj+wre3fGwXP1FxbgwnRJ+o71bOpX/Z35X7X8XnipK45/5+tIx4L/c6KC0Xk6ZzEfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgb3bggAQAAABA0P/X7QgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApwIAAP//gfFYwA==") syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0) 1.864040676s ago: executing program 2 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{}, {0x3, 0xc8, 0xc9, 0x9}}}, 0x64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r7, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r8 = accept4(r7, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_genetlink_get_family_id$ethtool(0x0, r6) socket$nl_generic(0x10, 0x3, 0x10) 1.698730833s ago: executing program 3 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_logical_link_complete={{}, {0x3, 0xc8, 0xc9, 0x9}}}, 0x64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r4, 0x6) accept(r3, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 651.358355ms ago: executing program 1 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000ac0)={r4, 0xd0}, &(0x7f0000000b00)=0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 4 (id=95): r0 = syz_mount_image$ext4(&(0x7f0000001f80)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000540)={[{@nodioread_nolock}, {@discard}, {@nodelalloc}, {@data_err_ignore}, {@quota}]}, 0x1, 0x251, &(0x7f0000000240)="$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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x3174, &(0x7f0000000380)={0x0, 0xa111, 0x10a69, 0x3, 0x20000219}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48341, 0xb5) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x2d, 0x0, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r10, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000003980)=""/4109, 0x100d}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000001500)=""/173, 0xad}], 0x3}, 0x9}], 0x3, 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0xa, &(0x7f0000000180)=[{0x2, 0xe, 0x6b}, {0xfffa, 0x6, 0x0, 0xffffffff}, {0x3ff, 0xc8, 0x3, 0x80000001}, {0xff, 0x8, 0x8, 0x7}, {0x9, 0xeb, 0x13, 0x13}, {0x3, 0x9, 0x9, 0xd2}, {0x200, 0x7, 0x0, 0x8}, {0xd, 0x10, 0x6e, 0xc5d}, {0xc, 0x4, 0x2, 0x7f}, {0x80, 0x5, 0x86}]}) r11 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x206942, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305829, &(0x7f0000000200)={0x17c04, r8, 0x5, 0x7fc, 0x1ff, 0xffffffffffffffdf}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 39.317989][ T6516] cgroup: Unknown subsys name 'net' [ 39.401398][ T6516] cgroup: Unknown subsys name 'cpuset' [ 39.405254][ T6516] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 39.645119][ T6516] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 41.927673][ T6530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.953524][ T6541] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.956918][ T6541] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.959858][ T6542] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 41.960043][ T6541] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 41.960760][ T6541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.961146][ T6541] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 41.961537][ T6541] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.961812][ T6541] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 41.962961][ T6541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 41.963212][ T6541] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.963900][ T6541] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 41.964140][ T6541] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.967798][ T6540] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 41.971846][ T6540] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 41.992396][ T6544] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.992674][ T6542] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 42.005098][ T6543] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 42.007597][ T6540] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 42.011087][ T6543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.013125][ T6530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 42.018287][ T6543] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 42.021363][ T6542] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.031554][ T6542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 42.039788][ T6095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 42.260902][ T6532] chnl_net:caif_netlink_parms(): no params data found [ 42.357926][ T6532] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.360044][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.362242][ T6532] bridge_slave_0: entered allmulticast mode [ 42.364911][ T6532] bridge_slave_0: entered promiscuous mode [ 42.369103][ T6532] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.371267][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.373367][ T6532] bridge_slave_1: entered allmulticast mode [ 42.376114][ T6532] bridge_slave_1: entered promiscuous mode [ 42.416028][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 42.420987][ T6532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.449938][ T6532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.559556][ T6532] team0: Port device team_slave_0 added [ 42.565750][ T6532] team0: Port device team_slave_1 added [ 42.573709][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 42.591504][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 42.593953][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 42.637237][ T6532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.639272][ T6532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.645608][ T6532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.676338][ T6532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.676401][ T6532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.676435][ T6532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.693968][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.694085][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.694264][ T6526] bridge_slave_0: entered allmulticast mode [ 42.695139][ T6526] bridge_slave_0: entered promiscuous mode [ 42.697139][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.697206][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.697319][ T6526] bridge_slave_1: entered allmulticast mode [ 42.698311][ T6526] bridge_slave_1: entered promiscuous mode [ 42.751624][ T6532] hsr_slave_0: entered promiscuous mode [ 42.752286][ T6532] hsr_slave_1: entered promiscuous mode [ 42.771510][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.776386][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.815018][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.815662][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.815791][ T6531] bridge_slave_0: entered allmulticast mode [ 42.816727][ T6531] bridge_slave_0: entered promiscuous mode [ 42.824777][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.827276][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.829822][ T6527] bridge_slave_0: entered allmulticast mode [ 42.831834][ T6527] bridge_slave_0: entered promiscuous mode [ 42.833481][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.833531][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.833643][ T6527] bridge_slave_1: entered allmulticast mode [ 42.834495][ T6527] bridge_slave_1: entered promiscuous mode [ 42.843394][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.843492][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.843606][ T6533] bridge_slave_0: entered allmulticast mode [ 42.844597][ T6533] bridge_slave_0: entered promiscuous mode [ 42.858179][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.858290][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.858405][ T6531] bridge_slave_1: entered allmulticast mode [ 42.859337][ T6531] bridge_slave_1: entered promiscuous mode [ 42.880792][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.880885][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.881295][ T6533] bridge_slave_1: entered allmulticast mode [ 42.882133][ T6533] bridge_slave_1: entered promiscuous mode [ 42.920030][ T6526] team0: Port device team_slave_0 added [ 42.924535][ T6526] team0: Port device team_slave_1 added [ 42.942203][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.953385][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.955094][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.977574][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.978839][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.999004][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.999067][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.999104][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.000372][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.000400][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.000433][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.008009][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.034001][ T6533] team0: Port device team_slave_0 added [ 43.061264][ T6531] team0: Port device team_slave_0 added [ 43.063349][ T6531] team0: Port device team_slave_1 added [ 43.071601][ T6533] team0: Port device team_slave_1 added [ 43.085849][ T6526] hsr_slave_0: entered promiscuous mode [ 43.087213][ T6526] hsr_slave_1: entered promiscuous mode [ 43.087590][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.087669][ T6526] Cannot create hsr debugfs directory [ 43.096990][ T6527] team0: Port device team_slave_0 added [ 43.101607][ T6527] team0: Port device team_slave_1 added [ 43.136965][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.139183][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.140509][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.173098][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.173175][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.173410][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.187616][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.189708][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.196938][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.225530][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.227653][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.235176][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.239888][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.239917][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.239956][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.240735][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.240759][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.240792][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.311841][ T6531] hsr_slave_0: entered promiscuous mode [ 43.312407][ T6531] hsr_slave_1: entered promiscuous mode [ 43.312737][ T6531] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.312767][ T6531] Cannot create hsr debugfs directory [ 43.336638][ T6533] hsr_slave_0: entered promiscuous mode [ 43.338997][ T6533] hsr_slave_1: entered promiscuous mode [ 43.340952][ T6533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.341264][ T6533] Cannot create hsr debugfs directory [ 43.354060][ T6527] hsr_slave_0: entered promiscuous mode [ 43.354691][ T6527] hsr_slave_1: entered promiscuous mode [ 43.355064][ T6527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.355095][ T6527] Cannot create hsr debugfs directory [ 43.558706][ T6532] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 43.564927][ T6532] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 43.569820][ T6532] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 43.598746][ T6532] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 43.658991][ T6526] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 43.661006][ T6526] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 43.663809][ T6526] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 43.669118][ T6526] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 43.717937][ T6531] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.736114][ T6531] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.738130][ T6531] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.750473][ T6531] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.793644][ T6532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.800867][ T6533] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.804929][ T6533] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.809394][ T6533] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.827374][ T6533] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.841645][ T6532] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.870257][ T2190] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.870471][ T2190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.891084][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.891174][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.921892][ T6527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 43.927469][ T6527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 43.931985][ T6527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 43.942559][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.962453][ T6527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 44.003187][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.007134][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.007238][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.017361][ T6534] Bluetooth: hci3: command tx timeout [ 44.033786][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.050742][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.050845][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.085366][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.093288][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.100829][ T6531] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.101248][ T6534] Bluetooth: hci0: command tx timeout [ 44.101473][ T6534] Bluetooth: hci1: command tx timeout [ 44.101572][ T6534] Bluetooth: hci4: command tx timeout [ 44.106050][ T6534] Bluetooth: hci2: command tx timeout [ 44.134245][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.153147][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.153248][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.154199][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.154246][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.173839][ T6532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.213603][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.213680][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.223988][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.229343][ T6531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.275195][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.275295][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.294706][ T6532] veth0_vlan: entered promiscuous mode [ 44.314891][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.344074][ T6533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 44.347321][ T6533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 44.357472][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.367219][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.367316][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.369172][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.369222][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.398758][ T6532] veth1_vlan: entered promiscuous mode [ 44.413275][ T6532] veth0_macvtap: entered promiscuous mode [ 44.418865][ T6532] veth1_macvtap: entered promiscuous mode [ 44.429319][ T6532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.435050][ T6532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.440595][ T6532] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.441120][ T6532] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.441179][ T6532] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.441214][ T6532] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.511876][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.523989][ T6526] veth0_vlan: entered promiscuous mode [ 44.531027][ T6526] veth1_vlan: entered promiscuous mode [ 44.624935][ T715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.625044][ T715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.661183][ T6526] veth0_macvtap: entered promiscuous mode [ 44.668265][ T6531] veth0_vlan: entered promiscuous mode [ 44.673118][ T6526] veth1_macvtap: entered promiscuous mode [ 44.677483][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.677548][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 44.690180][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.702494][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.714331][ T6531] veth1_vlan: entered promiscuous mode [ 44.723846][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.742100][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.744822][ T6526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.749802][ T6526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.750123][ T6526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.750163][ T6526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.775557][ T6531] veth0_macvtap: entered promiscuous mode [ 44.779500][ T6531] veth1_macvtap: entered promiscuous mode [ 44.833606][ T6532] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 44.837802][ T6527] veth0_vlan: entered promiscuous mode [ 44.843731][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.882395][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.884062][ T6531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.884105][ T6531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.884136][ T6531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.884181][ T6531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.934773][ T6527] veth1_vlan: entered promiscuous mode [ 44.972667][ T715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 44.972735][ T715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.022441][ T6533] veth0_vlan: entered promiscuous mode [ 45.030063][ T6527] veth0_macvtap: entered promiscuous mode [ 45.031956][ T6527] veth1_macvtap: entered promiscuous mode [ 45.049160][ T6533] veth1_vlan: entered promiscuous mode [ 45.075726][ T2190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.075778][ T2190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.122007][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.139674][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.143727][ T6527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.147915][ T6527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.148180][ T6527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.148224][ T6527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.630892][ T6095] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 45.631228][ T6095] CPU: 0 UID: 0 PID: 6095 Comm: kworker/u9:1 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 45.631247][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.631257][ T6095] Workqueue: hci3 hci_rx_work [ 45.631279][ T6095] Call trace: [ 45.631283][ T6095] show_stack+0x2c/0x3c (C) [ 45.631297][ T6095] __dump_stack+0x30/0x40 [ 45.631313][ T6095] dump_stack_lvl+0xd8/0x12c [ 45.631327][ T6095] dump_stack+0x1c/0x28 [ 45.631341][ T6095] sysfs_create_dir_ns+0x22c/0x24c [ 45.631356][ T6095] kobject_add_internal+0x5a8/0xb20 [ 45.631371][ T6095] kobject_add+0x134/0x200 [ 45.631382][ T6095] device_add+0x394/0xa60 [ 45.631397][ T6095] hci_conn_add_sysfs+0xc0/0x1d0 [ 45.631408][ T6095] le_conn_complete_evt+0x98c/0xe84 [ 45.631423][ T6095] hci_le_conn_complete_evt+0x114/0x3f8 [ 45.631438][ T6095] hci_le_meta_evt+0x2cc/0x4b0 [ 45.631450][ T6095] hci_event_packet+0x60c/0xe9c [ 45.631462][ T6095] hci_rx_work+0x320/0xb18 [ 45.631475][ T6095] process_one_work+0x7e8/0x155c [ 45.631490][ T6095] worker_thread+0x958/0xed8 [ 45.631504][ T6095] kthread+0x5fc/0x75c [ 45.631525][ T6095] ret_from_fork+0x10/0x20 [ 45.632038][ T6095] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 45.632244][ T6095] Bluetooth: hci3: failed to register connection device [ 45.869205][ T715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 45.871726][ T715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 45.940176][ T6533] veth0_macvtap: entered promiscuous mode [ 45.967433][ T6649] loop2: detected capacity change from 0 to 128 [ 45.991834][ T6651] loop1: detected capacity change from 0 to 128 [ 46.006086][ T6649] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 46.015235][ T6533] veth1_macvtap: entered promiscuous mode [ 46.033928][ T276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.041966][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.047990][ T276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.052252][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.087847][ T6533] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.087933][ T6533] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.087987][ T6533] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.088024][ T6533] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.097206][ T6534] Bluetooth: hci3: command tx timeout [ 46.175332][ T6651] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 46.176640][ T6534] Bluetooth: hci2: command tx timeout [ 46.176717][ T6534] Bluetooth: hci4: command tx timeout [ 46.176759][ T6534] Bluetooth: hci1: command tx timeout [ 46.176799][ T6534] Bluetooth: hci0: command tx timeout [ 47.000307][ T276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.000379][ T276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.081372][ T6526] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.083180][ T6532] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.129530][ T276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.129592][ T276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.180100][ T2190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.180172][ T2190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.202755][ T6669] loop2: detected capacity change from 0 to 128 [ 47.212286][ T6667] loop1: detected capacity change from 0 to 512 [ 47.226163][ T6665] loop0: detected capacity change from 0 to 128 [ 47.231386][ T6667] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.235083][ T276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.235128][ T276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.242795][ T6667] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.243868][ T6669] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 47.247694][ T6665] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 47.294200][ T6667] EXT4-fs (loop1): 1 truncate cleaned up [ 47.295118][ T6667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.189477][ T6095] Bluetooth: hci3: command tx timeout [ 48.256326][ T6534] Bluetooth: hci1: command tx timeout [ 48.258556][ T6534] Bluetooth: hci4: command tx timeout [ 48.260944][ T6534] Bluetooth: hci2: command tx timeout [ 48.267059][ T6095] Bluetooth: hci0: command tx timeout [ 48.933222][ T6531] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.968370][ T6688] loop3: detected capacity change from 0 to 128 [ 49.008299][ T6688] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 49.021826][ T6526] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.028677][ T6532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.045387][ T6692] loop4: detected capacity change from 0 to 128 [ 50.320051][ T6095] Bluetooth: hci3: command tx timeout [ 50.325035][ T6692] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 50.335622][ T6095] Bluetooth: hci0: command tx timeout [ 50.335823][ T6095] Bluetooth: hci2: command tx timeout [ 50.335879][ T6095] Bluetooth: hci4: command tx timeout [ 50.335920][ T6095] Bluetooth: hci1: command tx timeout [ 50.338350][ T6708] loop2: detected capacity change from 0 to 128 [ 51.014733][ T6534] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 51.715140][ T6708] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 51.809479][ T6527] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.841976][ T6714] loop0: detected capacity change from 0 to 128 [ 52.764123][ T6542] Bluetooth: hci3: command 0x0406 tx timeout [ 52.764269][ T6542] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 52.805351][ T6714] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 54.049120][ T6533] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.189593][ T6531] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.191135][ T6526] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.284337][ T6738] loop4: detected capacity change from 0 to 128 [ 55.267160][ T6738] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 56.245778][ T6534] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 56.442846][ T6743] loop2: detected capacity change from 0 to 2048 [ 57.138453][ T6743] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 57.138527][ T6743] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.138570][ T6743] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 57.138599][ T6743] EXT4-fs (loop2): group descriptors corrupted! [ 57.202147][ T6533] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.251737][ T6760] loop0: detected capacity change from 0 to 128 [ 57.266630][ T6760] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 58.506648][ T6542] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 59.431038][ T6780] loop2: detected capacity change from 0 to 128 [ 59.603108][ T6531] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.609162][ T6781] loop1: detected capacity change from 0 to 128 [ 59.896193][ T6780] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 59.897277][ T6781] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 60.141752][ T6788] loop3: detected capacity change from 0 to 128 [ 60.844880][ T6788] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 60.880588][ T6526] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.003248][ T6800] loop0: detected capacity change from 0 to 512 [ 61.006216][ T6798] loop4: detected capacity change from 0 to 128 [ 61.013643][ T6532] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.077100][ T6800] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.096835][ T6800] EXT4-fs (loop0): 1 truncate cleaned up [ 61.106371][ T6798] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 61.776777][ T6800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.982559][ T6527] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.636059][ T6534] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 63.107282][ T6533] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.345350][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.345793][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.375835][ T6542] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 64.375934][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: kworker/u9:6 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 64.375951][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.375960][ T6542] Workqueue: hci0 hci_rx_work [ 64.375981][ T6542] Call trace: [ 64.375985][ T6542] show_stack+0x2c/0x3c (C) [ 64.376000][ T6542] __dump_stack+0x30/0x40 [ 64.376015][ T6542] dump_stack_lvl+0xd8/0x12c [ 64.376030][ T6542] dump_stack+0x1c/0x28 [ 64.376044][ T6542] sysfs_create_dir_ns+0x22c/0x24c [ 64.376059][ T6542] kobject_add_internal+0x5a8/0xb20 [ 64.376072][ T6542] kobject_add+0x134/0x200 [ 64.376084][ T6542] device_add+0x394/0xa60 [ 64.376099][ T6542] hci_conn_add_sysfs+0xc0/0x1d0 [ 64.376110][ T6542] le_conn_complete_evt+0x98c/0xe84 [ 64.376126][ T6542] hci_le_conn_complete_evt+0x114/0x3f8 [ 64.376140][ T6542] hci_le_meta_evt+0x2cc/0x4b0 [ 64.376162][ T6542] hci_event_packet+0x60c/0xe9c [ 64.376174][ T6542] hci_rx_work+0x320/0xb18 [ 64.376187][ T6542] process_one_work+0x7e8/0x155c [ 64.376207][ T6542] worker_thread+0x958/0xed8 [ 64.376222][ T6542] kthread+0x5fc/0x75c [ 64.376235][ T6542] ret_from_fork+0x10/0x20 [ 64.376391][ T6542] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 64.376433][ T6542] Bluetooth: hci0: failed to register connection device [ 64.514558][ T2410] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.514698][ T2410] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.577198][ T6843] loop3: detected capacity change from 0 to 128 [ 65.776785][ T6843] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.538437][ T6534] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 66.573046][ T6844] loop4: detected capacity change from 0 to 512 [ 66.602010][ T6852] loop2: detected capacity change from 0 to 128 [ 67.076355][ T6844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.098184][ T6531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.107196][ T6852] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 67.114461][ T6844] EXT4-fs (loop4): 1 truncate cleaned up [ 67.115510][ T6844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.354601][ T6527] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.424531][ T6872] loop3: detected capacity change from 0 to 128 [ 68.447387][ T6869] loop0: detected capacity change from 0 to 512 [ 68.458568][ T6869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.474762][ T6526] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.477734][ T6872] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 68.479563][ T6869] EXT4-fs (loop0): 1 truncate cleaned up [ 68.480473][ T6869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.515291][ T6533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.567954][ T6885] loop4: detected capacity change from 0 to 128 [ 69.703076][ T2319] cfg80211: failed to load regulatory.db [ 69.843436][ T6885] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 70.061348][ T6531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.092145][ T6527] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.514408][ T6892] loop2: detected capacity change from 0 to 512 [ 70.521557][ T6892] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.722323][ T6892] EXT4-fs (loop2): 1 truncate cleaned up [ 71.810236][ T6542] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 71.810327][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: kworker/u9:6 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 71.810344][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.810353][ T6542] Workqueue: hci1 hci_rx_work [ 71.810374][ T6542] Call trace: [ 71.810379][ T6542] show_stack+0x2c/0x3c (C) [ 71.810394][ T6542] __dump_stack+0x30/0x40 [ 71.810410][ T6542] dump_stack_lvl+0xd8/0x12c [ 71.810425][ T6542] dump_stack+0x1c/0x28 [ 71.810438][ T6542] sysfs_create_dir_ns+0x22c/0x24c [ 71.810454][ T6542] kobject_add_internal+0x5a8/0xb20 [ 71.810468][ T6542] kobject_add+0x134/0x200 [ 71.810480][ T6542] device_add+0x394/0xa60 [ 71.810494][ T6542] hci_conn_add_sysfs+0xc0/0x1d0 [ 71.810506][ T6542] le_conn_complete_evt+0x98c/0xe84 [ 71.810521][ T6542] hci_le_conn_complete_evt+0x114/0x3f8 [ 71.810535][ T6542] hci_le_meta_evt+0x2cc/0x4b0 [ 71.810547][ T6542] hci_event_packet+0x60c/0xe9c [ 71.810559][ T6542] hci_rx_work+0x320/0xb18 [ 71.810572][ T6542] process_one_work+0x7e8/0x155c [ 71.810588][ T6542] worker_thread+0x958/0xed8 [ 71.810602][ T6542] kthread+0x5fc/0x75c [ 71.810615][ T6542] ret_from_fork+0x10/0x20 [ 71.810772][ T6542] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 71.810819][ T6542] Bluetooth: hci1: failed to register connection device [ 71.812311][ T6892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.898013][ T6533] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.678949][ T6904] loop3: detected capacity change from 0 to 512 [ 72.691458][ T6904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 72.751443][ T6904] EXT4-fs (loop3): 1 truncate cleaned up [ 72.752395][ T6904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.829544][ T6526] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.829809][ T6915] loop0: detected capacity change from 0 to 128 [ 73.939810][ T6527] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.955299][ T6915] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 74.638036][ T6931] loop4: detected capacity change from 0 to 128 [ 75.441910][ T6531] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.555715][ T6931] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 76.512954][ T6943] loop2: detected capacity change from 0 to 512 [ 76.543756][ T6533] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.556261][ T6943] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.582632][ T6943] EXT4-fs (loop2): 1 truncate cleaned up [ 76.585161][ T6943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.494579][ T6965] loop4: detected capacity change from 0 to 512 [ 77.502181][ T6965] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.667816][ T6965] EXT4-fs (loop4): 1 truncate cleaned up [ 77.668758][ T6965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.396599][ T6970] loop0: detected capacity change from 0 to 512 [ 78.425757][ T6970] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.510028][ T6970] EXT4-fs (loop0): 1 truncate cleaned up [ 78.510964][ T6970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.502647][ T6531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.550916][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.551249][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.010569][ T6992] loop0: detected capacity change from 0 to 512 [ 81.073971][ T6992] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.083215][ T6992] EXT4-fs (loop0): 1 truncate cleaned up [ 81.084106][ T6992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.299846][ T6997] loop1: detected capacity change from 0 to 512 [ 81.320128][ T6997] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.032718][ T6997] EXT4-fs (loop1): 1 truncate cleaned up [ 82.033686][ T6997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.231869][ T6531] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.939828][ T7018] loop0: detected capacity change from 0 to 128 [ 83.993525][ T6532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.071209][ T7018] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 84.138598][ T6526] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.209991][ T7024] loop3: detected capacity change from 0 to 512 [ 84.246999][ T7024] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.277400][ T7024] EXT4-fs (loop3): 1 truncate cleaned up [ 84.278333][ T7024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.599891][ T6527] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.602029][ T6531] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.047473][ T6534] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 86.476648][ T7046] loop2: detected capacity change from 0 to 128 [ 86.551630][ T7046] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 88.247321][ T6526] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.357382][ T7062] loop0: detected capacity change from 0 to 128 [ 88.410386][ T7062] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 89.093041][ T7067] loop2: detected capacity change from 0 to 128 [ 89.217513][ T7067] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 90.818026][ T6533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.066835][ T6531] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.069143][ T7081] loop4: detected capacity change from 0 to 128 [ 91.080999][ T6526] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.099135][ T7081] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 91.202105][ T7088] loop2: detected capacity change from 0 to 128 [ 92.187272][ T6542] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 92.253423][ T7088] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 93.146257][ T7097] loop3: detected capacity change from 0 to 512 [ 93.149307][ T7097] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.165635][ T7097] EXT4-fs (loop3): 1 truncate cleaned up [ 93.168190][ T7097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.197212][ T6526] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.203072][ T6533] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.242672][ T6527] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.306280][ T7126] loop2: detected capacity change from 0 to 128 [ 95.488172][ T7126] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 95.514479][ T7118] loop4: detected capacity change from 0 to 512 [ 95.721848][ T7131] loop1: detected capacity change from 0 to 32768 [ 95.837300][ T7131] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 95.837300][ T7131] clean (size 2912): [ 95.837300][ T7131] flags: 0 [ 95.837300][ T7131] journal_seq: 8 [ 95.837300][ T7131] prio_ptrs: [ 95.837300][ T7131] usage: type=key_version v=0 [ 95.837300][ T7131] usage: type=reserved v=0 [ 95.837300][ T7131] usage: type=reserved v=0 [ 95.837300][ T7131] usage: type=reserved v=0 [ 95.837300][ T7131] usage: type=reserved v=0 [ 95.837300][ T7131] data_usage: btree: 1/1 [0]=2816 [ 95.837300][ T7131] data_usage: journal: 1/1 [0]=0 [ 95.837300][ T7131] data_usage: user: 1/1 [0]=32 [ 95.837300][ T7131] dev_usage: dev=0 [ 95.837300][ T7131] free: buckets=83 sectors=0 fragmented=0 [ 95.837300][ T7131] sb: buckets=25 sectors=6152 fragmented=248 [ 95.837300][ T7131] journal: buckets=8 sectors=2048 fragmented=0 [ 95.837300][ T7131] btree: buckets=11 sectors=2816 fragmented=0 [ 95.837300][ T7131] user: buckets=1 sectors=32 fragmented=224 [ 95.837300][ T7131] cached: buckets=0 sectors=0 fragmented=0 [ 95.837300][ T7131] parity: buckets=0 sectors=0 fragmented=786432 [ 95.837300][ T7131] stripe: buckets=0 sectors=0 fragmented=0 [ 95.837300][ T7131] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 95.837300][ T7131] need_discard: buckets=0 sectors=0 fragmented=0 [ 95.837300][ T7131] clock: read=0 [ 95.837300][ T7131] clock: write=1288 [ 95.837300][ T7131] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2a [ 95.838101][ T7131] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 96.285595][ T7118] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.295943][ T7118] EXT4-fs (loop4): 1 truncate cleaned up [ 96.296942][ T7118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.291031][ T6542] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 98.291144][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: kworker/u9:6 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 98.291171][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.291180][ T6542] Workqueue: hci2 hci_rx_work [ 98.291201][ T6542] Call trace: [ 98.291205][ T6542] show_stack+0x2c/0x3c (C) [ 98.291219][ T6542] __dump_stack+0x30/0x40 [ 98.291235][ T6542] dump_stack_lvl+0xd8/0x12c [ 98.291250][ T6542] dump_stack+0x1c/0x28 [ 98.291264][ T6542] sysfs_create_dir_ns+0x22c/0x24c [ 98.291279][ T6542] kobject_add_internal+0x5a8/0xb20 [ 98.291293][ T6542] kobject_add+0x134/0x200 [ 98.291304][ T6542] device_add+0x394/0xa60 [ 98.291319][ T6542] hci_conn_add_sysfs+0xc0/0x1d0 [ 98.291331][ T6542] le_conn_complete_evt+0x98c/0xe84 [ 98.291346][ T6542] hci_le_conn_complete_evt+0x114/0x3f8 [ 98.291360][ T6542] hci_le_meta_evt+0x2cc/0x4b0 [ 98.291372][ T6542] hci_event_packet+0x60c/0xe9c [ 98.291384][ T6542] hci_rx_work+0x320/0xb18 [ 98.291397][ T6542] process_one_work+0x7e8/0x155c [ 98.291412][ T6542] worker_thread+0x958/0xed8 [ 98.291433][ T6542] kthread+0x5fc/0x75c [ 98.291446][ T6542] ret_from_fork+0x10/0x20 [ 98.291606][ T6542] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 98.291648][ T6542] Bluetooth: hci2: failed to register connection device [ 98.675628][ T6534] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 99.033677][ T6526] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.041848][ T7148] loop1: detected capacity change from 0 to 16 [ 99.044024][ T7148] erofs (device loop1): invalid sb_extslots 4160 (more than a fs block) [ 99.430356][ T7154] overlayfs: missing 'workdir' [ 100.364608][ T7160] loop0: detected capacity change from 0 to 32768 [ 100.588596][ T7160] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section [ 100.588596][ T7160] clean (size 2912): [ 100.588596][ T7160] flags: 0 [ 100.588596][ T7160] journal_seq: 8 [ 100.588596][ T7160] prio_ptrs: [ 100.588596][ T7160] usage: type=key_version v=0 [ 100.588596][ T7160] usage: type=reserved v=0 [ 100.588596][ T7160] usage: type=reserved v=0 [ 100.588596][ T7160] usage: type=reserved v=0 [ 100.588596][ T7160] usage: type=reserved v=0 [ 100.588596][ T7160] data_usage: btree: 1/1 [0]=2816 [ 100.588596][ T7160] data_usage: journal: 1/1 [0]=0 [ 100.588596][ T7160] data_usage: user: 1/1 [0]=32 [ 100.588596][ T7160] dev_usage: dev=0 [ 100.588596][ T7160] free: buckets=83 sectors=0 fragmented=0 [ 100.588596][ T7160] sb: buckets=25 sectors=6152 fragmented=248 [ 100.588596][ T7160] journal: buckets=8 sectors=2048 fragmented=0 [ 100.588596][ T7160] btree: buckets=11 sectors=2816 fragmented=0 [ 100.588596][ T7160] user: buckets=1 sectors=32 fragmented=224 [ 100.588596][ T7160] cached: buckets=0 sectors=0 fragmented=0 [ 100.588596][ T7160] parity: buckets=0 sectors=0 fragmented=786432 [ 100.588596][ T7160] stripe: buckets=0 sectors=0 fragmented=0 [ 100.588596][ T7160] need_gc_gens: buckets=0 sectors=0 fragmented=0 [ 100.588596][ T7160] need_discard: buckets=0 sectors=0 fragmented=0 [ 100.588596][ T7160] clock: read=0 [ 100.588596][ T7160] clock: write=1288 [ 100.588596][ T7160] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2a [ 100.589249][ T7160] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean [ 101.919075][ T6534] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 101.967216][ T6542] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 101.967294][ T6542] CPU: 0 UID: 0 PID: 6542 Comm: kworker/u9:6 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 101.967316][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.967325][ T6542] Workqueue: hci1 hci_rx_work [ 101.967346][ T6542] Call trace: [ 101.967350][ T6542] show_stack+0x2c/0x3c (C) [ 101.967365][ T6542] __dump_stack+0x30/0x40 [ 101.967381][ T6542] dump_stack_lvl+0xd8/0x12c [ 101.967396][ T6542] dump_stack+0x1c/0x28 [ 101.967411][ T6542] sysfs_create_dir_ns+0x22c/0x24c [ 101.967427][ T6542] kobject_add_internal+0x5a8/0xb20 [ 101.967441][ T6542] kobject_add+0x134/0x200 [ 101.967453][ T6542] device_add+0x394/0xa60 [ 101.967468][ T6542] hci_conn_add_sysfs+0xc0/0x1d0 [ 101.967480][ T6542] le_conn_complete_evt+0x98c/0xe84 [ 101.967496][ T6542] hci_le_conn_complete_evt+0x114/0x3f8 [ 101.967511][ T6542] hci_le_meta_evt+0x2cc/0x4b0 [ 101.967524][ T6542] hci_event_packet+0x60c/0xe9c [ 101.967536][ T6542] hci_rx_work+0x320/0xb18 [ 101.967550][ T6542] process_one_work+0x7e8/0x155c [ 101.967565][ T6542] worker_thread+0x958/0xed8 [ 101.967580][ T6542] kthread+0x5fc/0x75c [ 101.967593][ T6542] ret_from_fork+0x10/0x20 [ 101.979134][ T6542] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 101.979253][ T6542] Bluetooth: hci1: failed to register connection device [ 102.913670][ T6542] ================================================================== [ 102.913711][ T6542] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1d4/0x284 [ 102.913742][ T6542] Read of size 8 at addr ffff0000d63d9588 by task kworker/u9:6/6542 [ 102.913759][ T6542] [ 102.913771][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: kworker/u9:6 Not tainted 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 102.913786][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.913794][ T6542] Workqueue: hci1 hci_rx_work [ 102.913810][ T6542] Call trace: [ 102.913814][ T6542] show_stack+0x2c/0x3c (C) [ 102.913827][ T6542] __dump_stack+0x30/0x40 [ 102.913842][ T6542] dump_stack_lvl+0xd8/0x12c [ 102.913857][ T6542] print_address_description+0xa8/0x254 [ 102.913872][ T6542] print_report+0x68/0x84 [ 102.913885][ T6542] kasan_report+0xb0/0x110 [ 102.913898][ T6542] __asan_report_load8_noabort+0x20/0x2c [ 102.913911][ T6542] l2cap_sock_new_connection_cb+0x1d4/0x284 [ 102.913926][ T6542] l2cap_connect_cfm+0x2d8/0xd40 [ 102.913939][ T6542] hci_connect_cfm+0x98/0x134 [ 102.913951][ T6542] le_conn_complete_evt+0x9f4/0xe84 [ 102.913966][ T6542] hci_le_conn_complete_evt+0x114/0x3f8 [ 102.913981][ T6542] hci_le_meta_evt+0x2cc/0x4b0 [ 102.913993][ T6542] hci_event_packet+0x60c/0xe9c [ 102.914005][ T6542] hci_rx_work+0x320/0xb18 [ 102.914019][ T6542] process_one_work+0x7e8/0x155c [ 102.914035][ T6542] worker_thread+0x958/0xed8 [ 102.914050][ T6542] kthread+0x5fc/0x75c [ 102.914063][ T6542] ret_from_fork+0x10/0x20 [ 102.914075][ T6542] [ 102.914203][ T6542] Allocated by task 6542: [ 102.914225][ T6542] kasan_save_track+0x40/0x78 [ 102.914241][ T6542] kasan_save_alloc_info+0x44/0x54 [ 102.914258][ T6542] __kasan_kmalloc+0x9c/0xb4 [ 102.914273][ T6542] __kmalloc_noprof+0x2fc/0x4c8 [ 102.914289][ T6542] sk_prot_alloc+0xc4/0x1f0 [ 102.914306][ T6542] sk_alloc+0x44/0x3ac [ 102.914322][ T6542] bt_sock_alloc+0x4c/0x300 [ 102.914338][ T6542] l2cap_sock_new_connection_cb+0xe4/0x284 [ 102.914357][ T6542] l2cap_connect_cfm+0x2d8/0xd40 [ 102.914374][ T6542] hci_connect_cfm+0x98/0x134 [ 102.914391][ T6542] le_conn_complete_evt+0x9f4/0xe84 [ 102.914411][ T6542] hci_le_conn_complete_evt+0x114/0x3f8 [ 102.914430][ T6542] hci_le_meta_evt+0x2cc/0x4b0 [ 102.914447][ T6542] hci_event_packet+0x60c/0xe9c [ 102.914463][ T6542] hci_rx_work+0x320/0xb18 [ 102.914481][ T6542] process_one_work+0x7e8/0x155c [ 102.914500][ T6542] worker_thread+0x958/0xed8 [ 102.914519][ T6542] kthread+0x5fc/0x75c [ 102.914536][ T6542] ret_from_fork+0x10/0x20 [ 102.914552][ T6542] [ 102.914561][ T6542] Freed by task 7168: [ 102.914573][ T6542] kasan_save_track+0x40/0x78 [ 102.914588][ T6542] kasan_save_free_info+0x58/0x70 [ 102.914604][ T6542] __kasan_slab_free+0x68/0x88 [ 102.914620][ T6542] kfree+0x17c/0x474 [ 102.914634][ T6542] __sk_destruct+0x4f4/0x760 [ 102.914650][ T6542] __sk_free+0x320/0x430 [ 102.914666][ T6542] sk_free+0x60/0xc8 [ 102.914681][ T6542] l2cap_sock_kill+0x12c/0x234 [ 102.914699][ T6542] l2cap_sock_cleanup_listen+0xf4/0x28c [ 102.914717][ T6542] l2cap_sock_release+0x5c/0x1ac [ 102.914734][ T6542] sock_close+0xa0/0x1e4 [ 102.914754][ T6542] __fput+0x340/0x75c [ 102.914769][ T6542] ____fput+0x20/0x58 [ 102.914784][ T6542] task_work_run+0x1dc/0x260 [ 102.914800][ T6542] get_signal+0x112c/0x12f8 [ 102.914819][ T6542] do_signal+0x274/0x4438 [ 102.914833][ T6542] do_notify_resume+0xb0/0x1f4 [ 102.914851][ T6542] el0_svc+0xb8/0x180 [ 102.914867][ T6542] el0t_64_sync_handler+0x84/0x12c [ 102.914883][ T6542] el0t_64_sync+0x198/0x19c [ 102.914899][ T6542] [ 102.914909][ T6542] The buggy address belongs to the object at ffff0000d63d9000 [ 102.914909][ T6542] which belongs to the cache kmalloc-2k of size 2048 [ 102.914925][ T6542] The buggy address is located 1416 bytes inside of [ 102.914925][ T6542] freed 2048-byte region [ffff0000d63d9000, ffff0000d63d9800) [ 102.914944][ T6542] [ 102.914954][ T6542] The buggy address belongs to the physical page: [ 102.914966][ T6542] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d63de000 pfn:0x1163d8 [ 102.914985][ T6542] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.915001][ T6542] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 102.915020][ T6542] page_type: f5(slab) [ 102.915037][ T6542] raw: 05ffc00000000040 ffff0000c0002000 fffffdffc3da0400 0000000000000002 [ 102.915054][ T6542] raw: ffff0000d63de000 0000000000080007 00000000f5000000 0000000000000000 [ 102.915071][ T6542] head: 05ffc00000000040 ffff0000c0002000 fffffdffc3da0400 0000000000000002 [ 102.915088][ T6542] head: ffff0000d63de000 0000000000080007 00000000f5000000 0000000000000000 [ 102.915105][ T6542] head: 05ffc00000000003 fffffdffc358f601 00000000ffffffff 00000000ffffffff [ 102.915122][ T6542] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 102.915134][ T6542] page dumped because: kasan: bad access detected [ 102.915146][ T6542] [ 102.915163][ T6542] Memory state around the buggy address: [ 102.915176][ T6542] ffff0000d63d9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.915190][ T6542] ffff0000d63d9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.915205][ T6542] >ffff0000d63d9580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.915223][ T6542] ^ [ 102.915236][ T6542] ffff0000d63d9600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.915250][ T6542] ffff0000d63d9680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.915263][ T6542] ================================================================== [ 102.915314][ T6542] Disabling lock debugging due to kernel taint [ 102.949905][ T6542] ------------[ cut here ]------------ [ 102.949940][ T6542] ODEBUG: assert_init not available (active state 0) object: 000000005f2920c2 object type: timer_list hint: l2cap_chan_timeout+0x0/0x280 [ 102.950417][ T6542] WARNING: CPU: 1 PID: 6542 at lib/debugobjects.c:615 debug_print_object+0x168/0x1e0 [ 103.109421][ T6542] Modules linked in: [ 103.110542][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: kworker/u9:6 Tainted: G B 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 103.114095][ T6542] Tainted: [B]=BAD_PAGE [ 103.115224][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.118111][ T6542] Workqueue: hci1 hci_rx_work [ 103.119463][ T6542] pstate: 604000c5 (nZCv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 103.121690][ T6542] pc : debug_print_object+0x168/0x1e0 [ 103.123255][ T6542] lr : debug_print_object+0x168/0x1e0 [ 103.124916][ T6542] sp : ffff8000b1fd7130 [ 103.126141][ T6542] x29: ffff8000b1fd7130 x28: dfff800000000000 x27: 0000000000000000 [ 103.128511][ T6542] x26: ffff80008f671000 x25: dfff800000000000 x24: ffff0000dd175150 [ 103.130850][ T6542] x23: ffff80008b539460 x22: ffff80008a19b63c x21: ffff80008afd3540 [ 103.133216][ T6542] x20: 0000000000000000 x19: ffff80008b538f40 x18: 1fffe000337d8876 [ 103.135534][ T6542] x17: 0000000000000000 x16: ffff80008ae642c8 x15: ffff700011ede14c [ 103.137797][ T6542] x14: 1ffff00011ede14c x13: 0000000000000004 x12: ffffffffffffffff [ 103.140192][ T6542] x11: 0000000000100000 x10: 000000000002f476 x9 : c528f7d3cd037b00 [ 103.142523][ T6542] x8 : c528f7d3cd037b00 x7 : 0000000000000001 x6 : 0000000000000001 [ 103.144879][ T6542] x5 : ffff8000b1fd6a78 x4 : ffff80008f766c20 x3 : ffff80008054d360 [ 103.147128][ T6542] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 103.149470][ T6542] Call trace: [ 103.150447][ T6542] debug_print_object+0x168/0x1e0 (P) [ 103.152042][ T6542] debug_object_assert_init+0x250/0x2c8 [ 103.153736][ T6542] __timer_delete+0x48/0x354 [ 103.155103][ T6542] timer_delete+0x24/0x34 [ 103.156343][ T6542] work_grab_pending+0xc0/0x830 [ 103.157768][ T6542] __cancel_work+0x50/0x218 [ 103.159065][ T6542] cancel_delayed_work+0x24/0x38 [ 103.160538][ T6542] l2cap_le_start+0x7ac/0x10c0 [ 103.161887][ T6542] l2cap_connect_cfm+0x558/0xd40 [ 103.163238][ T6542] hci_connect_cfm+0x98/0x134 [ 103.164594][ T6542] le_conn_complete_evt+0x9f4/0xe84 [ 103.166082][ T6542] hci_le_conn_complete_evt+0x114/0x3f8 [ 103.167771][ T6542] hci_le_meta_evt+0x2cc/0x4b0 [ 103.169137][ T6542] hci_event_packet+0x60c/0xe9c [ 103.170631][ T6542] hci_rx_work+0x320/0xb18 [ 103.171983][ T6542] process_one_work+0x7e8/0x155c [ 103.173388][ T6542] worker_thread+0x958/0xed8 [ 103.174764][ T6542] kthread+0x5fc/0x75c [ 103.175963][ T6542] ret_from_fork+0x10/0x20 [ 103.177334][ T6542] irq event stamp: 4155 [ 103.178505][ T6542] hardirqs last enabled at (4155): [] raw_spin_rq_unlock_irq+0x14/0x24 [ 103.181333][ T6542] hardirqs last disabled at (4154): [] __schedule+0x320/0x2a28 [ 103.183996][ T6542] softirqs last enabled at (4146): [] release_sock+0x14c/0x1ac [ 103.186636][ T6542] softirqs last disabled at (4142): [] release_sock+0x34/0x1ac [ 103.189174][ T6542] ---[ end trace 0000000000000000 ]--- [ 103.191736][ T6533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.192174][ T6542] Unable to handle kernel paging request at virtual address dfff800000000038 [ 103.192211][ T6542] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 103.192235][ T6542] Mem abort info: [ 103.192253][ T6542] ESR = 0x0000000096000005 [ 103.192273][ T6542] EC = 0x25: DABT (current EL), IL = 32 bits [ 103.192294][ T6542] SET = 0, FnV = 0 [ 103.192313][ T6542] EA = 0, S1PTW = 0 [ 103.192333][ T6542] FSC = 0x05: level 1 translation fault [ 103.192353][ T6542] Data abort info: [ 103.192370][ T6542] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 103.192391][ T6542] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 103.192412][ T6542] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 103.192434][ T6542] [dfff800000000038] address between user and kernel address ranges [ 103.192457][ T6542] Internal error: Oops: 0000000096000005 [#1] SMP [ 103.217884][ T6542] Modules linked in: [ 103.219029][ T6542] CPU: 1 UID: 0 PID: 6542 Comm: kworker/u9:6 Tainted: G B W 6.16.0-rc4-syzkaller-g7482bb149b9f #0 PREEMPT [ 103.222697][ T6542] Tainted: [B]=BAD_PAGE, [W]=WARN [ 103.224177][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.227006][ T6542] Workqueue: hci1 hci_rx_work [ 103.228372][ T6542] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 103.230558][ T6542] pc : do_raw_spin_lock+0x84/0x2cc [ 103.231921][ T6542] lr : _raw_spin_lock_bh+0x50/0x60 [ 103.233414][ T6542] sp : ffff8000b1fd7240 [ 103.234570][ T6542] x29: ffff8000b1fd72d0 x28: ffff8000b1fd7400 x27: 1fffe0001ba2ea04 [ 103.236897][ T6542] x26: 1fffe0001ba2ea02 x25: 1fffe0001ba2ea00 x24: dfff800000000000 [ 103.239254][ T6542] x23: 0000000000000002 x22: dfff800000000000 x21: 0000000000000000 [ 103.241551][ T6542] x20: 00000000000001c4 x19: 00000000000001c0 x18: 1fffe000337d8876 [ 103.243748][ T6542] x17: 0000000000000000 x16: ffff80008052c6e4 x15: ffff60001ba2ea21 [ 103.246009][ T6542] x14: 1fffe0001ba2ea21 x13: 00000000000000fb x12: ffffffffffffffff [ 103.248271][ T6542] x11: 1ffff000163fae4c x10: ffff80008ee2de27 x9 : f3f3f304f1f1f1f1 [ 103.250646][ T6542] x8 : 0000000000000038 x7 : 0000000000000001 x6 : ffff8000891ae274 [ 103.252860][ T6542] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 103.255055][ T6542] x2 : 0000000000000000 x1 : ffff80008b538920 x0 : 00000000000001c0 [ 103.257325][ T6542] Call trace: [ 103.258252][ T6542] do_raw_spin_lock+0x84/0x2cc (P) [ 103.259665][ T6542] _raw_spin_lock_bh+0x50/0x60 [ 103.261128][ T6542] lock_sock_nested+0x70/0x118 [ 103.262451][ T6542] l2cap_sock_ready_cb+0x4c/0x130 [ 103.263825][ T6542] l2cap_le_start+0x950/0x10c0 [ 103.265172][ T6542] l2cap_connect_cfm+0x558/0xd40 [ 103.266546][ T6542] hci_connect_cfm+0x98/0x134 [ 103.267856][ T6542] le_conn_complete_evt+0x9f4/0xe84 [ 103.269190][ T6542] hci_le_conn_complete_evt+0x114/0x3f8 [ 103.270764][ T6542] hci_le_meta_evt+0x2cc/0x4b0 [ 103.272119][ T6542] hci_event_packet+0x60c/0xe9c [ 103.273573][ T6542] hci_rx_work+0x320/0xb18 [ 103.274815][ T6542] process_one_work+0x7e8/0x155c [ 103.276292][ T6542] worker_thread+0x958/0xed8 [ 103.277609][ T6542] kthread+0x5fc/0x75c [ 103.278835][ T6542] ret_from_fork+0x10/0x20 [ 103.280100][ T6542] Code: aa0003f3 f9000feb f2fe7e69 f8386969 (38f86908) [ 103.282095][ T6542] ---[ end trace 0000000000000000 ]--- [ 108.619029][ T6542] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 108.621102][ T6542] SMP: stopping secondary CPUs [ 108.622424][ T6542] Kernel Offset: disabled [ 108.623655][ T6542] CPU features: 0x10000,00040e00,040008a1,04017203 [ 108.625405][ T6542] Memory Limit: none