last executing test programs: 7m54.855600305s ago: executing program 32 (id=7): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x57) pread64(r3, 0x0, 0x0, 0x10000) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") read$FUSE(0xffffffffffffffff, &(0x7f0000003f00)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x51, 0x0) setreuid(0xee01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x26, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) 2m40.29897327s ago: executing program 33 (id=1682): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0xf30f, 0x20, 0x20, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}, @ptr]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000000100)=""/4084, 0x3d, 0xff4, 0x1}, 0x28) 2m37.6253856s ago: executing program 34 (id=1693): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000402f17010500000000000109022400010000000009040000010300030009210010010122070009058103"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00110800000024467e24"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x6, 0x6, "32f5aa", 0x3, 0x33, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x32}, [@hopopts={0x29}], "24a6505bfa1bf61f"}}}}}}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONCLEX(r3, 0x5450) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x10, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0xee00, &(0x7f0000000040)={0xe75d, 0xf, 0x1, 0x1}) 1m42.794728586s ago: executing program 35 (id=1934): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x88, r0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc010}, 0x4040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8a133f969e0594d70a1b98e61bed565e34f3cd997040fe04a3259c409f0f5e0508f45bd23bf63ba65b20df98c34e561b6e820f83ecf47add09fc8bb", 0xa8, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x28, r6, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xcb, 0x47}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 1m2.188825452s ago: executing program 5 (id=2100): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendfile(r0, r0, &(0x7f00000000c0)=0x8000000000000000, 0x8) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a8008000280", @ANYRES16=r2, @ANYRES32=r4], 0x44}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(r5, 0x0, 0x0, 0x4001c00) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x40, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x1008}) 1m2.021063117s ago: executing program 5 (id=2103): r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRESOCT=0x0], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x35, @string={0x35, 0x3, "193e31017d34174501cd9fd05a3de57bd88f0b1e1502455b0a7d4417b08489e8bdc5c2dc4b66eeb6e6d869f23509fa71f26d29"}}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="400f1800000000baec527eec9c4ce40000000000000000009175621f8f09abd2917a167261b874d5952e14da90f1fee41f103ffb92df1ec70702c4237188726208ca03006eb5b15f50453cddf3b9fea1394464d499ee3212292ccc579c91a8e0e69c7f60d534bcc3211e6d0daccadb6175062b5fc3cb67922eb49aee8eb8c73ba0974a4182a7a13f6f8c560786f047c4a5d42f0282966c934896c3db773f6c4d616659d5a114497305a815c90c2ab2dc00abb079c94a563caad0c1469e46b0b69335893261fcb8a9b827bca96268e43d2fd02200c444f1b87fd1c17ee39a2989316e96495f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000003c0)) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000700)={0x14, &(0x7f00000009c0)={0x20, 0xb, 0x7d, {0x7d, 0x2, "2054bb9e5713230936dce1db2df33f8e985b9e68f23138f83df1eca1f7b41b68de313ead38a526772d8f56efd795c3a55f35b04cd07961c6ba3020cca5e856dc6438cb737b7316324748114fecde953728b6609d1dbb56a0982a98154507888562549fb207b46c8d52103bb607fc68936db2c55b58a36dcb75a659"}}, &(0x7f00000006c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000740)={0x0, 0x5, 0xb5, "1d432b10be940779330e1af1880855f327f661c0206613c77f499a46101616e90d216bac3b01e2d25ebb4567537b721dc79ecf7c75d762f53cf92bc1e451d6c41fd08e88852ec858731a33cfdd0008ddb34a73787daf196f246dc6a9d1a62c46d5176ab900d6d45e52b7e3227faf3b76e576531801c89454bb6037a7a5d51308c59a9e8052dc66c744a9eb1a34d355a4f9f64fc1f91724ef0ad08a8c6781ede47e6ab536af33de97d964f5c72495d1703610028337"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$uac2(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x1, 0xa4, {0xa4, 0x8, "afac9c91ce37c78dd4ad8aa58c0ec51a75ef23129b7de04985a74c5c050c9138bd22baae03f96c975ac3fbd9f83b875f33f956d9bd77525e2a2bf7d3e32f6657dfb8a1dc14093a83672b15c1cb12eef15d0853cb5f13447949a94272533a5b2a1799075aae47f51f525c674e77e8d19e60eafdbab47a3e3fd72b71e684baec9d3c633a0a4c8be8b812981952bfd50038f604fe6e1436f964fb575ccc11583a6bb0e6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x14, 0xb4, "9ac2196de6cc23e5607275ec24754fb4ec4078c895b77fc32efb33b71aebefaaf90980ac9460f8c9dc302a2af3f36d9a7f927189820131bc6ba0bbb6fc6322e121b83b8d4288848958e0f471f35d5b1cc01f4a3d7fe80c510b8fa9446c088b8e048c0e8c50fac8badd1abf9cac715f92a2400b0541c34fe1decb3e448117deac82aa14cffd1c0dc3951774d2cbaaf657804194cdbf5d4da799035b17dabf1b48ade25a71c3075fecabe6697f5b30f7c61089d9a0"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x51}, &(0x7f0000000380)={0x20, 0x81, 0x3, "3dacae"}, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], &(0x7f0000000400)={0x20, 0x83, 0x2, "922f"}, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000394b38855d"], &(0x7f0000000480)={0x20, 0x85, 0x3, "812540"}}) syz_usb_control_io$uac1(r1, &(0x7f0000000bc0)={0x14, &(0x7f0000000a80)={0x20, 0x22, 0xe8, {0xe8, 0xd, "a722a115be2d79145077ab1caa3e1ef0be63f40efd2fc59b3c3c188a6e4a02cba9a3d0624c7ce316e2937e6ffe826f8f964808a0541320de0e63c0e7dcb6232c6ba144c8e3a8744acdea7320c5c17d51dd9e3c0f855a5ed56abc4cfd98750a936bbbdc4956c5f9ec17c19986eab50378acb393a55a8b17090ea7a7fa00cc351f908ab2e55c93a52180a7e61f94d2793dad9a1af1fdcdf866317774fda9b3be7fc7701c736340f939cd9a694363a75952102097d814671a65e529db675a1a0fb6c69a87cce240fae99a02294456061129a9b2737e10eebe7f68e98cc6cb859caaa8f6f3054bb8"}}, &(0x7f0000000b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f0000000e40)={0x44, &(0x7f0000000c00)={0x40, 0x14, 0x53, "17f7a49bec512deb572ab5b9fd1505c166d70ad338d0fd61ba6aa6093f9e58ab49cbaba048d09353def3feb9d0c03fb2af9ed0ff44df30e08434c260309bf355dd265d8ec6897154b9ba9012b61beae10ed175"}, &(0x7f0000000c80)={0x0, 0xa, 0x1}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000d00)={0x20, 0x81, 0x2, "eaa9"}, &(0x7f0000000d40)={0x20, 0x82, 0x3, "b76541"}, &(0x7f0000000d80)={0x20, 0x83, 0x3, "80b95b"}, &(0x7f0000000dc0)={0x20, 0x84, 0x2, "67a6"}, &(0x7f0000000e00)={0x20, 0x85, 0x3, "177784"}}) 58.528151128s ago: executing program 5 (id=2118): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x151400, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) socket$inet(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) 56.781514173s ago: executing program 5 (id=2125): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}, {{&(0x7f0000000600)=@nl, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000000780)=""/133, 0x85}], 0x2, &(0x7f0000000880)=""/159, 0x9f}, 0x3}, {{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000000940)=""/128, 0x80}, {&(0x7f00000009c0)=""/2, 0x2}, {&(0x7f0000000a00)=""/51, 0x33}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/123, 0x7b}, {&(0x7f0000003500)=""/170, 0xaa}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/108, 0x6c}], 0x8, &(0x7f00000046c0)=""/233, 0xe9}, 0x2}, {{&(0x7f00000047c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004840)=""/168, 0xa8}], 0x1, &(0x7f0000004940)=""/224, 0xe0}}], 0x5, 0x10040, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xc000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3300051, 0x0, 0x1, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(r0, &(0x7f0000007080)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xa8, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff1a2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbc47}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) write$FUSE_GETXATTR(r0, &(0x7f00000090c0)={0x18, 0x0, r2, {0x1}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000580)={{r4, r5/1000+10000}, {0x0, 0x2710}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x14, 0xfffffffffffffe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mincore(&(0x7f0000886000/0x1000)=nil, 0x1000, &(0x7f0000000380)=""/189) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 55.808745398s ago: executing program 5 (id=2129): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0x9, 0x0, 0x0, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x88, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc010}, 0x4040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8a133f969e0594d70a1b98e61bed565e34f3cd997040fe04a3259c409f0f5e0508f45bd23bf63ba65b20df98c34e561b6e820f83ecf47add09fc8bb", 0xa8, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x28, r7, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xcb, 0x47}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 53.371408122s ago: executing program 36 (id=2132): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000102c0)='./mnt\x00', 0x0, &(0x7f0000010280)=ANY=[], 0x4, 0x1022f, &(0x7f0000000040)="$eJzs3M1uG9UXAPDj+p+o/beUCLFgxxUfkiMRyx9JBWUTUVVdQKqIliULx3Yst4kdxYkTuoIFHw/BDla8Aw/Ajk0XfQMkdkhsKiSQZyaoRF2gykmI8/tJM2fumcm591renFHkAC6shfT7b6W4HlciohwR1yKy61JxZFbz8FpEvB4Rl545SkX+78R8RPw/Iq5Piuc1S8Wt73786tPvf/nw7W9/+Klc++brX89u18CZWcjDWxGxvZNfH2zncdjL44Mi3xr3s7i9PC5ifmP7YTEe5vGgu5FVOGgdPdfKYrOXPz/c2R9N4uZWqz2Jvf5mlt8Z5BOOxr2jOtkfPGjtZuNOdyOL/dEwi71H+boOi/hotJfX6RT1PsvKx97eUczz3cNuvp+dhxFzEe3BXpHP6w473cNJHBexmC46Gy/8KZ8bH/UH+4dp3N0d9YeDtFKt16q1pd32jaVarf5ec6nXaW22b3Qby53W5nKqdFdHw63FVOm126ly59atxVSvVRvV2jvpzt1P0lYnVSbxg/5gf6+/NVpMjWpzpVpfTG/W07219bT+8e3ba+v309pwkO4Ox6lZS/XmzZXGzea7af3e/dSoNWr2f6q+OOX5mC3ls14AwDl0rP9/Q/8PnIYX6v8v5/lz3f+H/v9ZF73/PcH9l+Mc7L90yvMxY3yBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAurKs/v7+fXSzk40tF/qUi9UoxLhX3/nyO0rGa5UndiJj7l89/WYqYL+Y4Ov4XEavF8cfLJ/sZAAAAwCx78rTyuJR16/lp4awXxGmaz86la59PqV72Wmdq36HsRdSr06pWztY3rZ1ejeIN1VTMTU6Xp1Xtn648P10+mdkAAID/NJ0AAAAAzLTj/4YPAAAAzB79PwAAAMy+rP/3+38AAAAw2548rTw+6zUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwF3t3k7IgGAQAePw+ayNRdJ02HaHLdIQO0o3aeo52ERbRFBHRDxaCPA8Mzqios/RdzAsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRdtZkt690pK1o9pzm0861+AAAAgCcm58NflqM8Nc26yGuP/t3vVw7+I6KKiMGb96+KiGG+4xJlRMwz9uNfNw8AAAD9Va+3i66/AQAAAAAAAAAAAAAAAAAAALjR2fy/8pp9PP+vsXEAAAAAvGL+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGR3jk0AAEIgCP4L9t+yiXYgmMzAwYULAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe37vxZy8TgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAYkcOagAAYSAIXkAZ/o3wwQNpKqMzyX4WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ4J7m7WzU++3WMAiAYggG0vw6QUzdr7rZdq4YcIhoaAoneAxF08FuNY97nft7W5a5ftUfXxndCf9FUHQAAAIA/GLK606/eojAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7OzOoRUAMAhEsZbuw/7jVfDwOExi+AJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDIG33cE51RCQBAyb65PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD47cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMSAAAAAEH/X7cjUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgoAAD///NjF7Q=") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000010300)={'veth1_vlan\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000010580)={&(0x7f0000010280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000010540)={&(0x7f0000010340)={0x1dc, 0x13, 0x800, 0x70bd2c, 0x25dfdbfb, {0xb, 0x7, 0x0, 0x36, {0x4e21, 0x4e20, [0x5, 0x401, 0x3, 0x1], [0x0, 0x5, 0x3e8bcdb3, 0x7], r1, [0x7, 0x7]}, 0x9, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x30, 0x1, "9ce37d84e834db7636498f6b454d980df6748258f05d81b45f0ec74fc867267d2efcc37fc83563660602b300"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "b0209c32e59005c630703c7000122882db5c5ac601a0984e6dc6a0ba52dd98faed67a02b61c74be2f380064640bf2282b7e42b49bf464751d1487a7f674863969dcf22bf963be76163adaa91032eb188ff94ce747fc2822a4c12d13918afb908b02ae3a277de097fff5d4c7ba5b1b4bf970e10166c2133b32158927016ed6359784109e1d78deac26c05c5b86a8982a7fce633a3cf26c68e1b199bcf796886671005aa4920058d564f5361cb04ae7e201ef5996e1dd0a89ca9e3e1922061e3d15c2ad3c865075cc0a0df3d5f7763fa700a5be1ececf0f0270d7f18f145"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "8e8181a1ad3f3cfff0a4d765195048aa2590d0f606ebaa8ba92398248f8cf9887d0a61e8c918698ca129f96ebd509c26e944e2d9b80a5ceb297431b8881b1e9b27468fa858c4e98cc57f755cd99325ea4af41d87e900bc643f086c0e2014ccf573073c97a2b68a9adfae9e2faf3363709598e618665bf748"}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) 51.934953879s ago: executing program 5 (id=2137): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x7c, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 51.934783859s ago: executing program 37 (id=2137): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x7c, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 41.818994992s ago: executing program 6 (id=2176): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{&(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="302e0000769004bf4200000007000000441488e1ac1414aa00da2ef2bc12b13cb8000005ac1414bb000000"], 0x30}}], 0x1, 0x44810) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) quotactl_fd$Q_QUOTAON(r0, 0x2, r1, &(0x7f0000000140)='./file0\x00') syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000001440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x5, 0x20, 0x47, {0x8, 0xb, 0x0, 0x0, 0x1, 0x21, 0x30, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x3ff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x9, 0x2, 0x3, {0xa, 0x25, 0x25, 0x3ff, 0x18, 0xb326}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0xc, 0x4, {0xa, 0x25, 0x25, 0x1, 0x2, 0x8}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x90, &(0x7f0000000180)=@string={0x90, 0x3, "ba19eb4f94353a9642e13f61692287f01816e6bc7bb7f0f6235cdcae8d4cd1562d545654075f731cf1516031e900ca939da52c84cdf362e68b92e24cb0601d997446a05248485dc9b32e29e611b5bfe722bd6d25607a7ea8f1a7d951d37c3dce2f2cb43ae3ddf7faef3e0228b0ed52632e9085c69491c7dd422ef052fe2e8a223a140e8b5bd5cae7aa1da09910c9"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x447}}, {0x60, &(0x7f00000002c0)=@string={0x60, 0x3, "47a4160b091943dabe509350c26f5178168fe3fc541d370c837e7024504ff8c14e4d88af8f8ce08d4171d50f2cd5aa32f45523a44afdd3f1b90729b57a2ef7a2d48421f65ce5468d660726a69fa3c5f5198e5debecf9ad77334794ca6a89"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x140a}}]}) 39.553612861s ago: executing program 6 (id=2189): pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00@\x00', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)) 39.482986533s ago: executing program 6 (id=2190): r0 = syz_open_dev$loop(0x0, 0x9, 0x109080) ioctl$BLKSECTGET(r0, 0x1267, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x38, 0x20f}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400add427ab62201745b4560a117fffffff81000e224e227f0000089210a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffe0f7ffffe7ee000000deff0000000200000000", 0x58}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0xe94}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@quota}]}, 0x2, 0x571, &(0x7f0000000d00)="$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") r6 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000001c0)='./file0\x00', 0x813) r8 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) write$binfmt_elf32(r9, &(0x7f0000000600)=ANY=[], 0x858) pread64(r9, &(0x7f0000000080)=""/234, 0xea, 0x2) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x80, 0x161000) ioctl$EVIOCGPHYS(r10, 0x80404507, &(0x7f0000000540)=""/142) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@initdev, @in=@private}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xffffffffffffff6d) 38.360221603s ago: executing program 6 (id=2195): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000000800)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYBLOB, @ANYBLOB="d9b2de1a2f0751da7120c88a88f0955139afd5c85d409cd57977db7b7c40ade28a33a618636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f3967172749732bead8f13f18ad0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9a27c57181780f56a1b34", @ANYRES32=0x0, @ANYBLOB="244429c78d4c7fbf49cd097e5022f1ae39f9db8339d3a6220188fa3516964b0fba8fa9e3451db52ce83e8e1e6f01107b778dbabc4ce54357ddcf1caa911b9f15153097456c221a20f6d322f59731e3362ef30cbeb63e1b78d1da50b6da22ea1c48b06ab73e772fd4d66f8d456d645ccac92786f37d589f10c34d3ef442d25b4a", @ANYRESDEC=0x0, @ANYRES8=0xffffffffffffffff, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRES16=0x0, @ANYRES32], 0xfe, 0x1508, &(0x7f0000002b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$evdev(&(0x7f0000000400), 0x200, 0x1a1800) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x7, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x227, 0x8000000000, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') syz_clone(0x20c200, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0xfffffffffffffe06) mmap(&(0x7f0000800000/0x2000)=nil, 0x2000, 0xa, 0x20010, 0xffffffffffffffff, 0x60a9c000) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x540) 36.715006955s ago: executing program 6 (id=2197): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)=ANY=[@ANYBLOB="a40141d2", @ANYRES16=r1, @ANYBLOB="000129bd7000fedbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, 0x0, 0x20048000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) (rerun: 32) r2 = socket(0x1, 0x3, 0x0) recvmsg(r2, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000002) (async) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64) dup(r2) (async) shutdown(r2, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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") (async, rerun: 64) syz_usb_connect$midi(0x5, 0x4e, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f00000008c0)=ANY=[], 0xff, 0x2c2, &(0x7f0000000500)="$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") 36.566181689s ago: executing program 6 (id=2199): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x3fd}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@resgid}, {@nodioread_nolock}, {@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") 36.487753441s ago: executing program 38 (id=2199): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x3fd}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@resgid}, {@nodioread_nolock}, {@grpjquota_path={'grpjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM0NLutlu6ZQv7+SS7fW/mte99Z+btvJk33QA61kD2lkQ8EBF/RkRfnr29wED+48a1C2P/XrswlkS1+s4/Sa3c9WsXxsqi5e9tzTPVapHfVKfei+9HjE5NTZwt8kOzpz8amjl3/qXJ06MnJ05OnBk5evTQwT09R0YOtyTOLK7ruz6d3r3z2HuX3ho7fumDX5I08rhjURytMpBv3bqebXVlbbZtQTrpzt57i9ze3+bX1DsSaKeuiMh2V6XW//uiKzbfWtcXb3zR1sYB66parVaX+VSeqwL3sSTa3QKgPcoTfXb9W77u0tBjQ7j6an4BlMV9o3jla7ojzRN7K4uub1tpICKOz928nL1ine5DAAAs9EM2/nmx3vgvjUfzRE/29mAxh9IfEQ9FxPaIeDgidkTEIxG1so9FxOOrrH/xDMnS8U965Y6Da0I2/nulmNu6ffyXlkX6u4rctlr8leTE5NTEgWKb7I/KphOTycTwMnX8+PofXzVaVxv/lYPxuZuXs/rLsWDRjivdi27QjY/Ojq4l5oWufh6xq7te/EltXiCKeb2dEbHrDuuYfL674bqF49/jdeNfRuM/27TqNxHP5ft/LhbFX0oazk8Ov3xk5PBQb0xNHBgqj4qlfv394tuN6l9T/C2Q7f8tdY//W/H3J70RM+fOn6rN186svo6Lf33Z8Jpm5fhvO/6PbSuO/57k3dqCnmLFJ6Ozs2eHI3qSN5cuH5n/a2W+LJ/Fv39f/f6/Pea3xBMRsTsi9kTEk9lFYdH2pyLi6YjYt0z8P7/2zIerj7/+XfnKMvXciSz+8ZX2fyzc/6tPdJ366fuV4++NiEb7/1Attb9Y0sznX7MNXMu2AwAAgHtF/gx8kg7Op5PBwfwZ/h2xJZ2anpl94cT0x2fG82fl+6OSlne6+hbcDx0u7g2X+ZFF+YPFfeOvuzbX8oNj01Pj7Q4eOtzWJf0/TbP+n/m7q92tA9ZdC+bRgHuU/g+dS/+HzpSs2P9b/cgRsJE4/0Pnqtf/P2tYevC7dW0McFc5/0PnaqL/z+U/Go8KgHuT8z90Lv0fOlLD/41P1/Qv/y1N7Pk2b+tyZf4rvkJlo7T5/k9EuiGacf8nupv+MotGicrSvlzty/tUtmRT3d9q68cSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAy/wfAAD//3gk5XA=") 36.084003702s ago: executing program 8 (id=2203): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x1, 0x0, 0xb97}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) sigaltstack(&(0x7f0000000100)={0x0, 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0xc0109207, &(0x7f00000006c0)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x8) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x18, &(0x7f0000000080)={0x20, 0xa, 0x4, "a10124f5"}, 0x0, 0x0, 0x0, 0x0}) 32.70650478s ago: executing program 8 (id=2207): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0xffffffff}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20000, 0x42) r7 = openat(r6, &(0x7f0000000040)='.\x00', 0x0, 0x3b) ioctl$FITRIM(r7, 0x40106614, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x3, 0x3, 0x2, @empty, @empty, 0x20, 0x8, 0x2, 0x5}}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0xfffffffffffffe06) r9 = fcntl$dupfd(r8, 0x0, r8) mmap(&(0x7f0000800000/0x2000)=nil, 0x2000, 0xa, 0x20010, r9, 0x60a9c000) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) write$binfmt_elf64(r9, &(0x7f0000000f80)=ANY=[], 0x540) 31.785748694s ago: executing program 8 (id=2215): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x151400, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0}) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700003f4ff0000000000000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fcffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000fffffff83c00"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) 30.74673059s ago: executing program 8 (id=2221): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) timer_delete(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000090100000000000000000000000000000000000000000b9dd56d4238fff22d8306d10ab7f98b15f912c661986d97b913e2440a436aecca9dc8843efebad48b3979f0ef315fb9322f7001e2f16f96ee70c9c2c7e6870bad"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x1, 0x6, 0x7, 0x8000}, {0x3, 0x4, 0xb4, 0x5}, {0x4, 0xbe, 0x0, 0xfffffff9}, {0x0, 0x2, 0x6, 0x3}, {0x3, 0xa, 0x6f, 0x1}, {0x9, 0x81, 0x3, 0x3}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@errors_remount}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") setuid(0xee00) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) eventfd2(0x6, 0x80800) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0xb, 0x1a41, 0xe, 0x80, 0x1000, 0x6, 0xa583, 0x2}}) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000100000000000000", @ANYRES32=r0, @ANYRES16=r3, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="0000000003000000000000000000b3f0ca8cee162db4000000000000"], 0x50) 30.163475585s ago: executing program 8 (id=2225): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62040200) fsmount(0xffffffffffffffff, 0x0, 0x82) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) pwrite64(r2, &(0x7f0000000000)='3', 0x1, 0x4fed0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r9, r9, 0x0, 0xe3aa6ea) r10 = openat(r1, &(0x7f00000001c0)='./file2\x00', 0x441, 0x18b) fallocate(r10, 0x20, 0x4000, 0x8000) shutdown(r0, 0x0) 29.138908532s ago: executing program 8 (id=2229): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000402f17010500000000000109022400010000000009040000010300030009210010010122070009058103"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00110800000024467e24"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x6, 0x6, "32f5aa", 0x3, 0x33, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x32}, [@hopopts={0x29}], "24a6505bfa1bf61f"}}}}}}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONCLEX(r3, 0x5450) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x10, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040840) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0xee00, &(0x7f0000000040)={0xe75d, 0xf, 0x1, 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xfff7}}}}}, 0x0) 29.138670923s ago: executing program 39 (id=2229): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011001000000402f17010500000000000109022400010000000009040000010300030009210010010122070009058103"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00110800000024467e24"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x6, 0x6, "32f5aa", 0x3, 0x33, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x32}, [@hopopts={0x29}], "24a6505bfa1bf61f"}}}}}}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONCLEX(r3, 0x5450) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x10, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r9, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040840) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0xee00, &(0x7f0000000040)={0xe75d, 0xf, 0x1, 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xfff7}}}}}, 0x0) 11.604818539s ago: executing program 9 (id=2330): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unshare(0x2040400) syz_usb_connect(0x3, 0x10e, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e010000062404", @ANYBLOB="1df9ff90"], 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000001c0)={0x6, 0x2, 0x8}) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)) read$eventfd(r2, &(0x7f0000000000), 0x8) statfs(&(0x7f0000000040)='./file1\x00', &(0x7f0000000580)=""/214) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x52}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48050}, 0x4000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r7, &(0x7f0000000340), 0x0}, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/sync_on_suspend', 0x1c9a82, 0x0) sendfile(r8, r8, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) 10.983063295s ago: executing program 2 (id=2336): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@norecovery}, {@user_xattr}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x1}}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r0 = io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) munmap(&(0x7f000049b000/0x400000)=nil, 0x400000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0xb694a000) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) 10.807617389s ago: executing program 2 (id=2337): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syslog(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xc01}}, {{0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, '\x00', 0x13}, 0xfffffe01}}}, 0x108) syz_emit_ethernet(0xff, &(0x7f0000000400)={@local, @random="7f0a6fa40011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x3c, 0x0, 0x0, 0x0, 0x0, "cc535beae4225da3fc248b97838a53c971f3f71ff0252c072c12fe8c8316d79aaa14a1b35608f08eed98fc25c52caae0a0f57d119c976985da863e154c80d4256eaf6e0ee05ae84bc971b1975bfb8fec0bb20f81eedd539010000000eb0000000000000000000000831ccaea193d1e44b2af309209d2d0955df0df49702dcb80af58e040237a16314a09a6e40aa94cc5e9da0097d864a1bbccf69473c9509dec7ed2f6dcf333c1571e4478f05c9491b0ed50b8877bc1e998c62728a96ab1fff9061079f0514a067eb55b3f966b1d534c05ae4bcf59"}}}}}, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000002c0)={0x0, {{0xa, 0x4e20, 0x7, @mcast2, 0x3}}, {{0xa, 0x4e21, 0x4e11, @mcast1, 0x5}}}, 0x108) getsockopt$inet6_buf(r4, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) unshare(0x60000600) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000780)={@val={0x70}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x4000, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x3a00, 0x4e24, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "1120822d9331eac6bdfc7ca18f8faefc3b45a582fbb92f2525436a2ca0c89e2f", "e7930e601bf22ca5fc162a9a0eec0223", {"69d49341112d987eb7b7910efb7442ab", "646b1a49c757cbab14b11f2d6986ff49"}}}}}}}}, 0x8a) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000740)={&(0x7f0000000040)="5674b45971d2e7c5", &(0x7f0000000580)=""/144, &(0x7f0000000640)="5799d62598b3e7cc34406fd2a82538fcc759934b606ff91ac108e4ad98cd769314ae7d1ef7f3f8d878e05d2c7fcb8863ad09a285c34c35f5f3d60fc9b78b53416fae4a4c127f9e36f98a3e894213d9ab85dcdaa89569f23d2dcc6c939cc6341c5a1fc11e8dccc9e1ad77aa927be9b9c8d3faae0a6d781b0d", &(0x7f00000006c0)="779fa9e1a07112c82f0274ef648ae4ab4e29aa5cd75de83f73bb4d97548716844ae4b26ec1685193d10729e37ec5226dd039b6a8db896f3b658019d0a5691f4665ad007ebbc43ab80adb", 0x2, r3}, 0x38) 9.799676886s ago: executing program 2 (id=2341): syz_usb_connect$midi(0x0, 0x3d, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x763, 0x150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x1, 0x18, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [@midi_out_jack={0x7, 0x24, 0x3, 0x1, 0x7, 0x0, [], 0x8}], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x9, 0x25, 0x1, 0x5, "3b8cbb8907"}}}]}}}}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = getegid() lchown(&(0x7f0000000000)='./file0\x00', r0, r1) 7.880726265s ago: executing program 9 (id=2352): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x9, 0xbaf, &(0x7f0000002f00)="$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") chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) 7.682976961s ago: executing program 9 (id=2355): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x30000, 0x60, &(0x7f00000008c0)={'filter\x00', 0x11c, 0x4, 0x3e8, 0x0, 0x110, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @broadcast, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x2}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x101, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 7.607602723s ago: executing program 2 (id=2356): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x10da7e, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000010000000000000000000000711835000000000095e24a3d4ba4e2373c3492eed1a8ebe5227d70fa78ed29d3ecde61a7fcc76ae01cf97611ea84d61f3b6c6bf92ff3836656501ee19f94620886357a43ce516873e3"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 7.607397913s ago: executing program 9 (id=2357): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x460, &(0x7f0000000380)="$eJzs3M9vFFUcAPDvzHaLBLAV8Qc/1CoaG3+0FFA5eFCjiQdMTPSgx6YtBFmooTURQhSMwZMxJt6NR/8FT3oxxpOJV70bEmK4AJ7WzO4M3d3uLrDsstD9fJJp35sffe+7b97Om3m7DWBkTWU/koitEfFXREzUs807TNV/Xb18duHa5bMLSVSr7/2b1Pa7cvnsQrFrcdyWPDOdRqRfJrG7Tbkrp88cn69Ulk7l+dnVEx/Prpw+8+KxE/NHl44undx/6NDBA3OvvLz/pb7EmdXpyq7PlvfsfPvDb985/HVT/C1x9MlUt43PVKt9Lm64tjWkk7EhVoRbUoqIrLnKtf4/EaVYa7yJeOuLoVYOGKhqtVrd0nnzuSqwgSXRnNflYVQUF/rs/rdYWgcBrw1u+DF0l16v3wBlcV/Nl/qWsUjzfcot97f9NBURH5z77/tsicE8hwAAaPJzNv55od34L42HG/a7P58bmoyIByJie0Q8GBE7IuKhiNq+j0TEo7dYfuskyfrxT3qxp8BuUjb+ezWf22oe/xWjv5gs5blttfjLyZFjlaV9+WsyHeVNWX6uSxm/vPnnN522NY7/siUrvxgL5vW4OLap+ZjF+dX524m50aXzEbvG2sWfXJ8JSCJiZ0Ts6rGMY8/9uKfTthvH30Uf5pmqP0Q8W2//c9ESfyHpPj85e19UlvbNFmfFer//ceHdTuXfVvx9cOl8FGfXuvbPTSaN87Urt17Ghb+/6nhP0+v5P568X0uP5+s+nV9dPTUXMZ4crle6cf3+tWOLfLF/dv5P723f/7fH2iuxOyKyk/ixiHg8Ip7I6/5kRDwVEXu7xP/bG09/1Hv8g5XFv9j2/a9T+68lxqN1TftE6fivPzUVOrku/mvd2/9gLTWdr7mZ97+bqVdvZzMAAADce9KI2BpJOnM9naYzM/XPy++ISCvLK6vPH1n+5ORi/TsCk1FOiyddEw3PQ+fy2/p6/nxE1D9aUGw/kD83/q60uZafWViuLA47eBhxWzr0/8w/pWHXDhg439eC0aX/w+jS/2F06f8wutr0/83DqAdw57W7/n8+hHoAd15L/zftByOj7P4fRljH/r+R//MPUNPD9T8ZRD2AO2plc9z4S/JdE8Vf6vHwDZuI8l1RjdtPVJO2jRvpsCt240Rxlbpb6nMvJYb3ngQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBP/wcAAP//vQDabw==") open(&(0x7f00000001c0)='./file1\x00', 0x10da7e, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000010000000000000000000000711835000000000095e24a3d4ba4e2373c3492eed1a8ebe5227d70fa78ed29d3ecde61a7fcc76ae01cf97611ea84d61f3b6c6bf92ff3836656501ee19f94620886357a43ce516873e3"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) (fail_nth: 1) 6.741309115s ago: executing program 4 (id=2360): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001300)=[{{&(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{&(0x7f0000000440)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bbffffffff000000001400000000000000000000000700000001000000000000001400000000000000000000000100000009000000000000001400000000000000000000000200000009000000000000001100000000000000000000000100000006000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="64010102ac1414aa000000005400000000000000000000000700000086"], 0x128}}], 0x2, 0xe000) 6.679017497s ago: executing program 4 (id=2361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = fsopen(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r3 = socket(0x18, 0x3, 0x1) getpeername(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r1, &(0x7f0000000340), 0x0}, 0x20) keyctl$update(0x2, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x772}, 0x1c) r5 = socket(0x11, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) sendmmsg$inet(r3, 0x0, 0x0, 0xc050) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000002a80)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x18, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x18000000, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x30}}], 0x2, 0x20002040) 6.678691077s ago: executing program 4 (id=2362): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000700)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e"], 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000240)={0x40, 0x17, 0x5, "b8a479ec8d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.434994294s ago: executing program 3 (id=2365): syz_usb_connect(0x2, 0x412, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x91, 0xc7, 0x84, 0x40, 0x19d2, 0x1267, 0x4c19, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x400, 0x1, 0x0, 0xa, 0x20, 0xc, "", [{{0x9, 0x4, 0x1e, 0xd, 0x8, 0xff, 0xff, 0xff, 0x6, [], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0xf4, 0xd, 0x3, [@generic={0xea, 0xf, "7dd601e6ee4ab295971e923e7f935b5243a1d65ea823f8b78ee23559aea0f624816cfe17679286c21f8c35fcfa5c87ad4af3de38076707ff9708cd06dfde32b9f163a2b08b4bb60372731569d31799607accd47ba03d91bcb58370f87a0ac497e88f654c4eebfbb8e407982b52d367c0d792efcec3e223753377c97c807fa2130fc457fcdbab95ce685dcc52f13896b59a245a1514067078ddf32185a8d7dd097d048ec94d8c09ce83d003b1c6b5656f6d45ce2c05fd7385d1a366033c4dcf907466a7af0d8cdeb192aec2f0ee878688152ad5703daa08025c7e7c652863b0a9db48e361cb51915a"}, @generic={0x80, 0x3, "865cb62c7e39bc03cd359657b8ddb3d41f2d6bd17eea5b26bab462d597c5111cf019bc05497278464a30f9fb18f9b01efcf0d130d8a8ceb837a05f7c060a1592023c4e5b826dc2ec2bd97e46de1a9c3299cc708f4c02a12053f07ebc56a3660b656e8073b4f0998cfaf56e2414cd53208e9d9872939e34413126c8df7198"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0xab, 0x5, 0xd2}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x5, 0x8, 0x5, [@generic={0x54, 0x23, "b674b5c1b8be0a7a252c1e9c038484a77c869bff2c1d6da0f6afa0dee42b523c8ec9e43ae61533f201bab9423e99e7c0b6c85825700ebf6848d8cdf4755edf79651bfbb371aa80cca29bdc903914a24e1f3b"}, @generic={0xe3, 0x23, "c8cb2abaa4a9d2957045af8659471f4edb02236d104d515c65d444d152aebb96c817589aece0fa55030be82478008130fe26252748488529420729528c3557fc45a5a94d7e6181cc608f305ef21a88e4e166556ebe678630aa8d34eeb8702097c164fb40968c55c2236680778068bd63e0132f716b4fae3e67527d2386569caed877252fa86c54e5bd7e2ff1e4af6b9e024e8dff1164579b3f151d30097c69e3840f0fd02b8f0a82e98fdddccf7e885f7ce52b8a2b49259b7c4dec0a91713afdbf0d6bc766a71caffd657cac9c10b30674f8dbbfd6e80bf726b08dd84ec9a79cde"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x3, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9}, @generic={0xca, 0xa, "86707a3846835a644433359d0ee0d03478b07260181850aedbe13a6c35035797deac7924eb7d3b635a6d259d49c376078db452a461044c535fd95fe22f4009762ab0772838da873c80c364c824043679fd9d6b9ee136add061a3894de7688f1c879395d4e864448c6383e3868196fbbf9f2e6fb2de2e3bd917e6985b3e2288357a490672324a8ca8d63c3b86944bbbd00c82c242f0abf05191ad3931fe5c9df8801c82a36f5fd03ca8b26f4f74b1f19d7885bef4764924421ba477bcf9f557d4eae74fcf1db55dcd"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0x42, 0x8, 0x6, [@generic={0x32, 0xb, "3ab7f6076a9bcd74d54c3e9f2b496890109b8977b64a5921cee0a8d44beff9d47ddc258b530a589d51983616cb18a56a"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x5, 0x5, 0x1}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x9, 0x9, 0xff}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x0, 0x3, 0x8, [@generic={0x2, 0x30}]}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0x200, 0x10, 0x3d, 0x3, 0xff, 0x6}, 0x73, &(0x7f0000001300)={0x5, 0xf, 0x73, 0x3, [@generic={0x64, 0x10, 0x3, "13cd0e6acc98f13d32c2024111fb34657ed18c2a5f1c3db337c0716c6e6bfdd0cdd7fa28dbdf95dc3fd715bc7545910fbc61c90aba0b012964fa45bebe0fa876ee8f8f7e4f6080d8df8cd6b57703c1f80f276d5f9a052092913ac4fd6444b6420e"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x2, 0x9, 0x6}]}, 0x2, [{0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x44c}}]}) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0xfffe) 5.677207533s ago: executing program 2 (id=2367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x151400, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700003f4ff0000000000000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fcffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000fffffff83c00"], 0xfc}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001980)={0x1, 0x58, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f00000019c0)={'erspan0\x00', 0x0, 0x80, 0x20, 0x8, 0x6, {{0x6, 0x4, 0x0, 0xd, 0x18, 0xff, 0x0, 0x7, 0x2f, 0x0, @empty, @remote, {[@generic={0x86, 0x2}, @noop, @end]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000840)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000880)="dd66699c71ea078a848b771ecfde", 0xe}, {&(0x7f00000008c0)="456aa3c14040c993d1882bd85a6c7e28a3b2520108834b44303a9bf618fbbb497511d4a17498cd744d8fa74b0300f4299b748ca1be634c0de2bf07d185b93637ae16d7437ecccb379782a252e497c0b9b564850baa216bf20a5a0eac6d07f677789524dfde38ff71843e556abc563a791b7758b00a2acdcb5d7e33bc77c1b1ebe701210adf742b68579a7d22f0aad2136b1801c8161301de385a", 0x9a}, {&(0x7f0000000980)="dda482cc255489c5760178db497196ecb153bd002332ae56a1bd77090ecd4a608dcc791fd58ade75e6e2b8e61013363b728ae3a1393c104a92d1ae99009d66d2d50b69871d82a584511b1fb461e4349e70de12db004293264b8688d0d079caa145216ff100e13f35b01c", 0x6a}, {&(0x7f0000000a00)="9d6a89c2266bb38d2a", 0x9}, {&(0x7f0000000a40)="6fc2d3cb7609e308bb7f6d54c24cbbaec8143f92651a69fbb070688ed4cc8011c0614c9cd01798a45c46856eae886e64cba7135343836ed77dd960a29d17a29afa5f16658a72a2507aaafa5c1cc58ffc69063f819eb86dbaf5b9b70f48f6e731b32bc9d43c4a7975eb82819623f9", 0x6e}, {&(0x7f0000000ac0)="e8f1307f1318dd84", 0x8}, {&(0x7f0000000b00)="3875a8a5a87eb4101be23d7b071baf74b607ebcd3995eeb2d3ec35b21dbb74cb7a61f716877c1e1ec9347ed2ead9a1cf345b603fb6718de91092c34baed8cd5926c7d736f2155efb012d020b71c7dc34603ec3d3bcf7919fa1399ee6f8e17fdbbd6f51b5cc321812e6a6f2006ee69a6c88c23072d977e237c84633c2ecc5f4df83ed2377128dc95795da9074bbcf7eb77ccf8e2834267f08c6e01a6f0bb2aa59434e8427c689ffc78c403b137b05269e1406f020c189c75a25fc64a681c3af21df9990f9e8561f32232195f672c2440363dd586b2dcce7413de5de21791d5d4c5e2549db409941db78b7b329", 0xec}, {&(0x7f0000000c00)="8bb0bc8fb5a501ba70203f4b6e9f87f70d38e15de5eceba7f90105cc4e1432198330b74273dc3f015662007afd34bc7f3480602956c044f0fd5f40f42b2a955198aa5999f7870bbb7389858ab84b0651fa803e852d0b14f0c1a68754753695daee64063b039e4ab0dc1ef2d8d51edddfddfd7752c5b2f45289290b164269c406d36583e5522ea87b8aa9d25845bd6f0acc1adf63ede9e386b08228d4003b0b9a7ebdf8d4052ff99edd8dd14d1a585d08bbc7c7615fd6cd271c6e98b626d892d02cfec7a09f467beae4fb", 0xca}], 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac14141dac1414bb000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e000100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="64010102ac1414bb0000000028000000000000000000000007000000070bc50a0101440c9370ffffff070000000b00"], 0x180}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f40)="cca4d2117879f9e178f34e26777373ad0e7d8ff5c9647343fa3b2127a99474fbdfd16348cc09f8cb2f7a3a431971ca3b98e20e62d57c5953d0ad32bd4bc3d6f53668624f1fbfb60518e8fa18f5ddadd4f6418fca0f594c1422e239d22199f8b23140b46a4a8d90086d5751e5ab09c63f2165ddb5a88d84f49c7278219d2059448aa97e099f95fd34866a3e454359d826e14b6efdb4d6d5b9f1", 0x99}], 0x1}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)="5118593970cba3d106e6168bb712b656a0ea27c83a8e5341a15c64509316366ca514765aa779dd634beb849636b08d0ca5830e2f02a48cbba7c302c5e0a6b20119cf04bc7ad3918bef86fef540acae52130d76eb413fdc08927800f33320c0020f11af2d681fb026ad0dd045c517a228caa9b80435e8cddc69b3af7b074dccdcde87a820c80a43bb3a0d46ff758507c4eb12edd5f06478a9bdd4251deefdc77ac46bdc2d9f04302e32da365765", 0xad}, {&(0x7f00000011c0)="4c7699148cf3f349837128b283950430137a561e43f3e24eee5066dc5bb8ae676213317ccafd6da8a7ee29e738c20e4a4dbf5cec0b9a24a051f57b7fc7f3b32f6b21d59b00a45115408f5d66d306f8d10b0f4362cf20957a224b76870f7c50e2953917b67292b75797908c5b07f040e7d6055730e5ea7b7f1c467d1f54c1806cc5ad997a91e4541b9ad88c5da8b106c3ce68d19bcc963d8f1a34fd3c8b21ae9ff3aa6a5579153d720153df8b0c155fe4c4411b97eed6d1b00a564c7a", 0xbc}, {&(0x7f0000001280)="3b1975e59fba456a064d2e94fd598c677ea370cd3ddb449375022ac1c1969ad59c91da9ea1ca4f94987d4bbaddc049b9e50e5925b03b24122510ae5fec6f23270e5f6b44237cb085ec008df79933131a74611f88128e85d56c3cd1989f25f64313aea26f1f82b736dd8a10780f70cfb38d39c65cfe86c3c89c22e131435902fda72d5b22316964eef44d83b3c7439ee8ea97cd70f45ab7a969fd3aa8524381daef129ada53bc1b34b85c5b1e9721072e81224aa36243029a24afe9763865ce30614cb3ba00be69de17f295681b", 0xcd}, {&(0x7f0000001380)="0a1644b7390f", 0x6}, {&(0x7f00000013c0)="85d81ed0b681d8e70f3d668571a2502ec84a565ef0a1cf00b74de4db201de6445817df969dc26b00cfeb0955254117720d6ea7e090b38c724f8fcf8d1998a9b5f2d2c5caade6980d02b19fd0e267ff3a3804f0a168499cee6b969619755cdb841e7c41fb8a6f9cccf3844567ef172ca49d10a2920d302636200f99ad432dd633fad0d2bcb1d53ce51e1a24bdfb5b623f1fec4d9fedf1d2219b57c3372ac57271ead010ed9478949ea0269b4c63fe6d867047fe2040207dc1120988c136999320ce84da1848ec5b346131e2fce84e002ddb25ed2ce848b1ed6969b8", 0xdb}], 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="1400000000000000000000000200000000000080000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e0000002ac1e010100000000110000000000000000000000010000000500000000000000bc00000000000000000000000700000000865cffffffff050cabc9e0967b2e008b082c070be6c5197d888a19dc58050e2cdd6a795920237cbed402830710d44cf6e965322e17a90dd7577699070fa220c7cb51315256a35380e383000fe622aa75d41fa90d8546c46c620603ba94040000864800000001050ce6745571802a721cec81020f6c9cf609d5993f94990a5b87b702073101873bc205101293e9d5578ec1548b40287aa1050710c09aab56abead31ed3830045e86e00000000000000110000000000000000000000010000000500000000000000"], 0x148}}, {{&(0x7f0000001780)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000017c0)="5a8130346eca1a74f3d4f79a70d7a6073c4111eac43f43e7270a4cdedebe494145d349ee8df0110bdf6e2cfb89818f71dca768b4d85b599cf83dc8d59d906a256211d883cb82d4e7739cbd89c6ef5a15bf872d21e31b5c3215017986893e97", 0x5f}, {&(0x7f0000001840)="e82990220fd745c07721a2a9ecc36a9397d5edeacf67cb5b6f16b089e6b1f9bd3dc0fd56c0fb5494615cc1037f888e4c0e6934c9cc77bc5577a5c27e4a3ba5be80020433079b7afb6059337cc0c41ea9c0ad00e2717cd00207eb402f3e98aa7903c84c4ef7eb8439a8c8ea55c49771c9ae21", 0x72}], 0x2, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ffffffffe00000010000000011000000000000fe0000000000000014000000000000000000000001000000610b000000000000100000000000000000000000070000004000000000000000000000000700000094040000442c1203ac1414bb000000077f00000100000005e00000013296ab8af3effffffff90a010101ffff7fe5ffffffffffffffc01c000000000000000000", @ANYRES32=0x0, @ANYBLOB="7f0000010a010102000000001c0100000000000000000000070000004434c411ac1414aa00000006ffffffff00000003ac14142c0000009c6401010200000004ac1414aa00000003ac1414bb000000014414af21ac1e000100000006e000000200000007865e00000000010cd6cafabd5a18824533e60006d55176cf020ccb7e3ea128d6cf5df42b020c89b9c9633d1612c67d22000877c54aa9ceb202092250368bd6b9de050c09a7e9a7730b9904637a0a11329b00bec3ec898d921bc8dfc68bf194040100860422e0831fedac1414aa7f000001ac1414bbffffffff7f00000100000000e0000001863c0000000207041823000d3b00e787428c2a513a1c09010a005ddedda3dbecbf0709687fcd48f62052010db954f33bcd76f96bf9553f020317020200000000000000140000000000000000000000010000000100ffff000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="e0000001ac14143000000000"], 0x218}}, {{&(0x7f0000001c80)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000002200)=[{&(0x7f0000001cc0)="c1cabe17c2ad387aa4b69399f1e65872e6f8be3029e855827d260a679083dbeb922375e1263f611f7268b8778c68ec181e5e46010eb7e15ede6ce65ba9c8bbb1c96d8bb57d2fafa1e0e23391e34f96794e852bf7dc91d39a93861e4d5a1ed95453b4efd21c2d1cf2f28cfe68b32889ed621587500ebdd0cceba7dc104d99ff5e57033cd3b2e5ea1d7e7644f7508d82834abb6c783acebca1814e38830fa974cd490a3afc6d46cf8988e956a98a398d4547428467b939ac8c3d8ffd2383984b3c05627fba2adc07a297deae850a0db1a2b422a31425742935", 0xd8}, {&(0x7f0000001dc0)="2112c944b459f404b7f840ae0669d8ec717e9e3874ff79ddacafe7773f77b4687da8ad4302470d24de59c60a3adcae6457f13e71bb7f35d5581b25273b932a309ffd74a0a57a872bdc08109c95879069146eee8a498e1d451f100331f0dba504b936505575a6b1790fe0d542d2cfea23486b55b6805d39bb9c4aa12cabc3c1a70c881fb32f9ca50d477aa32855646898adbac776fd8a37e35f87dca5c6ed0aaffbfc73229686f950873796005df63de1f81a3fb85e1b5f8579d30fc4c7c05962033d951172a4cab1d5f70717b2c1d418a6a1e1f053a7025e2e373abcc8f5823e95fe62d0eaa1973c9c68e49808", 0xed}, {&(0x7f0000001f80)="fff045cbe9980bcd88412b07d0be2a902a0097679ab684d5ea51c84658ecc9d5e24ddb47e4cc81602ffd2c80cc0470844ce02893d7a1605c4b5e7ecaeeba55041a39f2e10546f3f42a94858eb4b721d2d6a183261620f23273b2f3d229f44c92260449a50bf1691c2e74fdb3f75f220f8db07ed96eb0758284c89d86ec6c347547e917472c0eae51602e783b3336d23e57113c2d774b1b507e4a821cd061575a98f3e19199285ad5362fcf", 0xab}, {&(0x7f0000002040)="6ecf283096b3082100190a9ee9fb172ea5823c63e98c41f4cdfa5e3e18f4dec9dc988bc1d6f182cca71503a883b1a4aaf4eb4552d40e5ff8cfc28e66cba2aa39e02272c47b35440797d47b5b532cae55f3eaf1be875032ff28e74a5a39b084af836bf999f0a322edd5de806d2c4885470321e1b7831bb15622fd0f", 0x7b}, {&(0x7f00000020c0)="c7a7244ce48bc1a990ee077ecd75cdb608b55a1a0f866d6eda1a26c716850a0b087eb77887b2852fe768c5ae1e069b27269366a6dde45325db38c40758e8db297356e26da4f049feff00f520146e22031dcf4b948e2ce9f2d8e88d22316c40ddfea1d4b11ef42d1a8e", 0x69}, {&(0x7f0000002140)="ab2639b218e29a2a309683f7acac20746ca371beb0fb92f7580d93860c205336de46cb65ad37e5833e16bae04126671f290dd0dad7bd325fb98db95f32f26ddcdb3481ebc3c8ec2503e078564ebb884360a5d42e7465520073650604aa0505163d318f200612d18ddc3a3a79c07bebf65c57001a1ab904efe764e11dd62b4fb01fe15a97a7c1917c8538514ebf", 0x8d}], 0x6, &(0x7f0000002280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x5, 0x4) 5.539054146s ago: executing program 2 (id=2368): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x7e, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) vmsplice(r1, &(0x7f0000003480)=[{&(0x7f0000001080)="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", 0xffd}, {&(0x7f0000002080)="8900cb", 0x3}], 0x2, 0x8) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0x1}]) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x16310127) keyctl$describe(0x6, r0, 0x0, 0x0) 5.538773886s ago: executing program 40 (id=2368): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x7e, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) vmsplice(r1, &(0x7f0000003480)=[{&(0x7f0000001080)="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", 0xffd}, {&(0x7f0000002080)="8900cb", 0x3}], 0x2, 0x8) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0x1}]) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x16310127) keyctl$describe(0x6, r0, 0x0, 0x0) 4.944957722s ago: executing program 1 (id=2371): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00110800000024467e24"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x6, 0x6, "32f5aa", 0x3, 0x33, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x32}, [@hopopts={0x29}], "24a6505bfa1bf61f"}}}}}}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONCLEX(r2, 0x5450) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x10, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040840) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0xee00, &(0x7f0000000040)={0xe75d, 0xf, 0x1, 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xfff7}}}}}, 0x0) 4.507023384s ago: executing program 4 (id=2372): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x30500c4, &(0x7f0000000100)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@delalloc}, {@nojournal_checksum}]}, 0x1, 0x781, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) syz_clone3(&(0x7f0000000680)={0x200002000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x0], 0x1, {r1}}, 0x58) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x814) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2e, 0x0, {{@in6=@mcast2, @in=@empty, 0x0, 0xd, 0x0, 0x0, 0xa, 0x20, 0x20, 0x33}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x3, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x2}, 0x2, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x4000080) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa0}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000420e000100000000360000002c4f0000000000001800000000000000290000000400000087000000000000006da947245802c2cd5c941b4a82bc078ca6ddabddf8cdffb4010000007153c7afef9a54ad"], 0x30}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = io_uring_setup(0x782c, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {0x6, 0x0, 0xb, 0x4}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.355034067s ago: executing program 9 (id=2373): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x151400, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) socket$inet(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) 3.569314437s ago: executing program 3 (id=2374): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) unshare(0x60000600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x2d4702, 0x0) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x2c000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x18050400) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)) 3.354479223s ago: executing program 4 (id=2376): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) unshare(0x400) socket$pptp(0x18, 0x1, 0x2) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x40, 0xc0000000, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3dd31340e92c4bb8"}}, 0x48}, 0x300}, 0x8040) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000006a0001005bc9c9a1c2bcd90bc46a83"], 0x18}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904011d00020d00"], 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)="74d9a389fa406bfe5236671fe845b87c4de6840630c2526fc1bd39edaadfbaa457c0c59ebd27ca71", 0x28}], 0x1}}], 0x1, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fedbdf2501000000000000000b000000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4000006}, 0x40) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xffff1000, 0x3000, 0x8, 0x9, 0xfb, 0x8, 0x40, 0x17, 0x0, 0x2e, 0x18}, {0xb000, 0x2000, 0xb, 0x0, 0x22, 0x7, 0x9, 0x27, 0x5, 0xb4, 0x3}, {0x4, 0xa000, 0x0, 0x5, 0x3, 0x3, 0x0, 0x19, 0x1, 0x5, 0x4, 0x81}, {0x3000, 0xa000, 0x44e41e77284b2876, 0x1, 0x0, 0xf, 0xb, 0x0, 0x6, 0x7, 0x6}, {0x11f6593269eab9dc, 0x126000, 0xb, 0x3, 0x15, 0x19, 0xab, 0x7f, 0x7, 0x83, 0x8, 0x83}, {0x8000000, 0x5000, 0xc, 0xa3, 0xad, 0x9, 0x1, 0xf7, 0x8, 0x5, 0xff}, {0x3000, 0x58000, 0x8, 0x7, 0x8, 0x2, 0x9, 0x5, 0x5, 0x81, 0xff, 0x6d}, {0x100000, 0x1, 0xc, 0x5, 0xf, 0x6, 0x0, 0x34, 0xc0, 0xb, 0x3, 0xc1}, {0xa000, 0x30}, {0x100000, 0x6}, 0x80000031, 0x0, 0xeeef0000, 0x52429, 0xe, 0xd800, 0x8000c00, [0x6800000000000000, 0x4, 0x61, 0xf]}) 3.274903185s ago: executing program 3 (id=2377): prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r3 = fsopen(&(0x7f0000000240)='esdfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) (async) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x178) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) lseek(r5, 0x7, 0x1) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x40) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xffe0}, {0x10, 0xffff}}}, 0x24}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r10) 3.271005916s ago: executing program 9 (id=2378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x151400, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700003f4ff0000000000000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fcffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000fffffff83c00"], 0xfc}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001980)={0x1, 0x58, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f00000019c0)={'erspan0\x00', 0x0, 0x80, 0x20, 0x8, 0x6, {{0x6, 0x4, 0x0, 0xd, 0x18, 0xff, 0x0, 0x7, 0x2f, 0x0, @empty, @remote, {[@generic={0x86, 0x2}, @noop, @end]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000840)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000880)="dd66699c71ea078a848b771ecfde", 0xe}, {&(0x7f00000008c0)="456aa3c14040c993d1882bd85a6c7e28a3b2520108834b44303a9bf618fbbb497511d4a17498cd744d8fa74b0300f4299b748ca1be634c0de2bf07d185b93637ae16d7437ecccb379782a252e497c0b9b564850baa216bf20a5a0eac6d07f677789524dfde38ff71843e556abc563a791b7758b00a2acdcb5d7e33bc77c1b1ebe701210adf742b68579a7d22f0aad2136b1801c8161301de385a", 0x9a}, {&(0x7f0000000980)="dda482cc255489c5760178db497196ecb153bd002332ae56a1bd77090ecd4a608dcc791fd58ade75e6e2b8e61013363b728ae3a1393c104a92d1ae99009d66d2d50b69871d82a584511b1fb461e4349e70de12db004293264b8688d0d079caa145216ff100e13f35b01c", 0x6a}, {&(0x7f0000000a00)="9d6a89c2266bb38d2a", 0x9}, {&(0x7f0000000a40)="6fc2d3cb7609e308bb7f6d54c24cbbaec8143f92651a69fbb070688ed4cc8011c0614c9cd01798a45c46856eae886e64cba7135343836ed77dd960a29d17a29afa5f16658a72a2507aaafa5c1cc58ffc69063f819eb86dbaf5b9b70f48f6e731b32bc9d43c4a7975eb82819623f9", 0x6e}, {&(0x7f0000000ac0)="e8f1307f1318dd84", 0x8}, {&(0x7f0000000b00)="3875a8a5a87eb4101be23d7b071baf74b607ebcd3995eeb2d3ec35b21dbb74cb7a61f716877c1e1ec9347ed2ead9a1cf345b603fb6718de91092c34baed8cd5926c7d736f2155efb012d020b71c7dc34603ec3d3bcf7919fa1399ee6f8e17fdbbd6f51b5cc321812e6a6f2006ee69a6c88c23072d977e237c84633c2ecc5f4df83ed2377128dc95795da9074bbcf7eb77ccf8e2834267f08c6e01a6f0bb2aa59434e8427c689ffc78c403b137b05269e1406f020c189c75a25fc64a681c3af21df9990f9e8561f32232195f672c2440363dd586b2dcce7413de5de21791d5d4c5e2549db409941db78b7b329", 0xec}, {&(0x7f0000000c00)="8bb0bc8fb5a501ba70203f4b6e9f87f70d38e15de5eceba7f90105cc4e1432198330b74273dc3f015662007afd34bc7f3480602956c044f0fd5f40f42b2a955198aa5999f7870bbb7389858ab84b0651fa803e852d0b14f0c1a68754753695daee64063b039e4ab0dc1ef2d8d51edddfddfd7752c5b2f45289290b164269c406d36583e5522ea87b8aa9d25845bd6f0acc1adf63ede9e386b08228d4003b0b9a7ebdf8d4052ff99edd8dd14d1a585d08bbc7c7615fd6cd271c6e98b626d892d02cfec7a09f467beae4fb", 0xca}], 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="110000000000000000000000010000000400000000000000e0000000000000000000000007000000442c92710a010100000000080a01010100000006e000000100000009ac1414bb000000077f00000100000007440ca4e00100000000000000442c7f3300000000000000fcac1414aa00000003ac1414bb00140000ac14144400000003640101008000000144444b23ac1414aa000002006401010200000eec0a01010200000004e000000100000001e000000100000001e000000100000003ac1e0101000000056401010100000004014424d2637f000001000000020a010102ffffffff6401010100000002ac1414aa000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14141dac1414bb000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e000100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="64010102ac1414bb0000000028000000000000000000000007000000070bc50a0101440c9370ffffff070000000b00"], 0x180}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f40)="cca4d2117879f9e178f34e26777373ad0e7d8ff5c9647343fa3b2127a99474fbdfd16348cc09f8cb2f7a3a431971ca3b98e20e62d57c5953d0ad32bd4bc3d6f53668624f1fbfb60518e8fa18f5ddadd4f6418fca0f594c1422e239d22199f8b23140b46a4a8d90086d5751e5ab09c63f2165ddb5a88d84f49c7278219d2059448aa97e099f95fd34866a3e454359d826e14b6efdb4d6d5b9f1", 0x99}], 0x1}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)="5118593970cba3d106e6168bb712b656a0ea27c83a8e5341a15c64509316366ca514765aa779dd634beb849636b08d0ca5830e2f02a48cbba7c302c5e0a6b20119cf04bc7ad3918bef86fef540acae52130d76eb413fdc08927800f33320c0020f11af2d681fb026ad0dd045c517a228caa9b80435e8cddc69b3af7b074dccdcde87a820c80a43bb3a0d46ff758507c4eb12edd5f06478a9bdd4251deefdc77ac46bdc2d9f04302e32da365765", 0xad}, {&(0x7f00000011c0)="4c7699148cf3f349837128b283950430137a561e43f3e24eee5066dc5bb8ae676213317ccafd6da8a7ee29e738c20e4a4dbf5cec0b9a24a051f57b7fc7f3b32f6b21d59b00a45115408f5d66d306f8d10b0f4362cf20957a224b76870f7c50e2953917b67292b75797908c5b07f040e7d6055730e5ea7b7f1c467d1f54c1806cc5ad997a91e4541b9ad88c5da8b106c3ce68d19bcc963d8f1a34fd3c8b21ae9ff3aa6a5579153d720153df8b0c155fe4c4411b97eed6d1b00a564c7a", 0xbc}, {&(0x7f0000001280)="3b1975e59fba456a064d2e94fd598c677ea370cd3ddb449375022ac1c1969ad59c91da9ea1ca4f94987d4bbaddc049b9e50e5925b03b24122510ae5fec6f23270e5f6b44237cb085ec008df79933131a74611f88128e85d56c3cd1989f25f64313aea26f1f82b736dd8a10780f70cfb38d39c65cfe86c3c89c22e131435902fda72d5b22316964eef44d83b3c7439ee8ea97cd70f45ab7a969fd3aa8524381daef129ada53bc1b34b85c5b1e9721072e81224aa36243029a24afe9763865ce30614cb3ba00be69de17f295681b", 0xcd}, {&(0x7f0000001380)="0a1644b7390f", 0x6}, {&(0x7f00000013c0)="85d81ed0b681d8e70f3d668571a2502ec84a565ef0a1cf00b74de4db201de6445817df969dc26b00cfeb0955254117720d6ea7e090b38c724f8fcf8d1998a9b5f2d2c5caade6980d02b19fd0e267ff3a3804f0a168499cee6b969619755cdb841e7c41fb8a6f9cccf3844567ef172ca49d10a2920d302636200f99ad432dd633fad0d2bcb1d53ce51e1a24bdfb5b623f1fec4d9fedf1d2219b57c3372ac57271ead010ed9478949ea0269b4c63fe6d867047fe2040207dc1120988c136999320ce84da1848ec5b346131e2fce84e002ddb25ed2ce848b1ed6969b8", 0xdb}], 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="1400000000000000000000000200000000000080000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, {{&(0x7f0000001780)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000017c0)="5a8130346eca1a74f3d4f79a70d7a6073c4111eac43f43e7270a4cdedebe494145d349ee8df0110bdf6e2cfb89818f71dca768b4d85b599cf83dc8d59d906a256211d883cb82d4e7739cbd89c6ef5a15bf872d21e31b5c3215017986893e97", 0x5f}, {&(0x7f0000001840)="e82990220fd745c07721a2a9ecc36a9397d5edeacf67cb5b6f16b089e6b1f9bd3dc0fd56c0fb5494615cc1037f888e4c0e6934c9cc77bc5577a5c27e4a3ba5be80020433079b7afb6059337cc0c41ea9c0ad00e2717cd00207eb402f3e98aa7903c84c4ef7eb8439a8c8ea55c49771c9ae21", 0x72}], 0x2, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ffffffffe00000010000000011000000000000fe0000000000000014000000000000000000000001000000610b000000000000100000000000000000000000070000004000000000000000000000000700000094040000442c1203ac1414bb000000077f00000100000005e00000013296ab8af3effffffff90a010101ffff7fe5ffffffffffffffc01c000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="e0000001ac14143000000000"], 0x218}}, {{&(0x7f0000001c80)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000002200)=[{&(0x7f0000001cc0)="c1cabe17c2ad387aa4b69399f1e65872e6f8be3029e855827d260a679083dbeb922375e1263f611f7268b8778c68ec181e5e46010eb7e15ede6ce65ba9c8bbb1c96d8bb57d2fafa1e0e23391e34f96794e852bf7dc91d39a93861e4d5a1ed95453b4efd21c2d1cf2f28cfe68b32889ed621587500ebdd0cceba7dc104d99ff5e57033cd3b2e5ea1d7e7644f7508d82834abb6c783acebca1814e38830fa974cd490a3afc6d46cf8988e956a98a398d4547428467b939ac8c3d8ffd2383984b3c05627fba2adc07a297deae850a0db1a2b422a31425742935", 0xd8}, {&(0x7f0000001dc0)="2112c944b459f404b7f840ae0669d8ec717e9e3874ff79ddacafe7773f77b4687da8ad4302470d24de59c60a3adcae6457f13e71bb7f35d5581b25273b932a309ffd74a0a57a872bdc08109c95879069146eee8a498e1d451f100331f0dba504b936505575a6b1790fe0d542d2cfea23486b55b6805d39bb9c4aa12cabc3c1a70c881fb32f9ca50d477aa32855646898adbac776fd8a37e35f87dca5c6ed0aaffbfc73229686f950873796005df63de1f81a3fb85e1b5f8579d30fc4c7c05962033d951172a4cab1d5f70717b2c1d418a6a1e1f053a7025e2e373abcc8f5823e95fe62d0eaa1973c9c68e49808", 0xed}, {&(0x7f0000001f80)="fff045cbe9980bcd88412b07d0be2a902a0097679ab684d5ea51c84658ecc9d5e24ddb47e4cc81602ffd2c80cc0470844ce02893d7a1605c4b5e7ecaeeba55041a39f2e10546f3f42a94858eb4b721d2d6a183261620f23273b2f3d229f44c92260449a50bf1691c2e74fdb3f75f220f8db07ed96eb0758284c89d86ec6c347547e917472c0eae51602e783b3336d23e57113c2d774b1b507e4a821cd061575a98f3e19199285ad5362fcf", 0xab}, {&(0x7f0000002040)="6ecf283096b3082100190a9ee9fb172ea5823c63e98c41f4cdfa5e3e18f4dec9dc988bc1d6f182cca71503a883b1a4aaf4eb4552d40e5ff8cfc28e66cba2aa39e02272c47b35440797d47b5b532cae55f3eaf1be875032ff28e74a5a39b084af836bf999f0a322edd5de806d2c4885470321e1b7831bb15622fd0f", 0x7b}, {&(0x7f00000020c0)="c7a7244ce48bc1a990ee077ecd75cdb608b55a1a0f866d6eda1a26c716850a0b087eb77887b2852fe768c5ae1e069b27269366a6dde45325db38c40758e8db297356e26da4f049feff00f520146e22031dcf4b948e2ce9f2d8e88d22316c40ddfea1d4b11ef42d1a8e", 0x69}, {&(0x7f0000002140)="ab2639b218e29a2a309683f7acac20746ca371beb0fb92f7580d93860c205336de46cb65ad37e5833e16bae04126671f290dd0dad7bd325fb98db95f32f26ddcdb3481ebc3c8ec2503e078564ebb884360a5d42e7465520073650604aa0505163d318f200612d18ddc3a3a79c07bebf65c57001a1ab904efe764e11dd62b4fb01fe15a97a7c1917c8538514ebf", 0x8d}], 0x6, &(0x7f0000002280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x5, 0x4) 3.229402147s ago: executing program 41 (id=2378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x151400, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700003f4ff0000000000000000000000000000000000ff02000000000000000000000000000100000000000000000a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000fcffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000fffffff83c00"], 0xfc}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001980)={0x1, 0x58, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001a00)={'ip_vti0\x00', &(0x7f00000019c0)={'erspan0\x00', 0x0, 0x80, 0x20, 0x8, 0x6, {{0x6, 0x4, 0x0, 0xd, 0x18, 0xff, 0x0, 0x7, 0x2f, 0x0, @empty, @remote, {[@generic={0x86, 0x2}, @noop, @end]}}}}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000840)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000880)="dd66699c71ea078a848b771ecfde", 0xe}, {&(0x7f00000008c0)="456aa3c14040c993d1882bd85a6c7e28a3b2520108834b44303a9bf618fbbb497511d4a17498cd744d8fa74b0300f4299b748ca1be634c0de2bf07d185b93637ae16d7437ecccb379782a252e497c0b9b564850baa216bf20a5a0eac6d07f677789524dfde38ff71843e556abc563a791b7758b00a2acdcb5d7e33bc77c1b1ebe701210adf742b68579a7d22f0aad2136b1801c8161301de385a", 0x9a}, {&(0x7f0000000980)="dda482cc255489c5760178db497196ecb153bd002332ae56a1bd77090ecd4a608dcc791fd58ade75e6e2b8e61013363b728ae3a1393c104a92d1ae99009d66d2d50b69871d82a584511b1fb461e4349e70de12db004293264b8688d0d079caa145216ff100e13f35b01c", 0x6a}, {&(0x7f0000000a00)="9d6a89c2266bb38d2a", 0x9}, {&(0x7f0000000a40)="6fc2d3cb7609e308bb7f6d54c24cbbaec8143f92651a69fbb070688ed4cc8011c0614c9cd01798a45c46856eae886e64cba7135343836ed77dd960a29d17a29afa5f16658a72a2507aaafa5c1cc58ffc69063f819eb86dbaf5b9b70f48f6e731b32bc9d43c4a7975eb82819623f9", 0x6e}, {&(0x7f0000000ac0)="e8f1307f1318dd84", 0x8}, {&(0x7f0000000b00)="3875a8a5a87eb4101be23d7b071baf74b607ebcd3995eeb2d3ec35b21dbb74cb7a61f716877c1e1ec9347ed2ead9a1cf345b603fb6718de91092c34baed8cd5926c7d736f2155efb012d020b71c7dc34603ec3d3bcf7919fa1399ee6f8e17fdbbd6f51b5cc321812e6a6f2006ee69a6c88c23072d977e237c84633c2ecc5f4df83ed2377128dc95795da9074bbcf7eb77ccf8e2834267f08c6e01a6f0bb2aa59434e8427c689ffc78c403b137b05269e1406f020c189c75a25fc64a681c3af21df9990f9e8561f32232195f672c2440363dd586b2dcce7413de5de21791d5d4c5e2549db409941db78b7b329", 0xec}, {&(0x7f0000000c00)="8bb0bc8fb5a501ba70203f4b6e9f87f70d38e15de5eceba7f90105cc4e1432198330b74273dc3f015662007afd34bc7f3480602956c044f0fd5f40f42b2a955198aa5999f7870bbb7389858ab84b0651fa803e852d0b14f0c1a68754753695daee64063b039e4ab0dc1ef2d8d51edddfddfd7752c5b2f45289290b164269c406d36583e5522ea87b8aa9d25845bd6f0acc1adf63ede9e386b08228d4003b0b9a7ebdf8d4052ff99edd8dd14d1a585d08bbc7c7615fd6cd271c6e98b626d892d02cfec7a09f467beae4fb", 0xca}], 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac14141dac1414bb000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e000100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="64010102ac1414bb0000000028000000000000000000000007000000070bc50a0101440c9370ffffff070000000b00"], 0x180}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000f40)="cca4d2117879f9e178f34e26777373ad0e7d8ff5c9647343fa3b2127a99474fbdfd16348cc09f8cb2f7a3a431971ca3b98e20e62d57c5953d0ad32bd4bc3d6f53668624f1fbfb60518e8fa18f5ddadd4f6418fca0f594c1422e239d22199f8b23140b46a4a8d90086d5751e5ab09c63f2165ddb5a88d84f49c7278219d2059448aa97e099f95fd34866a3e454359d826e14b6efdb4d6d5b9f1", 0x99}], 0x1}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)="5118593970cba3d106e6168bb712b656a0ea27c83a8e5341a15c64509316366ca514765aa779dd634beb849636b08d0ca5830e2f02a48cbba7c302c5e0a6b20119cf04bc7ad3918bef86fef540acae52130d76eb413fdc08927800f33320c0020f11af2d681fb026ad0dd045c517a228caa9b80435e8cddc69b3af7b074dccdcde87a820c80a43bb3a0d46ff758507c4eb12edd5f06478a9bdd4251deefdc77ac46bdc2d9f04302e32da365765", 0xad}, {&(0x7f00000011c0)="4c7699148cf3f349837128b283950430137a561e43f3e24eee5066dc5bb8ae676213317ccafd6da8a7ee29e738c20e4a4dbf5cec0b9a24a051f57b7fc7f3b32f6b21d59b00a45115408f5d66d306f8d10b0f4362cf20957a224b76870f7c50e2953917b67292b75797908c5b07f040e7d6055730e5ea7b7f1c467d1f54c1806cc5ad997a91e4541b9ad88c5da8b106c3ce68d19bcc963d8f1a34fd3c8b21ae9ff3aa6a5579153d720153df8b0c155fe4c4411b97eed6d1b00a564c7a", 0xbc}, {&(0x7f0000001280)="3b1975e59fba456a064d2e94fd598c677ea370cd3ddb449375022ac1c1969ad59c91da9ea1ca4f94987d4bbaddc049b9e50e5925b03b24122510ae5fec6f23270e5f6b44237cb085ec008df79933131a74611f88128e85d56c3cd1989f25f64313aea26f1f82b736dd8a10780f70cfb38d39c65cfe86c3c89c22e131435902fda72d5b22316964eef44d83b3c7439ee8ea97cd70f45ab7a969fd3aa8524381daef129ada53bc1b34b85c5b1e9721072e81224aa36243029a24afe9763865ce30614cb3ba00be69de17f295681b", 0xcd}, {&(0x7f0000001380)="0a1644b7390f", 0x6}, {&(0x7f00000013c0)="85d81ed0b681d8e70f3d668571a2502ec84a565ef0a1cf00b74de4db201de6445817df969dc26b00cfeb0955254117720d6ea7e090b38c724f8fcf8d1998a9b5f2d2c5caade6980d02b19fd0e267ff3a3804f0a168499cee6b969619755cdb841e7c41fb8a6f9cccf3844567ef172ca49d10a2920d302636200f99ad432dd633fad0d2bcb1d53ce51e1a24bdfb5b623f1fec4d9fedf1d2219b57c3372ac57271ead010ed9478949ea0269b4c63fe6d867047fe2040207dc1120988c136999320ce84da1848ec5b346131e2fce84e002ddb25ed2ce848b1ed6969b8", 0xdb}], 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="1400000000000000000000000200000000000080000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1014bb7f00fffc0006df001c0000c8f3354ef04a0e6ce62390a7744c00f2ffffff00000000080000001e41eeee078d549874b704c0943945d980af362e9753a5efeb11d63360812e5c2130b5776a39b571ccb4bc99189fdf949bb3fd8eb9fba1b39f78753d82aadbfac32990b7a8ebe8460b337949d0d4e56de144ce0b5370b52196074437400eefa10000000000000000bd73ed439ac095f59446521849bf3c4053d1f12212a325aeef37d5396084591c3d5b2ad41b669876f63641d79ffdcbf059348527ed8f3e955ebfb87afa0bbe318e69fbc01de868c8900934e1eb9f75e4ae9fc288573859a11c69aba2c336ce23505970a05c9dd1b6bc1c9394b3e97204472a8ffd44fe5d1d66668af6db3989104f7d2ac81cd1ff2f9becf7f7a361a8631ee22599dbba005b5e8bbb3fad4fcb2da27041be9b26304d63bd58db81d0df92561fda98d2dca6377c0189e9f1956b32a9459fb29f000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, {{&(0x7f0000001780)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000018c0)=[{&(0x7f00000017c0)="5a8130346eca1a74f3d4f79a70d7a6073c4111eac43f43e7270a4cdedebe494145d349ee8df0110bdf6e2cfb89818f71dca768b4d85b599cf83dc8d59d906a256211d883cb82d4e7739cbd89c6ef5a15bf872d21e31b5c3215017986893e97", 0x5f}, {&(0x7f0000001840)="e82990220fd745c07721a2a9ecc36a9397d5edeacf67cb5b6f16b089e6b1f9bd3dc0fd56c0fb5494615cc1037f888e4c0e6934c9cc77bc5577a5c27e4a3ba5be80020433079b7afb6059337cc0c41ea9c0ad00e2717cd00207eb402f3e98aa7903c84c4ef7eb8439a8c8ea55c49771c9ae21", 0x72}], 0x2, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ffffffffe00000010000000011000000000000fe0000000000000014000000000000000000000001000000610b000000000000100000000000000000000000070000004000000000000000000000000700000094040000442c1203ac1414bb000000077f00000100000005e00000013296ab8af3effffffff90a010101ffff7fe5ffffffffffffffc01c000000000000000000", @ANYRES32=0x0, @ANYBLOB="7f0000010a010102000000001c0100000000000000000000070000004434c411ac1414aa00000006ffffffff00000003ac14142c0000009c6401010200000004ac1414aa00000003ac1414bb000000014414af21ac1e000100000006e000000200000007865e00000000010cd6cafabd5a18824533e60006d55176cf020ccb7e3ea128d6cf5df42b020c89b9c9633d1612c67d22000877c54aa9ceb202092250368bd6b9de050c09a7e9a7730b9904637a0a11329b00bec3ec898d921bc8dfc68bf194040100860422e0831fedac1414aa7f000001ac1414bbffffffff7f00000100000000e0000001863c0000000207041823000d3b00e787428c2a513a1c09010a005ddedda3dbecbf0709687fcd48f62052010db954f33bcd76f96bf9553f020317020200000000000000140000000000000000000000010000000100ffff000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="e0000001ac14143000000000"], 0x218}}, {{&(0x7f0000001c80)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000002200)=[{&(0x7f0000001cc0)="c1cabe17c2ad387aa4b69399f1e65872e6f8be3029e855827d260a679083dbeb922375e1263f611f7268b8778c68ec181e5e46010eb7e15ede6ce65ba9c8bbb1c96d8bb57d2fafa1e0e23391e34f96794e852bf7dc91d39a93861e4d5a1ed95453b4efd21c2d1cf2f28cfe68b32889ed621587500ebdd0cceba7dc104d99ff5e57033cd3b2e5ea1d7e7644f7508d82834abb6c783acebca1814e38830fa974cd490a3afc6d46cf8988e956a98a398d4547428467b939ac8c3d8ffd2383984b3c05627fba2adc07a297deae850a0db1a2b422a31425742935", 0xd8}, {&(0x7f0000001dc0)="2112c944b459f404b7f840ae0669d8ec717e9e3874ff79ddacafe7773f77b4687da8ad4302470d24de59c60a3adcae6457f13e71bb7f35d5581b25273b932a309ffd74a0a57a872bdc08109c95879069146eee8a498e1d451f100331f0dba504b936505575a6b1790fe0d542d2cfea23486b55b6805d39bb9c4aa12cabc3c1a70c881fb32f9ca50d477aa32855646898adbac776fd8a37e35f87dca5c6ed0aaffbfc73229686f950873796005df63de1f81a3fb85e1b5f8579d30fc4c7c05962033d951172a4cab1d5f70717b2c1d418a6a1e1f053a7025e2e373abcc8f5823e95fe62d0eaa1973c9c68e49808", 0xed}, {&(0x7f0000001f80)="fff045cbe9980bcd88412b07d0be2a902a0097679ab684d5ea51c84658ecc9d5e24ddb47e4cc81602ffd2c80cc0470844ce02893d7a1605c4b5e7ecaeeba55041a39f2e10546f3f42a94858eb4b721d2d6a183261620f23273b2f3d229f44c92260449a50bf1691c2e74fdb3f75f220f8db07ed96eb0758284c89d86ec6c347547e917472c0eae51602e783b3336d23e57113c2d774b1b507e4a821cd061575a98f3e19199285ad5362fcf", 0xab}, {&(0x7f0000002040)="6ecf283096b3082100190a9ee9fb172ea5823c63e98c41f4cdfa5e3e18f4dec9dc988bc1d6f182cca71503a883b1a4aaf4eb4552d40e5ff8cfc28e66cba2aa39e02272c47b35440797d47b5b532cae55f3eaf1be875032ff28e74a5a39b084af836bf999f0a322edd5de806d2c4885470321e1b7831bb15622fd0f", 0x7b}, {&(0x7f00000020c0)="c7a7244ce48bc1a990ee077ecd75cdb608b55a1a0f866d6eda1a26c716850a0b087eb77887b2852fe768c5ae1e069b27269366a6dde45325db38c40758e8db297356e26da4f049feff00f520146e22031dcf4b948e2ce9f2d8e88d22316c40ddfea1d4b11ef42d1a8e", 0x69}, {&(0x7f0000002140)="ab2639b218e29a2a309683f7acac20746ca371beb0fb92f7580d93860c205336de46cb65ad37e5833e16bae04126671f290dd0dad7bd325fb98db95f32f26ddcdb3481ebc3c8ec2503e078564ebb884360a5d42e7465520073650604aa0505163d318f200612d18ddc3a3a79c07bebf65c57001a1ab904efe764e11dd62b4fb01fe15a97a7c1917c8538514ebf", 0x8d}], 0x6, &(0x7f0000002280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x5, 0x4) 3.037499082s ago: executing program 1 (id=2380): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000700)=ANY=[@ANYBLOB="66696c746572001000000000000000000000000000000000000000000000000004000000e3c004fe08092d12e251bf76421907"], &(0x7f00000000c0)=0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='-']}, 0x18}}, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) timerfd_create(0x2, 0x80000) epoll_create1(0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r6, 0x2000, 0x0) 2.531021384s ago: executing program 3 (id=2381): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000700)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@numtail}, {@rodir}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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") r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e"], 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.211020103s ago: executing program 7 (id=2382): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 2.097558276s ago: executing program 1 (id=2383): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@debug}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x10b083, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = socket$inet6(0xa, 0x3, 0x2f) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x0, r7}, {}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0xc, @empty, 0xff}, 0x1c) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000040)=@x86={0x9, 0x4, 0x9, 0x0, 0x8, 0x1, 0x1, 0xb0, 0x4, 0x9, 0x2, 0x5, 0x0, 0x101, 0x14, 0xc, 0x3, 0x4, 0x6, '\x00', 0xfe, 0x7}) r8 = accept(r0, &(0x7f0000000100)=@tipc=@id, &(0x7f0000000240)=0x80) read(r8, &(0x7f0000000280)=""/25, 0x19) 2.092896646s ago: executing program 0 (id=2379): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pptp(0x18, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000d000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x20071026}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x1014}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) unshare(0x60040000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd700000000040020000000000000d00000000080018004e224e23"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x800d, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x63fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000000}, 0x50) 2.081780116s ago: executing program 7 (id=2384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000fbffffffffffff0000000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv4_getnexthop={0x24, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_OIF={0x7}, @NHA_OIF]}, 0xff26}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000200)={{0x40000, 0x1, 0x9, 0x1, 0xcd, 0x49, 0x6, 0x81, 0x0, 0x3, 0x5, 0xeb}, {0xf000, 0x80a0000, 0xd, 0xe, 0x5, 0x7, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x6, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0x0, 0x3, 0x3, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x10000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x2, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x0, 0x42, 0x6, 0x5, 0x1, 0xd, 0x9}, {0x8000000, 0x0, 0x0, 0x21, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x5, 0x1, 0xd}, {0xdddd1000, 0xd000, 0xa, 0x23, 0xc, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0xeeee0000, 0x5}, {0xffff1000}, 0x2, 0x0, 0xdddd0000, 0x150690, 0x3, 0x4000, 0xeeee0c00, [0x1, 0x1004, 0x5ef802fd, 0x1000]}) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r9 = socket(0x10, 0x803, 0x0) r10 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0200000001"], 0x48) r13 = fsmount(r10, 0x1, 0x0) fchdir(r13) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r12}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r14, &(0x7f0000007f00)={0x2020}, 0x4b) read$FUSE(r14, &(0x7f0000009f40)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.890967432s ago: executing program 1 (id=2385): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x30500c4, &(0x7f0000000100)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@delalloc}, {@nojournal_checksum}]}, 0x1, 0x781, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RREADLINK(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) syz_clone3(&(0x7f0000000680)={0x200002000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x0], 0x1, {r1}}, 0x58) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x814) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2e, 0x0, {{@in6=@mcast2, @in=@empty, 0x0, 0xd, 0x0, 0x0, 0xa, 0x20, 0x20, 0x33}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x3, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x2}, 0x2, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x4000080) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa0}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000420e000100000000360000002c4f0000000000001800000000000000290000000400000087000000000000006da947245802c2cd5c941b4a82bc078ca6ddabddf8cdffb4010000007153c7afef9a54ad"], 0x30}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = io_uring_setup(0x782c, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 1.853982602s ago: executing program 0 (id=2386): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x30500c4, &(0x7f0000000100)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@delalloc}, {@nojournal_checksum}]}, 0x1, 0x781, &(0x7f0000000800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) syz_clone3(&(0x7f0000000680)={0x200002000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x0], 0x1, {r1}}, 0x58) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x814) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2e, 0x0, {{@in6=@mcast2, @in=@empty, 0x0, 0xd, 0x0, 0x0, 0xa, 0x20, 0x20, 0x33}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x3, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x2}, 0x2, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x4000080) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0xa0}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000420e000100000000360000002c4f0000000000001800000000000000290000000400000087000000000000006da947245802c2cd5c941b4a82bc078ca6ddabddf8cdffb4010000007153c7afef9a54ad"], 0x30}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = io_uring_setup(0x782c, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_BUFFERS2(r8, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x9}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {0x6, 0x0, 0xb, 0x4}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.842324512s ago: executing program 7 (id=2387): r0 = getuid() r1 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x182080a, &(0x7f0000000380)={[], [{@fowner_lt={'fowner<', r0}}]}, 0x1, 0x33e, &(0x7f0000000480)="$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") r2 = syz_open_dev$vcsu(&(0x7f0000000140), 0xf2, 0x4400) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "2116f3f1bdc49ce549"}, 0x14) fallocate(r2, 0x10, 0xd, 0x20000000000000c) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000280)="f3ef42a2b285bc890bc5b7dbb2cbb9be562090dff9ba89db104aea7ce7efd719e382e3498da44ddaee3d97ed214042af2981d38c3ae3664997614b484db4c3213570f7efd670f084f50250c8d7f44d9f050dc3e7b105b26faf3e93a69a9491491a5ac25093ab25dbb592ffcbd88db05e35585b53708343d3f5d46cbf75ad2d577c9c8f88508f817cf784c945d6957bf75de569bc083b7d17a49bb2bc6ee6e9c835e95548d5922efbccf4", 0xaa}], 0x2) 1.770579724s ago: executing program 7 (id=2388): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x151400, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0xfffffffffffeffff, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x8, 0x248e, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x81, 0x6, 0x5, 0x7ff, 0xf439}) socket$inet(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB="0213000e02"], 0x10}}, 0x4000050) 976.166285ms ago: executing program 4 (id=2389): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00110800000024467e24"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0xff, @remote, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x6, 0x6, "32f5aa", 0x3, 0x33, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x32}, [@hopopts={0x29}], "24a6505bfa1bf61f"}}}}}}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONCLEX(r2, 0x5450) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x10, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0x1}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040840) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0xee00, &(0x7f0000000040)={0xe75d, 0xf, 0x1, 0x1}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x3, 0xfff7}}}}}, 0x0) 973.569805ms ago: executing program 1 (id=2390): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000125bd7000fbdbdf257400000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x48050}, 0x4000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r4, &(0x7f0000000340), 0x0}, 0x20) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/profiling', 0x189a82, 0x91904327f98d78ab) sendfile(r6, r6, 0x0, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, &(0x7f00000013c0)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x400454a4, &(0x7f0000000180)) r9 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2800000, &(0x7f0000000340)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@usrquota}, {@inlinecrypt}, {@nogrpid}, {@grpquota}]}, 0x1, 0xbd0, &(0x7f0000000480)="$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") syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000030000000000001f478ac1e0001ac1414aa2b0090780300000045000000000000000000000000000000ac1414aa"], 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESDEC=r10, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) r11 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_usb_disconnect(r11) syz_usb_connect(0x6, 0x36, &(0x7f0000001600)=ANY=[@ANYRESHEX=r9, @ANYRESOCT=r0], 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) r12 = fsopen(&(0x7f0000000100)='configfs\x00', 0x1) ioctl$EVIOCRMFF(r11, 0x40085507, &(0x7f0000000100)=0x1) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x20818b9, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r12, &(0x7f0000001340)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)=ANY=[@ANYBLOB="30010000040a0500000000000000000002000006680004801400030068da7230000000000000000000000000080002407839f5e208000140000000000800014000000004080002404df11301140003006e6574706369300000000000000000001400030070696d367265673000000000000000000800024072697d690a000700726f7574650000000900030073797a310000000059000c00deed096f3637bbfba2f4eb5b9fffaab32c2c42844adbb735a242eb75799fdb61041a6d0786676f7e64b7e8821933ee0e01639ea37d056836997be4529050ecfca06b25e113c0bd13477c266666089d6273fa7a4fd70000000c0002400000000000000001340008800c00024000000000000000070c0002400000000000000abc0c00014000000000000000620c0001400000000000010001"], 0x130}, 0x1, 0x0, 0x0, 0x28000840}, 0x4000004) 851.853888ms ago: executing program 7 (id=2391): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x18, r4, 0x61f3d6293b7647c9, 0x70bd2b, 0x24dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000100)) r5 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r5, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x20, 0x2}, [], {}, [], {}, {0x20, 0x5}}, 0x24, 0x3) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xffff}, {@in=@broadcast, 0x4d4, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x60, 0x1, {{'xcbc(aes)\x00'}, 0xc0, "b5009e87a9631bf77fe3ddce76d104b1932a525a4dc46233"}}]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x40082) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000180)={0xa2c, r7, 0x110, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x7b}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff0000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x25}, @NL80211_ATTR_CSA_IES={0x9e8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x3, 0x4ba, 0x2]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x9, 0x4, 0x1ff, 0xb, 0x9, 0x5, 0x2, 0x3]}, @beacon_params=[@NL80211_ATTR_PROBE_RESP={0x47a, 0x91, "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"}, @NL80211_ATTR_FTM_RESPONDER={0xd0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc8, 0x2, "768070bbce522666524e8d434d31bbd6a03dc327e06c4780df98c38239327a741b85083c8fa68994e188ad34a47fab10fd8209c4efd98e32e7876f1781becd37b1e3f854fc3e325946990031e9d21788e295384f1465958b6ecc751c0e5e0e0048f4cca5199fdabd903fa2dbe3d8352fa6118f2b8e810f66e0d694e5159d171861b879befbaa6ef65c29ae44c22c1a2c8bd55a73a702da0b035713e60a350e1c9142d5562b356a7059db28968114d93c5550b1a349f08457be6cbf0b4f49e2a77efe7566"}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc6, 0x7f, [@random={0x7, 0x96, "7061502eec68e4676d702a51ac8aea3c79983b363c7479b82619a9a03a18fc8f03620ee1c827be736dc560650326bee610e768281e4c843369dcfe5a15d1388f3fad7137694af1f8629e698dcce5014f1819db1f7599ec24195667be7bb3ead6d09bb790d1310284b2f464b225cbd0cc3be9702f3677135b6ec09087e1f2298b8a4c98fa68ec0ae7f3817dd5e04c3e4fdd8c7717ebe5"}, @tim={0x5, 0x28, {0x1, 0x66, 0x3, "8073fc1d6b12865559536820d20ee076526b45bb8e9356961feac91dcfafb956e3786a2212"}}]}, @NL80211_ATTR_BEACON_HEAD={0x299, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x6}, @device_b, @device_b, @random="54e4276a0642", {0x4, 0xd}}, 0x4, @default, 0x200, @void, @val={0x1, 0x7, [{0x6}, {0x6, 0x1}, {0x30, 0x1}, {0x16, 0x1}, {0x1b}, {0x60}, {0x0, 0x1}]}, @val={0x3, 0x1, 0x74}, @void, @val={0x6, 0x2, 0x7fff}, @val={0x5, 0xa0, {0x0, 0x49, 0x7, "9af38beffbdd49aebd281a0185070851adf7deb0b3eb49f6305718ae581e13a4741ebb250c56b0ae67ae4ad314383c9bbf3f7ceccefc34ee7620a287d17df505e25aeb148841dad73754cdadae034f3e0f8bd189f06583ca4eb981d1dfc60da37127b41d582e028694dc6895dcd913475676ac82853764ac5f5759eb59f31dbcf73cc89a560efc6ddc20849b6d45e0e3c53ece725e8d8be6d8e81ba37e"}}, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x1, 0xad, 0xad}}, @void, @void, @void, @val={0x76, 0x6, {0x7, 0x0, 0x3f, 0x100}}, [{0xdd, 0xc2, "488bc98f787eeee7182c4a25d8c477cc321da44e737696bda740f19958818242b55e150278aadbf3171a29cee22705185b9bd840e0eca450e81d363aef92f6813b250314f48c38974581ef9cd38105b2928feb277290db337c9f2e377328140639f749c6d21d445b44bfb8ee32a5155d358ff578ca9ad86a8458528eb1423bffa6bf134cf24fb32b344314779eed7c854c705cc31db9b1c72ec679dfcf3b19d95e551188ce7d9222eebe2ecf7cbd96d707b3016f761cd4ed5d28ab5b96923fff1be9"}, {0xdd, 0x34, "27cde54586ad75d7591f667c9979e36bc44353fae19813b3c7dd5fa48e30cecaedb669d0933b11443b0108ec0a0563878601436e"}, {0xdd, 0x90, "3daae868120f4760cca6d7df24810be7dde8bfbfd4d2511a05e4e5a9ac23a77c2397e9869c04db22999ad91b5645eb4e743b7b0364a27b3a8bab1bc6f46aed806c492d06998fdad68b6486d796414e86525589d4c0e061086aa06e276df1a18dfaf614e83ee4735f5a215652fd578442f3547770f57d89e3ba5d0d40398d6d76164ca69b653de0a370a84b8b55cd4f82"}, {0xdd, 0x20, "931db964876aae75c081e4f27b26e8c190be890c1c029aa67fc462b5f00071c2"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x110, 0x80, [@prep={0x83, 0x25, {{0x0, 0x1}, 0xa, 0x3, @broadcast, 0x2, @value, 0x5, 0x8, @device_b, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @channel_switch={0x25, 0x3, {0x1, 0xbd, 0x4}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @challenge={0x10, 0x1, 0x93}, @mesh_chsw={0x76, 0x6, {0x9, 0x10, 0xe, 0x9}}, @random={0x2, 0xca, "e9d44594605ca2a3fb99001c028505fdd39db7cdc008b80e16fff6e121a1394c4438394ef6447ee842dae5d1608a6fd98658888754b816795172c24605e332e7d5f1defd93eef0ddc476972dcf0a7f018d9550245a625c509d1c6501363d7dc19015f933a88c083e15db4b2cb820ce5814a345ba427181c6fd2b9b5320aab07facdece231ff29928191578fbe1a11a2d112715d7d91cb6c70c39a8a0d4d1cfbbabd2b22a1da56fa43b50170aded8757f4528e4796928bfaa2fcec53c6d9c52fe890bde758f053f5d3384"}]}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x18}]}, 0xa2c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000002240)=ANY=[@ANYBLOB="18000000000000000000000000000000711830000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1}}) 786.94337ms ago: executing program 7 (id=2392): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000700)=ANY=[@ANYBLOB="66696c746572001000000000000000000000000000000000000000000000000004000000e3c004fe08092d12e251bf76421907"], &(0x7f00000000c0)=0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@generic='-']}, 0x18}}, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) timerfd_create(0x2, 0x80000) epoll_create1(0x80000) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r6, 0x2000, 0x0) 783.46455ms ago: executing program 0 (id=2393): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)={0x2c, 0x10, 0x1, 0x4, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="debbbe9d"]}]}]}, 0x2c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x68}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="632575d3b5b7e440049f6fc2a7209a76de24be8bf23142041713cd4742b11e5904f6f0888d92669bcee91bf04f63909d934dd55b40a435909a6278331f0eff8352a1e2ede86867b6e0e823d03075b8de2324ed262a42d88dbe5cb373732a11c1f36072f6ae10ea2d692269db27f5c3f7c5806285cee2282d2ffe713dc290b570724b786236620dc8"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={&(0x7f0000000700), 0x0, 0x0, 0x0, 0x5, r3}, 0x38) (async, rerun: 32) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="ddaa000000000000711015000000000095000000000000008ce45e4f836014a750ecd4707cadfdcdb600be6b2048a340a7a1764be794efd057d181514337802250a54c676bf931466a80e8ee100f3f553f4a254c20ebaec994f014bf2c2dc46cde4f42a1f20897"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) (rerun: 32) ioctl$XFS_IOC_INUMBERS(r4, 0x80405880, &(0x7f0000000880)={{0xb, 0x7, 0x0, 0x6, 0x5}, [{0x8, 0x8, 0x40, 0x4}]}) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x598, 0x0, 0xa, 0x148, 0x0, 0x60, 0x500, 0x2a8, 0x2a8, 0x500, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x3f8, 0x468, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit3={{0x158}, {'pimreg1\x00', {0x40, 0x4c9ca538, 0x0, 0xfffffff8, 0xfffffffa, 0x1ff, 0x0, 0x6, 0x0, 0x8}, {0x5}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00', {0x101}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x4, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x62, 0x8}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5f8) 748.766121ms ago: executing program 0 (id=2394): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000800, &(0x7f0000000000)={[{@usrquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1}}]}, 0x1, 0x781, &(0x7f0000000800)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') fcntl$setstatus(r0, 0x4, 0x400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r1, 0xfffffffffffffff8, 0x1) 400.57804ms ago: executing program 0 (id=2395): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f0000000cc0)) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x16, 0x5}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000000)='./bus\x00') r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r4, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000000380)=ANY=[@ANYRES8=r4], 0x6, 0x2d5, &(0x7f0000000680)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) getdents64(r5, &(0x7f0000000680)=""/231, 0xe7) 369.196071ms ago: executing program 3 (id=2396): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x40015) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x78) splice(r0, 0x0, r2, 0x0, 0x39000, 0x10000000) 286.692793ms ago: executing program 3 (id=2397): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f00000011c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x40, 0x7a, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x7, 0x68, 0x3}}}}}]}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x200, 0x6, 0xff, 0x3, 0x20, 0x3}, 0xc2, &(0x7f0000001300)={0x5, 0xf, 0xc2, 0x3, [@generic={0xa6, 0x10, 0xb, "52b4983623fc276969f44f80f306bda960afcef6e8bc4de68484b735c006b524baaeb75e8a01e1b29a678f45867d9cb49fb393b1792bea1bc5a11a98f7a23c2513b8b4d0af03bb02434813a3a197d905685bbc66d5c6454a384b4c37221136f2e7a1f59c8af9ca3af6fa3fe77cad33fc50a1a7c56903f598161e8c72f92ec5ce2378c4a31432b47a84ee2262659a44a820f384f715348dd8775de9099efaf1d8c078a6"}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "9609888335061da5fb752050f1c4e054"}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x3009}}, {0xf5, &(0x7f00000014c0)=@string={0xf5, 0x3, "43d37423fe448a808ca92112a4408a658ec6569d21746348c380210fc35a385ecc29627f2abab23b73f33d72138e1ea787d122095306f945273e0345351a78ecf50439e2d671979c64ef4129944e017992a349dba6d36498d9708c25509c515bef32d961db92971c37924e444fe0f92b33d996f0bc09210ede1f60d8be80b97302a47f6d5092e28633744f67bf9f5d280e0fdbd371cde8c829c3d0dd58cb7e14256d8ffc9d40c1c3718af5fa0b7f2673974dccbd5c1942578ce91934e32043052c59e4e787128a6dc779851a3ff1bb269e400c0ffcaebb46e4790226882b8d0d123422113505a73084a8b47ea1271252c42665"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x42c}}, {0x51, &(0x7f0000001600)=@string={0x51, 0x3, "1dbe10bb933e2b746573b9a804fb3e8f79c8529cf960adef4097ea60207d8771d35d634371b3e759bd8bd65d0be9fb24e1cfbb7416f7fc363503c888cd17927fe5c7ea253e932d9418d532372fcdf4"}}, {0xf9, &(0x7f0000001680)=@string={0xf9, 0x3, "c38915543775d6222b578c1bcd03116ee034c616bdd258c8f6f31bfc39681b084833fb09c256b72b5d8b0ac63878d30714490291384ceeae5d54e97e7758c5b63cb6904cb94cef28c4cf5bc55c0689bdded2bc2d1ace4dae7b059e5e81a3cfd424ed879f21735dd8193a80881bdb124be07e3787035e1c2d04b12c865d6919e40db5978acd8db0108c29bbd7cbc08efafc73e4c2f4057e2fc639489a6180f4b429bf9b2fd0e1277fe89bfa4f5a0ea266ce2b7e9e6e4a245cb4016d62bcebe1888037525e29e0f8a8ca6660d8d422e94621f075e27d190f48492a1b8162ac1edbeafcfa24fd8c3802d47b7f04ad6505c292bcf3725786f4"}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x10000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000001240)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x0, 0x80, 0x8, "", [{{0x9, 0x4, 0x0, 0xc, 0x3, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7f, 0xbd, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x75, 0x8, 0x2}, @country_functional={0xe, 0x24, 0x7, 0xff, 0x4, [0xc, 0x6, 0x0, 0x7]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0xf, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x6, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x110, 0x0, 0xa, 0xa, 0x40, 0xec}, 0x94, &(0x7f0000001840)={0x5, 0xf, 0x94, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xff, 0x3, 0x49}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "7ba97585aa24b10dbe170c30f0fff059"}, @generic={0x67, 0x10, 0x3, "97babfe8a5b91d08412088ae675e9dbe416688de74ea60515d8b075e9b63f21ebc35cdefc8db59d5791edc3109427473846438273053f28756c9f23e2ebfa58590dbd1ef41aa3ec0164950e2aa01c50129c6cfd211251f8997ae3c8a9b5b9bd8cc4354ab"}]}, 0x2, [{0x86, &(0x7f0000001900)=@string={0x86, 0x3, "71386521d050198557fa7c36fcd43d3ded5bb14720112838efbd1f801a81cd527b0793176b7b00e6a77ee223db8c6d5e693adf9336a791594ab76db62883290900884fd1837c021d877bc5fda0f9d85a9556cba3efa4f062856cfed4ad4f1c6459d65e8173a6678f73bc1e3e25ead64b79e8872e2745086e6a903da41792c08a3715175a"}}, {0x33, &(0x7f00000019c0)=@string={0x33, 0x3, "e2d78b9529d90d6668f702aaa69a2638b1df74277e9eb96cb8780185d96a9f954a20e446ac1a39e2564d3c22bdb6763621"}}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbf8, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x4f, 0x1, {0x9, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r5 = syz_usb_connect(0x3, 0xc0f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0xb1, 0xf2, 0x24, 0xff, 0xbb4, 0xa67, 0xb497, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbfd, 0x4, 0x8, 0x5, 0x0, 0x1, "", [{{0x9, 0x4, 0xbf, 0x0, 0x5, 0x6, 0x43, 0x3, 0x1, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "ab"}, {0x5, 0x24, 0x0, 0xff81}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0x8001, 0x4}, [@obex={0x5, 0x24, 0x15, 0x3}, @acm={0x4, 0x24, 0x2, 0xa}, @obex={0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0xb, 0x1}]}, @hid_hid={0x9, 0x21, 0x101, 0x46, 0x1, {0x22, 0x557}}], [{{0x9, 0x5, 0x9, 0x2, 0xb16d17697bf90161, 0x4, 0x4, 0x9, [@generic={0xee, 0x2b6a196d6ffc83ff, "012074eecb9f7606fbf606b29e91e74317f8ba02a02c2b04f36f3e4f926d0a9d306e7080a21ef487da35d84746ce5e73a2cd6e80c542ee9a09f7e0d87e17c13e1ce6b41c38ebb1c64fe58b7ccb906e13c4a298c313bd5b9d15b7de2c7cb40247a0501117ad1adb7b46738bf4679b7479f98eebbd00df1fec72e9368c0e0834d5d40820df3f50ccb85e0f1dab0eadf90db87b07ad7a86c302fabf7eacafed440320336f6233b82e6ba5026ad6e8d1a3dd6d3a2a8f5141bc43aa5bc1ac82b60bf446594b3472068788bbfce3662ea544fc74f26711459c4b87bc8aa412fffbd625c680c7c7c543494508ec45cf"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x4, 0x80, 0xf, [@generic={0xc0, 0x31, "ee74629f46512cfc537f4b4fa77656eac7547a4aa38a1ce8db6c9c6fa54ca1e8e3046bff2cef47bd6d0ab770c00692237f0e2770ad769c5ce06d9714887aa99a212bcc5409b6428ce59d6b5d38fa7ced3e638e0463eb05cd9d32b367b8bbbe9a5d77f4d2fc20d751892953cf80fd8d35cd00bfc6f9ea4a7836e4ad8d82558264c64c174c9d6cdf890491f854065026563aa7100ef2c69fd39d3a72b164d3561238331838f1a6489f4b39536cb2c5f3882c924c84bf1e9a248a6a19286007"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x4, 0x9, 0x5, [@generic={0x36, 0x7, "b0acfbca7d2af8786beda07cb881a65b154bc09c1a4b72fe1580abbb411179af97be866ab7d37b218b7821698d04f645e22d3280"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x2}]}}, {{0x9, 0x5, 0x8, 0x4, 0x200, 0xbc, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x6}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x7, 0xc, 0x1, [@generic={0x22, 0xb, "deba29675eea01e579341cd14952c8e3dc0c80a32c9d540c1261ee3c0d18d38d"}, @generic={0x31, 0x781daf0e10b816b0, "1fcc404f9d85c42880d36620412e37f6544cd2b16572631e5a8cf3f46e2caa4a58792cc09d09c4132dc4ab128e06e0"}]}}]}}, {{0x9, 0x4, 0x14, 0xe0, 0x2, 0xfb, 0x5d, 0x54, 0x3, [@hid_hid={0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0x548}}, @uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x7, 0x8, 0x1, 0x9}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x1, 0x5, 0x8, "67cfebcc0f76573843"}]}], [{{0x9, 0x5, 0x0, 0x4, 0x200, 0x5, 0x4, 0xfd, [@generic={0x8e, 0x4, "7019f3c724bc11ed4dd9d0f04782e04ec6c3d7c656ab8e5764a2d97e58a32796269e3b35eb2ae9180185d6686a20a49217a5531e86b37b1709d4f6ff896022ce3efd15a6d2991e98654197fa8c068e4e2c9f9c1d3778c7c2ab71d8160adb8adaac14799724a0abb7aa6b82067652d9077f66312a1845d66b2a53d938cdaefb9186e92010b19aa335171ffe35"}, @generic={0xda, 0x5, "7796c82d922c613809c765fb4c041501783b150da7d08710ad03d5c128be4da181ec10cc99fce572aafaf03b6f3495aab1f101388de5f2a69e3a7ed57a9aa1250a1efe122a7ac3584b23a4c691afcba2aca6a9604757baaff20fbae94be05f30067cb36fb3837b62b1658109587a7284b9d973c5e43664c961c2e028fe52462548122c9227168f0673347812afd99cd7d6630170dad42aee3d81c8324bbcbd2d3b492e1d4d2229803b81a4b080ff217c6470f919945e3059b487e1c76066dc808bc392781d06e1a284f005feaba952bd90a501fdfeba242e"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x3, 0x9, 0x7, [@generic={0x53, 0x22, "cddad9b203ecbd1a4762b4730a48b33d0627d1367db56ba40752417e810449170281102d95d5df5c573cdec6db5c7fb53b338cdca82d74e17ff944473debd6bb8e443348c36e5c048f3e6e31f04a62b839"}, @generic={0xfc, 0x9, "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"}]}}]}}, {{0x9, 0x4, 0x8, 0x4, 0x6, 0x2, 0x6, 0x0, 0x40, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "1692a61d63e9"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x7, 0x6c4, 0xfe}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x9, 0x6, 0x9}, @acm={0x4, 0x24, 0x2, 0xa}, @mdlm={0x15, 0x24, 0x12, 0xe5}, @mdlm_detail={0x96, 0x24, 0x13, 0x9, "bb73a5eb2c9b49a7b1209468cab272d48202d502071c8f7316d96b05b829160f3fa427797613692fd7f5e2f46a5d9e78eda55e5a460c6a8ed73bc9c576fe9af59901801353090e3fe659d42e4600606df8013704af361b9e7ed64419c966019b316fa7700b472f847487699c34f016d5ae13f9807f13f77a2c0a9e58f3417bb3cea6ebafe1d26ba76ea8d759fd2318a7bb61"}]}], [{{0x9, 0x5, 0xe, 0x8, 0x40, 0x6, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}]}}, {{0x9, 0x5, 0xf, 0x3, 0xbe9642f5c2076a6e, 0x7, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x38ec}]}}, {{0x9, 0x5, 0x84, 0x0, 0x400, 0x62, 0x81, 0xb3, [@generic={0x26, 0x6, "6fa94aa784ad8e8ccf01b8ba28eb9acb1539cdc3009ded73aac616a9446023b1843f57cb"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x11, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xa3b}, @generic={0xc0, 0x2, "521cb25615bb9b1abd43ada7f745b2d4556a3607b104e7be7f339aae063b0ef7e1ee7f215ac33ae7c1693241178331fc980f3f24427c965ae7ac3df9a5b226fe9f236d15238e07e643857675cf3a78060a47e69e4942b6670bd914c634161a70ee1d2d5656735286db4601f4c672484c5f15ea268eb557ea13a1b10ef8efac18524b6198ed9054cf6a8d2d38ed4a584cd1031e646c83ed7e456703a684630fc4eacd9920eb91bc54f406363c2d1dc589ac1a82901c97b0c03da63ec98fb1"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x1, 0x7, 0x19, [@generic={0xa9, 0xb, "11bfe6d566bfe7f7a3fd15bb16d6cf04b956e8f05f111c87f58ac9af542de799e2c9b919c5ac29c2f8c612b49d4450fa274af8577629941bf4485cde12e431aa9a84ff6eb2a0182e27a4a5f635bf827e4b8bb3117098e9fabaeab2550ffd5d0737683266be306501d25c1ecb105994a6777d6b393b35c348255a373e2b7c222833d916b500f7f9823542447eac700f401066198ed48ef8c9af6706f773912d33fafad898248508"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x9, 0x9, 0x5, [@generic={0xef, 0x2, "082dd9a3ef4dbce4f8f500d15d0451c592f2d25f778ba9286ab8833178159c03a74cfef3541f34b2842b7893b54fb6b4d33063821668b8efd0fab552391a67db2cc540fa7804469f4bb5d71e790fe33ec92af4e499d0a1a7ca92b675ba61e8183b4eeeabf9a81f2db5b088f2e97ee9986f9dbc489c3c6c49690a815efa0b6a6f69ba47d289ebd845d3af16061c9dcdcf514dee4496e5fdde4c4d40532f197d5cd351656d16614a5293eaf67fa818c07eeb2236b2acb158ce9327d455f307f5cc517cf0ffd28d5e3a8a1a9cbf772d1de4487f8ca452fdc032c0dcc9bb5061fcf07f8929702a3c731f3d552f7f6c"}]}}]}}, {{0x9, 0x4, 0xea, 0xfa, 0xb, 0xb2, 0x81, 0x9d, 0x0, [@hid_hid={0x9, 0x21, 0x664, 0xf5, 0x1, {0x22, 0x72e}}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0x40, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xbe, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0xf6a7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x5ff, 0x5, 0xa0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x4}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x3, 0x3, 0x5b, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xd1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xd, 0x5}]}}, {{0x9, 0x5, 0x6, 0x12, 0x400, 0x40, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}, {{0x9, 0x5, 0xb, 0xf, 0x40, 0x4, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfb, 0xab}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x0, 0xfd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x4}]}}, {{0x9, 0x5, 0x2, 0x0, 0x608, 0x0, 0xf9, 0x1a, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2f, 0x400}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0x6, 0xff, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x401}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x5, 0xad, 0x4, [@generic={0x62, 0xc, "eeb245a24ff671eac468a7b88f69ecfa76fb79cc4a6b2b90983cc627e3c5e1544bd434706aca4aa14d4c8b966670c1a5c6d8c5a3975a12cea9b5dd3f0cdccf3fc8b2458405c6bef0da4bf17d09792c6b01a727be3ae68d84e78455458383c5d2"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x40, 0x8, 0xa, [@generic={0xad, 0xe, "c9150b7f3821aff7e6380066e9d6b48b07e5cc67c0dc41594bf94b6a18c6d4e61d6c685302684bfdfdde72e21dba69bafbd6795d75e5cd06a31c33f9083163c5a9de4a5c680db24165e58d54c33a5f4bd5b2ecfa9b5ed299bba185b841cd207dbd4296ee9df88c35860c2430054a821fe15fc8707b73467ef8029712c62190279bbbce8d12f087643f246f053fd84ef2b867593a17130c19b114590cd5a4b7870059c9625b164566f3e87e"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x5}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x4, 0xb, 0x1, [@generic={0x37, 0x23, "59b455d4729d61e50290db77d4da0e6846605674fce564b87f42e8d173b7b0bd7dcd726e8413a1d8fefc444d3f02779945852f4ee4"}, @generic={0x8c, 0x10, "4d4ce77c67bac41fd58a90ad8dfc16741e9d9b7500755283b64dd1ae2b15a6916507194fa00701fc768727dda4748daecb6b99a18017b47a8cac28caeed644972844b206b5670dac751e6468ab20a5e69e8853c0afb5bf7865ca249353ab78daf316f71b377dcfa438a0220550116d1af6ee28bff37b16dca739e607dc82df5968033f8b6a9a7fb63d2d"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000d00)={0xa, 0x6, 0x110, 0xdd, 0x0, 0x5, 0x8f, 0xff}, 0x8, &(0x7f0000000d40)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x1d, &(0x7f0000000d80)=@string={0x1d, 0x3, "9d2ef922c8b8bf3cb52f5a3d7ad0c03f4686b1040bd94f41355d76"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_control_io$printer(r5, &(0x7f0000000f40)={0x14, &(0x7f0000000e40)={0x20, 0xf, 0xa9, {0xa9, 0xe, "7a4aafdc02247ab94e8ea425f4aaad5a721403d380993af16a50db021966df2a837c7f086404955b8623e27e02b5d54bda223d816c4bd630b5e3af1ca67d90972c61ec9dce2bd029aa9cdc6af3149141852445ed7af1dfeaf26b86849cdde5ce1d26fc9ea876b866f814d5a038cb7bb2fd97eb1e18113729e730f05740c0bbf2954f148fc3453ff55702c6cae655682a27dd0fc4bec1e48878d8da1261203df343b22f12a16614"}}, &(0x7f0000000f00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}}, &(0x7f0000001180)={0x34, &(0x7f0000000f80)={0x40, 0x8, 0x65, "f8132375f627662dfe65e72e3e3a739f3d85d83444ce0e72d5fae82cd8dc7cdc8b8a08a198669054390d1eb224340c1a56e0b4ddc09b73ad9625f73c2958a7e3f4039b37a4e8c1d0c57e6bb59bc1328378720b1fabfbbb91340a7378b5661302e37898920c"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001080)={0x20, 0x0, 0x51, {0x4f, "97a9c564517c1cb453d8539651021557ae49d7678ac16ec36f763a13fe002b1d8f558b5997eb1b77b7a51256a18ac89f21ef13215b62988f7a5ff3e0d907522ab67c483ca32f0e7dd2b5981cd69dae"}}, &(0x7f0000001100)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000001140)={0x20, 0x0, 0x1, 0x48}}) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 271.958813ms ago: executing program 0 (id=2398): r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x7, 0x0, {0x9, 0x21, 0x8, 0xc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xb, 0xfe}}}}}]}}]}}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1000815, &(0x7f0000000000)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x453, &(0x7f0000000640)="$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") pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xffeff00c}, {0x6}]}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000008000000010000000000000b00000000005f00512e2e4f"], 0x0, 0x2c, 0x0, 0x1, 0x3ff}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb01001800000000000000070000000c0000000800000009000000000000090300000000300051715f"], 0x0, 0x2c, 0x0, 0x1, 0x3ff}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRESHEX, @ANYBLOB='C'], 0x48) close(r5) (async) socket$key(0xf, 0x3, 0x2) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x8) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000e40)={&(0x7f0000000080), 0xc, &(0x7f0000000e00)={&(0x7f0000000ac0)={0x320, r6, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5ea0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcdf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48fc}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x564}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffff000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x71}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x86}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}]}, @TIPC_NLA_LINK={0x128, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x66}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc85f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x667}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf247}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x88f}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x11}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x4000054}, 0x2000c8d1) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \b)'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) sendto$inet(r1, &(0x7f0000000100)="a47c8e88", 0x4, 0x805, 0x0, 0x0) 0s ago: executing program 1 (id=2399): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x98, 0x30, 0x9, 0x0, 0x0, {}, [{0x84, 0x1, [@m_bpf={0x80, 0x1, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x88, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc010}, 0x4040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8a133f969e0594d70a1b98e61bed565e34f3cd997040fe04a3259c409f0f5e0508f45bd23bf63ba65b20df98c34e561b6e820f83ecf47add09fc8bb", 0xa8, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x28, r7, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xcb, 0x47}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) kernel console output (not intermixed with test programs): generic_file_write_iter+0xa9/0x1d0 [ 442.043925][T16870] vfs_write+0x835/0xfd0 [ 442.048170][T16870] ? file_end_write+0x1b0/0x1b0 [ 442.053022][T16870] ? __fget_files+0x2c4/0x320 [ 442.057710][T16870] ? __fdget_pos+0x1f7/0x380 [ 442.062302][T16870] ? ksys_write+0x71/0x250 [ 442.066804][T16870] ksys_write+0x149/0x250 [ 442.071155][T16870] ? __ia32_sys_read+0x90/0x90 [ 442.076016][T16870] ? debug_smp_processor_id+0x17/0x20 [ 442.081410][T16870] __x64_sys_write+0x7b/0x90 [ 442.086000][T16870] x64_sys_call+0x8ef/0x9a0 [ 442.090517][T16870] do_syscall_64+0x4c/0xa0 [ 442.094960][T16870] ? clear_bhb_loop+0x50/0xa0 [ 442.099647][T16870] ? clear_bhb_loop+0x50/0xa0 [ 442.104325][T16870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.110312][T16870] RIP: 0033:0x7f1a9647560e [ 442.114826][T16870] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 442.134539][T16870] RSP: 002b:00007f1a94f0eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.142961][T16870] RAX: ffffffffffffffda RBX: 00007f1a94f0f6c0 RCX: 00007f1a9647560e [ 442.150951][T16870] RDX: 00000000013bd7ef RSI: 00007f1a8caef000 RDI: 0000000000000005 [ 442.158922][T16870] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 442.166903][T16870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 442.174895][T16870] R13: 00007f1a94f0eee0 R14: 00007f1a94f0eea0 R15: 00007f1a8caef000 [ 442.182967][T16870] [ 442.198208][T16870] memory: usage 307200kB, limit 307200kB, failcnt 4320 [ 442.205584][T16870] memory+swap: usage 327856kB, limit 9007199254740988kB, failcnt 0 [ 442.224001][T16870] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 442.231776][T16870] Memory cgroup stats for /syz0: [ 442.231952][T16870] anon 6352896 [ 442.231952][T16870] file 308129792 [ 442.231952][T16870] kernel_stack 0 [ 442.231952][T16870] pagetables 0 [ 442.231952][T16870] percpu 0 [ 442.231952][T16870] sock 0 [ 442.231952][T16870] shmem 308125696 [ 442.231952][T16870] file_mapped 4096 [ 442.231952][T16870] file_dirty 0 [ 442.231952][T16870] file_writeback 0 [ 442.231952][T16870] swapcached 21307392 [ 442.231952][T16870] anon_thp 0 [ 442.231952][T16870] file_thp 0 [ 442.231952][T16870] shmem_thp 0 [ 442.231952][T16870] inactive_anon 158367744 [ 442.231952][T16870] active_anon 156196864 [ 442.231952][T16870] inactive_file 4096 [ 442.231952][T16870] active_file 4096 [ 442.231952][T16870] unevictable 0 [ 442.231952][T16870] slab_reclaimable 0 [ 442.231952][T16870] slab_unreclaimable 0 [ 442.231952][T16870] slab 0 [ 442.231952][T16870] workingset_refault_anon 11 [ 442.231952][T16870] workingset_refault_file 341 [ 442.231952][T16870] workingset_activate_anon 11 [ 442.327983][T16870] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2115,pid=16869,uid=0 [ 442.330408][T16878] SELinux: Context A) is not valid (left unmapped). [ 442.344426][T16870] Memory cgroup out of memory: Killed process 16869 (syz.0.2115) total-vm:231240kB, anon-rss:1476kB, file-rss:22012kB, shmem-rss:0kB, UID:0 pgtables:172kB oom_score_adj:0 [ 442.413437][T16876] syz.5.2118 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 442.429227][T16876] CPU: 1 PID: 16876 Comm: syz.5.2118 Not tainted syzkaller #0 [ 442.436892][T16876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.446989][T16876] Call Trace: [ 442.450296][T16876] [ 442.453250][T16876] __dump_stack+0x21/0x30 [ 442.457623][T16876] dump_stack_lvl+0x110/0x170 [ 442.462345][T16876] ? show_regs_print_info+0x20/0x20 [ 442.467710][T16876] ? ___ratelimit+0x406/0x590 [ 442.472486][T16876] dump_stack+0x15/0x20 [ 442.476719][T16876] dump_header+0xdd/0x650 [ 442.481092][T16876] oom_kill_process+0x1fa/0x2c0 [ 442.485983][T16876] out_of_memory+0x64f/0x9d0 [ 442.490618][T16876] ? unregister_oom_notifier+0x20/0x20 [ 442.496109][T16876] ? mutex_lock_killable+0x9b/0x1c0 [ 442.501335][T16876] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 442.508219][T16876] ? __kasan_check_read+0x11/0x20 [ 442.513283][T16876] ? psi_group_change+0xa6c/0x10e0 [ 442.518449][T16876] mem_cgroup_out_of_memory+0x2bb/0x3b0 [ 442.524038][T16876] ? css_next_descendant_pre+0x1fe/0x220 [ 442.529704][T16876] ? mem_cgroup_oom_trylock+0x350/0x350 [ 442.535308][T16876] ? mem_cgroup_iter+0x452/0x6a0 [ 442.540291][T16876] try_charge_memcg+0xed4/0x14b0 [ 442.545281][T16876] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 442.551138][T16876] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 442.557013][T16876] ? cgroup_rstat_updated+0xf5/0x360 [ 442.562344][T16876] charge_memcg+0x6d/0x1a0 [ 442.566811][T16876] __mem_cgroup_charge+0x93/0x280 [ 442.571873][T16876] ? mem_cgroup_calculate_protection+0x520/0x520 [ 442.578257][T16876] shmem_add_to_page_cache+0x64b/0xc50 [ 442.583777][T16876] ? put_page+0xb0/0xb0 [ 442.587986][T16876] ? _raw_spin_lock_irqsave+0x130/0x130 [ 442.593576][T16876] ? schedule_preempt_disabled+0x20/0x20 [ 442.599263][T16876] shmem_getpage_gfp+0x116a/0x2310 [ 442.604450][T16876] shmem_fault+0x196/0x520 [ 442.608923][T16876] ? shmem_unused_huge_shrink+0xe60/0xe60 [ 442.614689][T16876] ? filemap_read_page+0x340/0x340 [ 442.619891][T16876] ? finish_fault+0x38a/0x820 [ 442.624622][T16876] __do_fault+0x264/0x2f0 [ 442.628993][T16876] ? handle_pte_fault+0x1870/0x2710 [ 442.634232][T16876] handle_pte_fault+0x187d/0x2710 [ 442.639311][T16876] ? irqentry_exit+0x37/0x40 [ 442.643942][T16876] ? sysvec_apic_timer_interrupt+0x64/0xc0 [ 442.649779][T16876] ? fault_around_bytes_set+0xc0/0xc0 [ 442.655189][T16876] do_handle_mm_fault+0x1af9/0x1de0 [ 442.660420][T16876] ? _raw_spin_unlock+0x4d/0x70 [ 442.665307][T16876] ? follow_page_pte+0x3b7/0x980 [ 442.670284][T16876] ? numa_migrate_prep+0xd0/0xd0 [ 442.675256][T16876] ? follow_page_mask+0x7a6/0xf10 [ 442.680326][T16876] ? vmacache_find+0x1fa/0x490 [ 442.685111][T16876] __get_user_pages+0x80e/0x10c0 [ 442.690056][T16876] ? up_write+0x7b/0x290 [ 442.694364][T16876] ? populate_vma_page_range+0xf0/0xf0 [ 442.699888][T16876] __mm_populate+0x324/0x470 [ 442.704520][T16876] ? check_vma_flags+0x2d0/0x2d0 [ 442.709501][T16876] vm_mmap_pgoff+0x262/0x430 [ 442.714121][T16876] ? account_locked_vm+0x260/0x260 [ 442.719266][T16876] ? __x64_sys_futex+0x100/0x100 [ 442.724243][T16876] ksys_mmap_pgoff+0xf6/0x1d0 [ 442.728957][T16876] ? __kasan_check_write+0x14/0x20 [ 442.734103][T16876] __x64_sys_mmap+0xfa/0x110 [ 442.738728][T16876] x64_sys_call+0x83/0x9a0 [ 442.743188][T16876] do_syscall_64+0x4c/0xa0 [ 442.747638][T16876] ? clear_bhb_loop+0x50/0xa0 [ 442.752360][T16876] ? clear_bhb_loop+0x50/0xa0 [ 442.757066][T16876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.762997][T16876] RIP: 0033:0x7fe92f4e6dd9 [ 442.767449][T16876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.787085][T16876] RSP: 002b:00007fe92df41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 442.795546][T16876] RAX: ffffffffffffffda RBX: 00007fe92f75ffa0 RCX: 00007fe92f4e6dd9 [ 442.803555][T16876] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 442.811566][T16876] RBP: 00007fe92f57cd69 R08: ffffffffffffffff R09: 0000000000000000 [ 442.819577][T16876] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 442.827584][T16876] R13: 00007fe92f760038 R14: 00007fe92f75ffa0 R15: 00007ffcac146968 [ 442.835588][T16876] [ 442.887651][T16876] memory: usage 307200kB, limit 307200kB, failcnt 8752 [ 442.894715][T16876] memory+swap: usage 375984kB, limit 9007199254740988kB, failcnt 0 [ 442.902760][T16876] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 442.909730][T16876] Memory cgroup stats for /syz5: [ 442.909896][T16876] anon 2686976 [ 442.909896][T16876] file 311635968 [ 442.909896][T16876] kernel_stack 0 [ 442.909896][T16876] pagetables 0 [ 442.909896][T16876] percpu 0 [ 442.909896][T16876] sock 0 [ 442.909896][T16876] shmem 311635968 [ 442.909896][T16876] file_mapped 4919296 [ 442.909896][T16876] file_dirty 0 [ 442.909896][T16876] file_writeback 0 [ 442.909896][T16876] swapcached 70828032 [ 442.909896][T16876] anon_thp 0 [ 442.909896][T16876] file_thp 0 [ 442.909896][T16876] shmem_thp 0 [ 442.909896][T16876] inactive_anon 160837632 [ 442.909896][T16876] active_anon 153735168 [ 442.909896][T16876] inactive_file 0 [ 442.909896][T16876] active_file 0 [ 442.909896][T16876] unevictable 0 [ 442.909896][T16876] slab_reclaimable 0 [ 442.909896][T16876] slab_unreclaimable 0 [ 442.909896][T16876] slab 0 [ 442.909896][T16876] workingset_refault_anon 3 [ 442.909896][T16876] workingset_refault_file 2313 [ 442.909896][T16876] workingset_activate_anon 3 [ 443.019663][ T20] usb 7-1: USB disconnect, device number 12 [ 443.067718][T16897] xt_TPROXY: Can be used only with -p tcp or -p udp [ 443.075270][T16897] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2122'. [ 443.160172][T16899] xt_TPROXY: Can be used only with -p tcp or -p udp [ 443.167646][T16899] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2121'. [ 443.354242][T16876] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2118,pid=16875,uid=0 [ 443.414219][T16876] Memory cgroup out of memory: Killed process 16875 (syz.5.2118) total-vm:94024kB, anon-rss:1372kB, file-rss:22008kB, shmem-rss:4748kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 443.517952][T16894] syz.0.2123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 443.527689][T16894] CPU: 0 PID: 16894 Comm: syz.0.2123 Not tainted syzkaller #0 [ 443.535179][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 443.545799][T16894] Call Trace: [ 443.549116][T16894] [ 443.552089][T16894] __dump_stack+0x21/0x30 [ 443.556472][T16894] dump_stack_lvl+0x110/0x170 [ 443.561278][T16894] ? show_regs_print_info+0x20/0x20 [ 443.566519][T16894] ? ___ratelimit+0x406/0x590 [ 443.571239][T16894] dump_stack+0x15/0x20 [ 443.575515][T16894] dump_header+0xdd/0x650 [ 443.579880][T16894] oom_kill_process+0x1fa/0x2c0 [ 443.584775][T16894] out_of_memory+0x64f/0x9d0 [ 443.589425][T16894] ? unregister_oom_notifier+0x20/0x20 [ 443.595053][T16894] ? mutex_lock_killable+0x9b/0x1c0 [ 443.600481][T16894] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 443.607022][T16894] ? __kasan_check_read+0x11/0x20 [ 443.612088][T16894] ? psi_group_change+0xa6c/0x10e0 [ 443.617253][T16894] mem_cgroup_out_of_memory+0x2bb/0x3b0 [ 443.622862][T16894] ? css_next_descendant_pre+0x1fe/0x220 [ 443.628556][T16894] ? mem_cgroup_oom_trylock+0x350/0x350 [ 443.634151][T16894] ? mem_cgroup_iter+0x452/0x6a0 [ 443.639222][T16894] try_charge_memcg+0xed4/0x14b0 [ 443.644246][T16894] ? __vm_enough_memory+0x11b/0x2d0 [ 443.649487][T16894] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 443.655348][T16894] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 443.661213][T16894] ? cgroup_rstat_updated+0xf5/0x360 [ 443.666548][T16894] charge_memcg+0x6d/0x1a0 [ 443.671007][T16894] __mem_cgroup_charge+0x93/0x280 [ 443.676070][T16894] ? mem_cgroup_calculate_protection+0x520/0x520 [ 443.682437][T16894] shmem_add_to_page_cache+0x64b/0xc50 [ 443.687938][T16894] ? put_page+0xb0/0xb0 [ 443.692134][T16894] ? _raw_spin_lock_irq+0x95/0xf0 [ 443.697194][T16894] ? _raw_spin_lock_irqsave+0x130/0x130 [ 443.702793][T16894] shmem_getpage_gfp+0x116a/0x2310 [ 443.707970][T16894] ? __kasan_check_write+0x14/0x20 [ 443.713294][T16894] shmem_write_begin+0xce/0x1b0 [ 443.718193][T16894] generic_perform_write+0x2b7/0x690 [ 443.723525][T16894] ? grab_cache_page_write_begin+0xb0/0xb0 [ 443.729390][T16894] ? file_remove_privs+0x5c0/0x5c0 [ 443.734554][T16894] ? rwsem_write_trylock+0x136/0x300 [ 443.739890][T16894] ? clear_nonspinnable+0x60/0x60 [ 443.745121][T16894] __generic_file_write_iter+0x268/0x480 [ 443.750787][T16894] generic_file_write_iter+0xa9/0x1d0 [ 443.756187][T16894] vfs_write+0x835/0xfd0 [ 443.760468][T16894] ? file_end_write+0x1b0/0x1b0 [ 443.765356][T16894] ? __fget_files+0x2c4/0x320 [ 443.770173][T16894] ? __fdget_pos+0x1f7/0x380 [ 443.774785][T16894] ? ksys_write+0x71/0x250 [ 443.779247][T16894] ksys_write+0x149/0x250 [ 443.783605][T16894] ? __ia32_sys_read+0x90/0x90 [ 443.788397][T16894] ? debug_smp_processor_id+0x17/0x20 [ 443.793798][T16894] __x64_sys_write+0x7b/0x90 [ 443.798439][T16894] x64_sys_call+0x8ef/0x9a0 [ 443.802978][T16894] do_syscall_64+0x4c/0xa0 [ 443.807428][T16894] ? clear_bhb_loop+0x50/0xa0 [ 443.812136][T16894] ? clear_bhb_loop+0x50/0xa0 [ 443.816840][T16894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 443.822763][T16894] RIP: 0033:0x7f1a9647560e [ 443.827312][T16894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 443.847041][T16894] RSP: 002b:00007f1a94f0eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 443.855498][T16894] RAX: ffffffffffffffda RBX: 00007f1a94f0f6c0 RCX: 00007f1a9647560e [ 443.863518][T16894] RDX: 0000000004000000 RSI: 00007f1a8caef000 RDI: 0000000000000003 [ 443.871523][T16894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 443.879538][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 443.887567][T16894] R13: 00007f1a94f0eee0 R14: 00007f1a94f0eea0 R15: 00007f1a8caef000 [ 443.895608][T16894] [ 443.914054][T16902] loop5: detected capacity change from 0 to 512 [ 443.954071][T16894] memory: usage 307200kB, limit 307200kB, failcnt 4533 [ 443.962776][T16902] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2125: iget: bad i_size value: 38620345925642 [ 443.963754][T16894] memory+swap: usage 327856kB, limit 9007199254740988kB, failcnt 0 [ 443.977898][T16902] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2125: couldn't read orphan inode 15 (err -117) [ 443.995382][ T20] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 444.003370][T16902] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 444.019341][T16894] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 444.042844][T16911] loop8: detected capacity change from 0 to 256 [ 444.046368][T16894] Memory cgroup stats for /syz0: [ 444.049445][T16894] anon 6266880 [ 444.049445][T16894] file 308215808 [ 444.049445][T16894] kernel_stack 0 [ 444.049445][T16894] pagetables 0 [ 444.049445][T16894] percpu 0 [ 444.049445][T16894] sock 0 [ 444.049445][T16894] shmem 308215808 [ 444.049445][T16894] file_mapped 0 [ 444.049445][T16894] file_dirty 0 [ 444.049445][T16894] file_writeback 0 [ 444.049445][T16894] swapcached 21307392 [ 444.049445][T16894] anon_thp 0 [ 444.049445][T16894] file_thp 0 [ 444.049445][T16894] shmem_thp 0 [ 444.049445][T16894] inactive_anon 158371840 [ 444.049445][T16894] active_anon 156196864 [ 444.049445][T16894] inactive_file 4096 [ 444.049445][T16894] active_file 0 [ 444.049445][T16894] unevictable 0 [ 444.049445][T16894] slab_reclaimable 0 [ 444.049445][T16894] slab_unreclaimable 0 [ 444.049445][T16894] slab 0 [ 444.049445][T16894] workingset_refault_anon 11 [ 444.049445][T16894] workingset_refault_file 373 [ 444.049445][T16894] workingset_activate_anon 11 [ 444.154465][ T30] audit: type=1400 audit(1777724447.233:2634): avc: denied { create } for pid=16901 comm="syz.5.2125" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 444.180519][T16894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1741,pid=13766,uid=0 [ 444.199334][T16912] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2125: bg 0: block 5: invalid block bitmap [ 444.206761][ T30] audit: type=1400 audit(1777724447.270:2635): avc: denied { setattr } for pid=16901 comm="syz.5.2125" name="file1" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 444.235231][T16894] Memory cgroup out of memory: Killed process 13766 (syz.0.1741) total-vm:94156kB, anon-rss:3012kB, file-rss:20480kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:0 [ 444.253226][ T4363] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1184 with error 28 [ 444.263651][ T30] audit: type=1400 audit(1777724447.270:2636): avc: denied { mounton } for pid=16901 comm="syz.5.2125" path="/358/bus/file0" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 444.267251][T16912] overlayfs: failed to set xattr on upper [ 444.303349][ T4363] EXT4-fs (loop5): This should not happen!! Data will be lost [ 444.303349][ T4363] [ 444.313041][ T4363] EXT4-fs (loop5): Total free blocks count 0 [ 444.315521][ T30] audit: type=1400 audit(1777724447.270:2637): avc: denied { write } for pid=16901 comm="syz.5.2125" name="bus" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 444.335445][ T4363] EXT4-fs (loop5): Free/Dirty block details [ 444.357428][T16894] syz.0.2123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 444.367209][ T30] audit: type=1400 audit(1777724447.270:2638): avc: denied { add_name } for pid=16901 comm="syz.5.2125" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 444.367522][ T4363] EXT4-fs (loop5): free_blocks=0 [ 444.401148][T16894] CPU: 0 PID: 16894 Comm: syz.0.2123 Not tainted syzkaller #0 [ 444.408699][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 444.418881][T16894] Call Trace: [ 444.420997][ T4363] EXT4-fs (loop5): dirty_blocks=1184 [ 444.422185][T16894] [ 444.427485][ T4363] EXT4-fs (loop5): Block reservation details [ 444.430427][T16894] __dump_stack+0x21/0x30 [ 444.440754][T16894] dump_stack_lvl+0x110/0x170 [ 444.445478][T16894] ? show_regs_print_info+0x20/0x20 [ 444.450712][T16894] ? ___ratelimit+0x406/0x590 [ 444.453037][ T4363] EXT4-fs (loop5): i_reserved_data_blocks=1184 [ 444.455442][T16894] dump_stack+0x15/0x20 [ 444.465880][T16894] dump_header+0xdd/0x650 [ 444.470260][T16894] oom_kill_process+0x1fa/0x2c0 [ 444.475148][T16894] out_of_memory+0x64f/0x9d0 [ 444.479770][T16894] ? unregister_oom_notifier+0x20/0x20 [ 444.485257][T16894] ? mutex_lock_killable+0x9b/0x1c0 [ 444.490488][T16894] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 444.491086][ T30] audit: type=1400 audit(1777724447.270:2639): avc: denied { setattr } for pid=16901 comm="syz.5.2125" name="work" dev="loop5" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 444.497024][T16894] ? __kasan_check_read+0x11/0x20 [ 444.497048][T16894] ? psi_group_change+0xa6c/0x10e0 [ 444.497072][T16894] mem_cgroup_out_of_memory+0x2bb/0x3b0 [ 444.497094][T16894] ? css_next_descendant_pre+0x1fe/0x220 [ 444.540339][T16894] ? mem_cgroup_oom_trylock+0x350/0x350 [ 444.546034][T16894] ? mem_cgroup_iter+0x452/0x6a0 [ 444.551028][T16894] try_charge_memcg+0xed4/0x14b0 [ 444.556007][T16894] ? __vm_enough_memory+0x11b/0x2d0 [ 444.561244][T16894] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 444.563116][ T30] audit: type=1400 audit(1777724447.270:2640): avc: denied { remove_name } for pid=16901 comm="syz.5.2125" name="#5" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 444.567089][T16894] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 444.567120][T16894] charge_memcg+0x6d/0x1a0 [ 444.590252][ T30] audit: type=1400 audit(1777724447.270:2641): avc: denied { rename } for pid=16901 comm="syz.5.2125" name="#5" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 444.594990][T16894] __mem_cgroup_charge+0x93/0x280 [ 444.595022][T16894] ? mem_cgroup_calculate_protection+0x520/0x520 [ 444.595047][T16894] shmem_add_to_page_cache+0x64b/0xc50 [ 444.622326][ T30] audit: type=1400 audit(1777724447.270:2642): avc: denied { unlink } for pid=16901 comm="syz.5.2125" name="#5" dev="loop5" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 444.626411][T16894] ? put_page+0xb0/0xb0 [ 444.626442][T16894] ? _raw_spin_lock_irq+0x95/0xf0 [ 444.633125][ T30] audit: type=1400 audit(1777724447.270:2643): avc: denied { unlink } for pid=16901 comm="syz.5.2125" name="#6" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 444.638302][T16894] ? _raw_spin_lock_irqsave+0x130/0x130 [ 444.638330][T16894] ? preempt_schedule_thunk+0x16/0x18 [ 444.702371][T16894] shmem_getpage_gfp+0x116a/0x2310 [ 444.707560][T16894] ? __kasan_check_write+0x14/0x20 [ 444.712725][T16894] shmem_write_begin+0xce/0x1b0 [ 444.717621][T16894] generic_perform_write+0x2b7/0x690 [ 444.723072][T16894] ? grab_cache_page_write_begin+0xb0/0xb0 [ 444.728929][T16894] ? file_remove_privs+0x5c0/0x5c0 [ 444.734202][T16894] ? rwsem_write_trylock+0x136/0x300 [ 444.739528][T16894] ? clear_nonspinnable+0x60/0x60 [ 444.744678][T16894] __generic_file_write_iter+0x268/0x480 [ 444.750354][T16894] generic_file_write_iter+0xa9/0x1d0 [ 444.755776][T16894] vfs_write+0x835/0xfd0 [ 444.760054][T16894] ? file_end_write+0x1b0/0x1b0 [ 444.764941][T16894] ? __fget_files+0x2c4/0x320 [ 444.769669][T16894] ? __fdget_pos+0x1f7/0x380 [ 444.774291][T16894] ? ksys_write+0x71/0x250 [ 444.778743][T16894] ksys_write+0x149/0x250 [ 444.783106][T16894] ? __ia32_sys_read+0x90/0x90 [ 444.787900][T16894] ? debug_smp_processor_id+0x17/0x20 [ 444.793314][T16894] __x64_sys_write+0x7b/0x90 [ 444.798111][T16894] x64_sys_call+0x8ef/0x9a0 [ 444.802646][T16894] do_syscall_64+0x4c/0xa0 [ 444.807103][T16894] ? clear_bhb_loop+0x50/0xa0 [ 444.811994][T16894] ? clear_bhb_loop+0x50/0xa0 [ 444.816707][T16894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 444.822654][T16894] RIP: 0033:0x7f1a9647560e [ 444.827114][T16894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 444.846883][T16894] RSP: 002b:00007f1a94f0eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 444.855338][T16894] RAX: ffffffffffffffda RBX: 00007f1a94f0f6c0 RCX: 00007f1a9647560e [ 444.863345][T16894] RDX: 0000000004000000 RSI: 00007f1a8caef000 RDI: 0000000000000003 [ 444.871453][T16894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 444.879727][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 444.887732][T16894] R13: 00007f1a94f0eee0 R14: 00007f1a94f0eea0 R15: 00007f1a8caef000 [ 444.895742][T16894] [ 444.899254][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.923161][T16894] memory: usage 307200kB, limit 307200kB, failcnt 4802 [ 444.930174][T16894] memory+swap: usage 327856kB, limit 9007199254740988kB, failcnt 0 [ 444.965033][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.974924][ T20] usb 7-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 444.984073][ T319] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 444.991885][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.004359][ T20] usb 7-1: config 0 descriptor?? [ 445.011039][T16894] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.017950][T16894] Memory cgroup stats for /syz0: [ 445.018096][T16894] anon 4464640 [ 445.018096][T16894] file 310018048 [ 445.018096][T16894] kernel_stack 0 [ 445.018096][T16894] pagetables 0 [ 445.018096][T16894] percpu 0 [ 445.018096][T16894] sock 0 [ 445.018096][T16894] shmem 310018048 [ 445.018096][T16894] file_mapped 0 [ 445.018096][T16894] file_dirty 0 [ 445.018096][T16894] file_writeback 0 [ 445.018096][T16894] swapcached 21307392 [ 445.018096][T16894] anon_thp 0 [ 445.018096][T16894] file_thp 0 [ 445.018096][T16894] shmem_thp 0 [ 445.018096][T16894] inactive_anon 158371840 [ 445.018096][T16894] active_anon 156196864 [ 445.018096][T16894] inactive_file 4096 [ 445.018096][T16894] active_file 0 [ 445.018096][T16894] unevictable 0 [ 445.018096][T16894] slab_reclaimable 0 [ 445.018096][T16894] slab_unreclaimable 0 [ 445.018096][T16894] slab 0 [ 445.018096][T16894] workingset_refault_anon 11 [ 445.018096][T16894] workingset_refault_file 374 [ 445.018096][T16894] workingset_activate_anon 11 [ 445.180425][T16894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor,pid=287,uid=0 [ 445.195843][T16894] Memory cgroup out of memory: Killed process 287 (syz-executor) total-vm:90052kB, anon-rss:1324kB, file-rss:21684kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:0 [ 445.225770][T16894] syz.0.2123 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 445.438203][T16894] CPU: 0 PID: 16894 Comm: syz.0.2123 Not tainted syzkaller #0 [ 445.445733][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.455838][T16894] Call Trace: [ 445.459150][T16894] [ 445.462109][T16894] __dump_stack+0x21/0x30 [ 445.466478][T16894] dump_stack_lvl+0x110/0x170 [ 445.471264][T16894] ? show_regs_print_info+0x20/0x20 [ 445.476607][T16894] ? ___ratelimit+0x406/0x590 [ 445.481346][T16894] dump_stack+0x15/0x20 [ 445.485543][T16894] dump_header+0xdd/0x650 [ 445.489895][T16894] oom_kill_process+0x1fa/0x2c0 [ 445.494772][T16894] out_of_memory+0x64f/0x9d0 [ 445.499435][T16894] ? unregister_oom_notifier+0x20/0x20 [ 445.504924][T16894] ? mutex_lock_killable+0x9b/0x1c0 [ 445.510144][T16894] ? __mutex_lock_interruptible_slowpath+0x10/0x10 [ 445.516676][T16894] ? __kasan_check_read+0x11/0x20 [ 445.521732][T16894] ? psi_group_change+0xa6c/0x10e0 [ 445.526897][T16894] mem_cgroup_out_of_memory+0x2bb/0x3b0 [ 445.532575][T16894] ? css_next_descendant_pre+0x1fe/0x220 [ 445.538252][T16894] ? mem_cgroup_oom_trylock+0x350/0x350 [ 445.543861][T16894] ? mem_cgroup_iter+0x452/0x6a0 [ 445.548827][T16894] try_charge_memcg+0xed4/0x14b0 [ 445.553801][T16894] ? __vm_enough_memory+0x11b/0x2d0 [ 445.559029][T16894] ? get_mem_cgroup_from_objcg+0x170/0x170 [ 445.564872][T16894] ? shmem_alloc_and_acct_page+0x7e0/0x8d0 [ 445.570710][T16894] ? cgroup_rstat_updated+0xf5/0x360 [ 445.576021][T16894] charge_memcg+0x6d/0x1a0 [ 445.580478][T16894] __mem_cgroup_charge+0x93/0x280 [ 445.585638][T16894] ? mem_cgroup_calculate_protection+0x520/0x520 [ 445.592099][T16894] shmem_add_to_page_cache+0x64b/0xc50 [ 445.597595][T16894] ? put_page+0xb0/0xb0 [ 445.601780][T16894] ? _raw_spin_lock_irq+0x95/0xf0 [ 445.606839][T16894] ? _raw_spin_lock_irqsave+0x130/0x130 [ 445.612419][T16894] ? preempt_schedule_thunk+0x16/0x18 [ 445.617836][T16894] shmem_getpage_gfp+0x116a/0x2310 [ 445.623028][T16894] ? __kasan_check_write+0x14/0x20 [ 445.628622][T16894] shmem_write_begin+0xce/0x1b0 [ 445.633515][T16894] generic_perform_write+0x2b7/0x690 [ 445.638874][T16894] ? grab_cache_page_write_begin+0xb0/0xb0 [ 445.644716][T16894] ? file_remove_privs+0x5c0/0x5c0 [ 445.649859][T16894] ? rwsem_write_trylock+0x136/0x300 [ 445.655356][T16894] ? clear_nonspinnable+0x60/0x60 [ 445.660526][T16894] __generic_file_write_iter+0x268/0x480 [ 445.666197][T16894] generic_file_write_iter+0xa9/0x1d0 [ 445.671600][T16894] vfs_write+0x835/0xfd0 [ 445.675864][T16894] ? file_end_write+0x1b0/0x1b0 [ 445.680744][T16894] ? __fget_files+0x2c4/0x320 [ 445.685640][T16894] ? __fdget_pos+0x1f7/0x380 [ 445.690452][T16894] ? ksys_write+0x71/0x250 [ 445.694924][T16894] ksys_write+0x149/0x250 [ 445.699292][T16894] ? __ia32_sys_read+0x90/0x90 [ 445.704130][T16894] ? debug_smp_processor_id+0x17/0x20 [ 445.709535][T16894] __x64_sys_write+0x7b/0x90 [ 445.714160][T16894] x64_sys_call+0x8ef/0x9a0 [ 445.718687][T16894] do_syscall_64+0x4c/0xa0 [ 445.723132][T16894] ? clear_bhb_loop+0x50/0xa0 [ 445.727838][T16894] ? clear_bhb_loop+0x50/0xa0 [ 445.732567][T16894] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 445.738510][T16894] RIP: 0033:0x7f1a9647560e [ 445.742963][T16894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.762597][T16894] RSP: 002b:00007f1a94f0eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.771050][T16894] RAX: ffffffffffffffda RBX: 00007f1a94f0f6c0 RCX: 00007f1a9647560e [ 445.779057][T16894] RDX: 0000000004000000 RSI: 00007f1a8caef000 RDI: 0000000000000003 [ 445.787064][T16894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 445.795068][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 445.803069][T16894] R13: 00007f1a94f0eee0 R14: 00007f1a94f0eea0 R15: 00007f1a8caef000 [ 445.811081][T16894] [ 445.826000][T17017] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 445.850517][T16894] memory: usage 201884kB, limit 307200kB, failcnt 4831 [ 445.857595][T16894] memory+swap: usage 222564kB, limit 9007199254740988kB, failcnt 0 [ 445.865905][T16894] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 445.872897][T16894] Memory cgroup stats for /syz0: [ 445.873044][T16894] anon 2408448 [ 445.873044][T16894] file 203513856 [ 445.873044][T16894] kernel_stack 0 [ 445.873044][T16894] pagetables 0 [ 445.873044][T16894] percpu 0 [ 445.873044][T16894] sock 0 [ 445.873044][T16894] shmem 203513856 [ 445.873044][T16894] file_mapped 0 [ 445.873044][T16894] file_dirty 0 [ 445.873044][T16894] file_writeback 0 [ 445.873044][T16894] swapcached 22048768 [ 445.873044][T16894] anon_thp 0 [ 445.873044][T16894] file_thp 0 [ 445.873044][T16894] shmem_thp 0 [ 445.873044][T16894] inactive_anon 124100608 [ 445.873044][T16894] active_anon 82624512 [ 445.873044][T16894] inactive_file 0 [ 445.873044][T16894] active_file 4096 [ 445.873044][T16894] unevictable 0 [ 445.873044][T16894] slab_reclaimable 0 [ 445.873044][T16894] slab_unreclaimable 0 [ 445.873044][T16894] slab 0 [ 445.873044][T16894] workingset_refault_anon 11 [ 445.873044][T16894] workingset_refault_file 375 [ 445.873044][T16894] workingset_activate_anon 11 [ 445.968007][T16894] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2123,pid=16893,uid=0 [ 445.983509][T16894] Memory cgroup out of memory: Killed process 16894 (syz.0.2123) total-vm:229192kB, anon-rss:1456kB, file-rss:21688kB, shmem-rss:0kB, UID:0 pgtables:248kB oom_score_adj:0 [ 446.023875][ T319] usb 9-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 446.045206][ T319] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28935, setting to 64 [ 446.056700][ T319] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.206994][ T20] waltop 0003:172F:0501.0024: unknown main item tag 0x0 [ 446.214466][ T20] waltop 0003:172F:0501.0024: unknown main item tag 0x0 [ 446.221725][ T20] waltop 0003:172F:0501.0024: unknown main item tag 0x0 [ 446.229976][ T20] waltop 0003:172F:0501.0024: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.6-1/input0 [ 446.280315][ T319] usb 9-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 446.289565][ T319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.297807][ T319] usb 9-1: Product: syz [ 446.302223][ T319] usb 9-1: Manufacturer: syz [ 446.306860][ T319] usb 9-1: SerialNumber: syz [ 446.316937][ T319] usb 9-1: config 0 descriptor?? [ 446.368347][ T319] ums-isd200 9-1:0.0: USB Mass Storage device detected [ 446.438937][T17017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=17017 comm=syz.6.2124 [ 446.584316][ T319] usb 9-1: USB disconnect, device number 7 [ 447.475071][T17029] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.482551][T17029] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.491007][T17029] device bridge_slave_0 entered promiscuous mode [ 447.498331][T17029] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.506404][T17029] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.514197][T17029] device bridge_slave_1 entered promiscuous mode [ 447.538692][ T20] usb 7-1: USB disconnect, device number 13 [ 447.544732][ T319] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 447.613208][T17029] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.620346][T17029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.627679][T17029] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.634771][T17029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.666968][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.676626][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.687080][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.713901][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.722281][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.729379][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.737787][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.746211][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.753317][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.771016][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.779780][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.795563][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.804875][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.813461][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.822170][ T319] usb 9-1: Using ep0 maxpacket: 32 [ 447.828221][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.837100][T17029] device veth0_vlan entered promiscuous mode [ 447.850570][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.860764][T17029] device veth1_macvtap entered promiscuous mode [ 447.872291][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 447.888184][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.043535][ T20] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 448.161533][ T319] usb 9-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 448.175418][ T319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.189619][ T319] usb 9-1: Product: syz [ 448.197433][ T319] usb 9-1: Manufacturer: syz [ 448.202082][ T319] usb 9-1: SerialNumber: syz [ 448.428225][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.441705][ T20] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.455041][ T20] usb 7-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 448.466587][ T20] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.487701][ T20] usb 7-1: config 0 descriptor?? [ 448.505403][T17042] xt_TPROXY: Can be used only with -p tcp or -p udp [ 448.539220][T17042] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2133'. [ 448.695462][ T319] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 448.728409][ T319] usb 9-1: USB disconnect, device number 8 [ 448.810411][T17052] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 448.868630][T17051] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.876284][T17051] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.884689][T17051] device bridge_slave_0 entered promiscuous mode [ 448.892243][T17051] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.899775][T17051] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.907427][T17051] device bridge_slave_1 entered promiscuous mode [ 448.980499][T17051] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.987630][T17051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.994987][T17051] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.002037][T17051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.030440][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.040015][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.047465][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.051981][T17054] loop9: detected capacity change from 0 to 40427 [ 449.063320][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.071657][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.078830][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.087759][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.096702][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.103832][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.113287][ T20] waltop 0003:172F:0501.0025: unknown main item tag 0x0 [ 449.120475][ T20] waltop 0003:172F:0501.0025: unknown main item tag 0x0 [ 449.145010][ T20] waltop 0003:172F:0501.0025: unknown main item tag 0x0 [ 449.152789][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.165527][ T20] waltop 0003:172F:0501.0025: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.6-1/input0 [ 449.186878][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.195102][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.237972][T17051] device veth0_vlan entered promiscuous mode [ 449.259421][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.274182][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.287959][T17065] loop9: detected capacity change from 0 to 1024 [ 449.306098][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.331772][T17034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=17034 comm=syz.6.2134 [ 449.386204][T17070] cgroup: Invalid name [ 449.410006][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.730116][T17051] device veth1_macvtap entered promiscuous mode [ 449.741752][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.750484][T17065] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 449.763244][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.773924][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.784806][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.855660][T17065] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3885: comm syz.9.2142: Allocating blocks 497-513 which overlap fs metadata [ 449.872269][T17065] EXT4-fs (loop9): pa ffff8881319ef150: logic 256, phys. 385, len 8 [ 449.882318][T17065] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 450.020192][T17078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 451.003582][ T319] usb 7-1: USB disconnect, device number 14 [ 451.025097][T17080] loop8: detected capacity change from 0 to 2048 [ 451.248654][T17088] xt_TPROXY: Can be used only with -p tcp or -p udp [ 451.982486][T17103] loop2: detected capacity change from 0 to 8 [ 451.997653][T17102] xt_TPROXY: Can be used only with -p tcp or -p udp [ 452.012459][T17105] loop4: detected capacity change from 0 to 256 [ 452.026780][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 452.026797][ T30] audit: type=1400 audit(1777724454.588:2646): avc: denied { create } for pid=17101 comm="syz.8.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 452.089523][T17105] overlayfs: filesystem on './file0' not supported [ 452.108461][ T30] audit: type=1400 audit(1777724454.597:2647): avc: denied { read write } for pid=17101 comm="syz.8.2149" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 452.168151][ T30] audit: type=1400 audit(1777724454.597:2648): avc: denied { open } for pid=17101 comm="syz.8.2149" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 452.227985][ T30] audit: type=1400 audit(1777724454.597:2649): avc: denied { ioctl } for pid=17101 comm="syz.8.2149" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 452.306401][ T30] audit: type=1400 audit(1777724454.775:2650): avc: denied { write } for pid=17109 comm="syz.6.2151" path="socket:[39127]" dev="sockfs" ino=39127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 452.349954][ T319] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 452.373878][ T30] audit: type=1400 audit(1777724454.775:2651): avc: denied { accept } for pid=17109 comm="syz.6.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 453.986736][T17121] xt_TPROXY: Can be used only with -p tcp or -p udp [ 454.001951][T17121] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2154'. [ 454.032896][T17114] xt_TPROXY: Can be used only with -p tcp or -p udp [ 454.057332][T17114] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2153'. [ 454.305695][ T319] usb 9-1: Using ep0 maxpacket: 16 [ 454.401345][T17129] loop9: detected capacity change from 0 to 256 [ 454.529619][ T319] usb 9-1: unable to get BOS descriptor or descriptor too short [ 454.615690][ T319] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.682498][ T320] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 455.726884][ T319] usb 9-1: string descriptor 0 read error: -71 [ 455.744042][ T319] usb 9-1: New USB device found, idVendor=04b8, idProduct=0102, bcdDevice= 0.40 [ 455.774808][ T319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.844387][ T319] usb 9-1: can't set config #1, error -71 [ 455.939492][T17153] xt_TPROXY: Can be used only with -p tcp or -p udp [ 455.948689][T17153] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2160'. [ 456.173811][ T319] usb 9-1: USB disconnect, device number 9 [ 456.208186][ T30] audit: type=1326 audit(1777724458.509:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.1.2162" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8791dd9 code=0x7ffc0000 [ 456.233454][ T30] audit: type=1326 audit(1777724458.518:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.1.2162" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7efca8791dd9 code=0x7ffc0000 [ 456.258745][ T30] audit: type=1326 audit(1777724458.518:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.1.2162" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8791dd9 code=0x7ffc0000 [ 456.284301][ T30] audit: type=1326 audit(1777724458.518:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17140 comm="syz.1.2162" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efca8791dd9 code=0x7ffc0000 [ 456.367940][ T320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.378911][ T320] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.388699][ T320] usb 7-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 456.398185][ T320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.407089][ T320] usb 7-1: config 0 descriptor?? [ 456.549549][ T319] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 456.726497][T17162] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 456.902265][ T319] usb 9-1: not running at top speed; connect to a high speed hub [ 456.999634][ T319] usb 9-1: config 0 has an invalid interface number: 30 but max is 0 [ 457.008795][ T319] usb 9-1: config 0 has no interface number 0 [ 457.046223][ T320] waltop 0003:172F:0501.0026: unknown main item tag 0x0 [ 457.212414][ T319] usb 9-1: config 0 interface 30 altsetting 13 has an invalid endpoint with address 0x0, skipping [ 457.223266][ T320] waltop 0003:172F:0501.0026: unknown main item tag 0x0 [ 457.230273][ T320] waltop 0003:172F:0501.0026: unknown main item tag 0x0 [ 457.248408][T17127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=17127 comm=syz.6.2156 [ 457.263467][T17159] loop9: detected capacity change from 0 to 131072 [ 457.270080][ T319] usb 9-1: config 0 interface 30 altsetting 13 has an invalid endpoint with address 0x0, skipping [ 457.289057][T17172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 457.296145][T17172] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2167'. [ 457.314675][ T320] waltop 0003:172F:0501.0026: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.6-1/input0 [ 457.329829][ T319] usb 9-1: config 0 interface 30 altsetting 13 has an invalid endpoint with address 0x0, skipping [ 457.344407][T17159] F2FS-fs (loop9): Found nat_bits in checkpoint [ 457.371004][ T319] usb 9-1: config 0 interface 30 altsetting 13 endpoint 0x6 has invalid wMaxPacketSize 0 [ 457.412386][ T319] usb 9-1: config 0 interface 30 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 457.464505][ T319] usb 9-1: config 0 interface 30 altsetting 13 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 457.481579][T17159] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 457.489283][ T319] usb 9-1: config 0 interface 30 altsetting 13 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 457.629135][ T319] usb 9-1: config 0 interface 30 altsetting 13 endpoint 0x8 has invalid maxpacket 1024, setting to 1023 [ 458.178517][ T319] usb 9-1: config 0 interface 30 has no altsetting 0 [ 458.196676][T17159] F2FS-fs (loop9): lookup inode (7) has corrupted xattr [ 458.204948][T17159] F2FS-fs (loop9): lookup inode (7) has corrupted xattr [ 458.343179][T17191] loop4: detected capacity change from 0 to 2048 [ 458.398418][ T319] usb 9-1: New USB device found, idVendor=19d2, idProduct=1267, bcdDevice=4c.19 [ 458.404793][ T3600] usb 7-1: USB disconnect, device number 15 [ 458.412786][ T319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.431834][ T319] usb 9-1: Product: syz [ 458.440702][ T319] usb 9-1: Manufacturer: ь [ 458.447791][ T319] usb 9-1: SerialNumber: syz [ 458.493094][T17194] loop6: detected capacity change from 0 to 256 [ 458.504335][ T319] usb 9-1: config 0 descriptor?? [ 458.532953][T17194] FAT-fs (loop6): Directory bread(block 64) failed [ 458.551881][T17194] FAT-fs (loop6): Directory bread(block 65) failed [ 458.558917][T17193] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2172'. [ 458.569581][T17194] FAT-fs (loop6): Directory bread(block 66) failed [ 458.576229][T17194] FAT-fs (loop6): Directory bread(block 67) failed [ 458.583169][T17194] FAT-fs (loop6): Directory bread(block 68) failed [ 458.589879][T17194] FAT-fs (loop6): Directory bread(block 69) failed [ 458.596919][T17194] FAT-fs (loop6): Directory bread(block 70) failed [ 458.603706][T17194] FAT-fs (loop6): Directory bread(block 71) failed [ 458.611155][T17194] FAT-fs (loop6): Directory bread(block 72) failed [ 458.617979][T17194] FAT-fs (loop6): Directory bread(block 73) failed [ 458.884200][ T319] usb 9-1: USB disconnect, device number 10 [ 458.986001][ T20] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 459.274598][ T3600] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 459.387477][T17209] loop8: detected capacity change from 0 to 256 [ 459.398342][T17209] exfat: Deprecated parameter 'utf8' [ 459.404333][T17209] exfat: Deprecated parameter 'namecase' [ 459.410307][T17209] exfat: Deprecated parameter 'namecase' [ 459.416753][T17209] exfat: Deprecated parameter 'utf8' [ 459.434850][ T20] usb 10-1: unable to get BOS descriptor or descriptor too short [ 459.458701][T17209] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 459.520377][ T20] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 459.541815][ T20] usb 10-1: config 0 has no interface number 0 [ 459.560183][ T20] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 459.582416][ T20] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 459.593290][ T20] usb 10-1: config 0 interface 88 has no altsetting 0 [ 459.927200][T17216] Core dump to core aborted: cannot preserve file permissions [ 459.947789][ T3600] usb 7-1: unable to get BOS descriptor or descriptor too short [ 459.998358][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 459.998392][ T30] audit: type=1400 audit(1777724462.056:2674): avc: denied { unmount } for pid=15089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 460.043920][ T20] usb 10-1: string descriptor 0 read error: -71 [ 460.050278][ T20] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 460.095321][ T20] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 460.109535][ T20] usb 10-1: config 0 descriptor?? [ 460.129474][ T20] usb 10-1: can't set config #0, error -71 [ 460.161326][ T20] usb 10-1: USB disconnect, device number 2 [ 460.214970][ T3600] usb 7-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 460.232728][ T3600] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.257622][ T3600] usb 7-1: Product: ч [ 460.261784][ T3600] usb 7-1: Manufacturer: ࠐ [ 460.270177][ T3600] usb 7-1: SerialNumber: ꑇଖᤉ傾傓濂硑輖ﳣᵔష纃⑰佐쇸䵎꾈貏跠煁࿕픬㊪嗴ꐣ﵊޹딩⹺ꋷ蓔赆ݦ꘦ꎟ踙溺瞭䜳쪔襪 [ 460.434706][ T30] audit: type=1326 audit(1777724462.458:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.9.2181" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff727fe8dd9 code=0x7ffc0000 [ 460.487479][ T30] audit: type=1326 audit(1777724462.496:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.9.2181" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff727fa960e code=0x7ffc0000 [ 460.516268][T17228] xt_TPROXY: Can be used only with -p tcp or -p udp [ 460.518896][T17231] tipc: Failed to remove unknown binding: 66,1,1/0:281486800/281486802 [ 460.533455][T17231] tipc: Failed to remove unknown binding: 66,1,1/0:281486800/281486802 [ 460.542843][ T30] audit: type=1326 audit(1777724462.496:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.9.2181" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff727fa960e code=0x7ffc0000 [ 460.579239][T17231] tipc: Failed to remove unknown binding: 66,1,1/0:281486800/281486802 [ 460.599586][ T30] audit: type=1326 audit(1777724462.496:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.9.2181" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff727fe8dd9 code=0x7ffc0000 [ 460.625396][ T3600] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 460.642368][ T3600] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 460.653928][ T3600] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 460.657208][ T30] audit: type=1326 audit(1777724462.496:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.9.2181" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7ff727fe8dd9 code=0x7ffc0000 [ 460.673824][ T3600] snd-usb-audio: probe of 7-1:1.1 failed with error -22 [ 460.712462][ T3600] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 460.727812][ T30] audit: type=1326 audit(1777724462.496:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17226 comm="syz.9.2181" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff727fe8dd9 code=0x7ffc0000 [ 460.738910][ T3600] snd-usb-audio: probe of 7-1:1.2 failed with error -22 [ 460.792816][ T3600] usb 7-1: USB disconnect, device number 16 [ 460.992340][ T30] audit: type=1400 audit(1777724462.982:2681): avc: denied { mounton } for pid=17233 comm="syz.8.2186" path="/proc/146/task" dev="proc" ino=38848 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 461.208745][T17238] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2187'. [ 461.315559][ T320] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 461.375865][T17231] loop9: detected capacity change from 0 to 131072 [ 461.454067][T17247] loop6: detected capacity change from 0 to 512 [ 461.473318][T17231] F2FS-fs (loop9): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 461.482097][T17231] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 461.501162][T17231] F2FS-fs (loop9): invalid crc value [ 461.669856][ T320] usb 9-1: device descriptor read/64, error -71 [ 461.805539][T17247] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000e94,max_dir_size_kb=0x0000000000000004,min_batch_time=0x000000000000000b,quota,,errors=continue. Quota mode: writeback. [ 461.826274][T17247] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 461.877133][T17247] EXT4-fs error (device loop6): ext4_do_update_inode:5253: inode #2: comm syz.6.2190: corrupted inode contents [ 461.890400][T17247] EXT4-fs error (device loop6): ext4_dirty_inode:6089: inode #2: comm syz.6.2190: mark_inode_dirty error [ 461.903545][T17247] EXT4-fs error (device loop6): ext4_do_update_inode:5253: inode #2: comm syz.6.2190: corrupted inode contents [ 462.022761][T17247] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.2190: mark_inode_dirty error [ 462.034811][T17231] F2FS-fs (loop9): Found nat_bits in checkpoint [ 462.049462][ T30] audit: type=1400 audit(1777724463.974:2682): avc: denied { write } for pid=17256 comm="syz.1.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 462.082428][T17257] netlink: 'syz.1.2191': attribute type 30 has an invalid length. [ 462.241861][T17231] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 462.249783][T17231] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 462.346223][T17267] loop4: detected capacity change from 0 to 128 [ 462.442176][ T30] audit: type=1400 audit(1777724464.339:2683): avc: denied { remount } for pid=17262 comm="syz.4.2194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 462.912681][T17269] loop6: detected capacity change from 0 to 256 [ 462.923755][T17269] exfat: Deprecated parameter 'utf8' [ 462.929542][T17269] exfat: Deprecated parameter 'namecase' [ 462.935474][T17269] exfat: Deprecated parameter 'namecase' [ 462.941915][T17269] exfat: Deprecated parameter 'utf8' [ 462.952099][T17269] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 463.867439][ T320] usb 9-1: device descriptor read/64, error -71 [ 464.168780][ T320] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 464.245533][T17280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17280 comm=syz.8.2201 [ 464.382921][T17277] xt_TPROXY: Can be used only with -p tcp or -p udp [ 464.581493][T17290] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2196'. [ 464.672932][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.680024][T17285] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.693508][T17285] device bridge_slave_0 entered promiscuous mode [ 464.701018][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.708155][T17285] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.715790][T17285] device bridge_slave_1 entered promiscuous mode [ 464.766682][T17288] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2202'. [ 464.882298][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.889444][T17285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.896790][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.903839][T17285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.935827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 464.944424][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.952497][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.970859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.993068][ T320] usb 9-1: device descriptor read/64, error -71 [ 464.996815][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.008629][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.018519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.028237][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.035460][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.061884][T17305] loop9: detected capacity change from 0 to 512 [ 467.932239][ T306] device bridge_slave_1 left promiscuous mode [ 467.938459][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.992108][T17305] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable=0x0000000000000e94,max_dir_size_kb=0x0000000000000004,min_batch_time=0x000000000000000b,quota,,errors=continue. Quota mode: writeback. [ 468.012760][T17305] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.059400][T17302] EXT4-fs error (device loop9): ext4_do_update_inode:5253: inode #2: comm syz.9.2205: corrupted inode contents [ 468.071527][ T306] device bridge_slave_0 left promiscuous mode [ 468.072934][T17302] EXT4-fs error (device loop9): ext4_dirty_inode:6089: inode #2: comm syz.9.2205: mark_inode_dirty error [ 468.077885][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.090752][T17302] EXT4-fs error (device loop9): ext4_do_update_inode:5253: inode #2: comm syz.9.2205: corrupted inode contents [ 468.112803][T17302] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #2: comm syz.9.2205: mark_inode_dirty error [ 468.137091][ T306] device veth1_macvtap left promiscuous mode [ 468.152011][ T306] device veth0_vlan left promiscuous mode [ 468.234647][T17313] loop8: detected capacity change from 0 to 512 [ 468.323023][T17313] EXT4-fs (loop8): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 468.336770][T17313] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.350331][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 468.350346][ T30] audit: type=1400 audit(1777724469.870:2686): avc: denied { create } for pid=17320 comm="syz.1.2210" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.380773][ T30] audit: type=1400 audit(1777724469.870:2687): avc: denied { write } for pid=17320 comm="syz.1.2210" name="file0" dev="tmpfs" ino=2358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.403638][ T30] audit: type=1400 audit(1777724469.870:2688): avc: denied { open } for pid=17320 comm="syz.1.2210" path="/428/file0" dev="tmpfs" ino=2358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.426639][ T30] audit: type=1400 audit(1777724469.870:2689): avc: denied { ioctl } for pid=17320 comm="syz.1.2210" path="/428/file0" dev="tmpfs" ino=2358 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.533893][T17329] xt_TPROXY: Can be used only with -p tcp or -p udp [ 468.542904][T17329] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2208'. [ 468.623403][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.637198][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.639360][ T30] audit: type=1400 audit(1777724470.141:2690): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=2358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 468.660747][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.676283][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.692988][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 468.702124][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.717254][T17285] device veth0_vlan entered promiscuous mode [ 468.723801][ T30] audit: type=1400 audit(1777724470.216:2691): avc: denied { execute_no_trans } for pid=17331 comm="syz.1.2212" path="/429/file1" dev="tmpfs" ino=2364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 468.749845][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 468.758731][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 468.767454][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 468.775353][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.785156][ T326] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 468.799567][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 468.809129][ T30] audit: type=1400 audit(1777724470.300:2692): avc: denied { mount } for pid=17333 comm="syz.1.2213" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 468.813297][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 468.841587][T17285] device veth1_macvtap entered promiscuous mode [ 468.852898][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 468.861202][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 468.869773][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 468.890220][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 468.899424][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 469.005011][ T30] audit: type=1400 audit(1777724470.478:2693): avc: denied { create } for pid=17335 comm="syz.1.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 469.159107][ T326] usb 10-1: Using ep0 maxpacket: 32 [ 469.182812][T17348] loop4: detected capacity change from 0 to 512 [ 469.201882][ T319] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 469.245324][T17352] loop4: detected capacity change from 0 to 4096 [ 469.268563][T17352] EXT4-fs (loop4): Test dummy encryption mode enabled [ 469.275578][T17352] EXT4-fs (loop4): dax option not supported [ 469.282833][T17344] xt_TPROXY: Can be used only with -p tcp or -p udp [ 469.289764][ T326] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 469.298303][ T326] usb 10-1: config 0 has no interface number 0 [ 469.370252][ T326] usb 10-1: config 0 interface 184 has no altsetting 0 [ 469.382066][T17344] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2215'. [ 469.434893][T17354] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2218'. [ 469.543885][ T326] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 469.553147][ T326] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.561332][ T326] usb 10-1: Product: syz [ 469.565766][ T326] usb 10-1: Manufacturer: syz [ 469.570536][ T326] usb 10-1: SerialNumber: syz [ 469.576077][ T326] usb 10-1: config 0 descriptor?? [ 469.576225][ T319] usb 4-1: not running at top speed; connect to a high speed hub [ 469.619363][ T326] smsc75xx v1.0.0 [ 469.694897][ T319] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 469.703485][ T319] usb 4-1: config 0 has no interface number 0 [ 469.709663][ T319] usb 4-1: config 0 interface 30 altsetting 13 has an invalid endpoint with address 0x0, skipping [ 469.720628][ T319] usb 4-1: config 0 interface 30 altsetting 13 has an invalid endpoint with address 0x0, skipping [ 469.731351][ T319] usb 4-1: config 0 interface 30 altsetting 13 has an invalid endpoint with address 0x0, skipping [ 469.742054][ T319] usb 4-1: config 0 interface 30 altsetting 13 endpoint 0x6 has invalid wMaxPacketSize 0 [ 469.752234][ T319] usb 4-1: config 0 interface 30 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 469.763034][ T319] usb 4-1: config 0 interface 30 altsetting 13 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 469.774075][ T319] usb 4-1: config 0 interface 30 altsetting 13 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 469.790181][ T319] usb 4-1: config 0 interface 30 altsetting 13 endpoint 0x8 has invalid maxpacket 1024, setting to 1023 [ 469.801388][ T319] usb 4-1: config 0 interface 30 has no altsetting 0 [ 469.865126][T17356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2219'. [ 469.888080][T17358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17358 comm=syz.1.2220 [ 469.979045][ T319] usb 4-1: New USB device found, idVendor=19d2, idProduct=1267, bcdDevice=4c.19 [ 469.990403][ T30] audit: type=1326 audit(1777724471.404:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.8.2221" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d5c9cdd9 code=0x7ffc0000 [ 470.015600][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.016553][T17360] loop8: detected capacity change from 0 to 512 [ 470.023805][ T319] usb 4-1: Product: syz [ 470.034522][ T30] audit: type=1326 audit(1777724471.404:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.8.2221" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89d5c9cdd9 code=0x7ffc0000 [ 470.353765][ T319] usb 4-1: Manufacturer: ь [ 470.358572][ T319] usb 4-1: SerialNumber: syz [ 470.372567][ T319] usb 4-1: config 0 descriptor?? [ 470.380300][T17360] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #18: comm syz.8.2221: iget: bad extra_isize 58 (inode size 256) [ 470.395140][T17369] loop4: detected capacity change from 0 to 512 [ 470.397129][T17360] EXT4-fs (loop8): Remounting filesystem read-only [ 470.408267][T17360] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2221: error while reading EA inode 18 err=-117 [ 470.410328][T17369] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 470.430198][T17360] EXT4-fs (loop8): Remounting filesystem read-only [ 470.439485][T17360] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.2221: iget: bad extra_isize 58 (inode size 256) [ 470.453524][T17360] EXT4-fs (loop8): Remounting filesystem read-only [ 470.460284][T17360] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2221: error while reading EA inode 11 err=-117 [ 470.472880][T17360] EXT4-fs (loop8): Remounting filesystem read-only [ 470.475012][T17369] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 470.480487][T17360] EXT4-fs (loop8): 1 orphan inode deleted [ 470.495120][T17369] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.498866][T17360] EXT4-fs (loop8): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,errors=remount-ro,nouid32,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000003a,dioread_lock,. Quota mode: none. [ 470.555505][T15089] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 470.575890][T15089] EXT4-fs (loop8): Remounting filesystem read-only [ 470.582790][T15089] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 58 (inode size 256) [ 470.595961][T15089] EXT4-fs (loop8): Remounting filesystem read-only [ 470.603015][T15089] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 58 (inode size 256) [ 470.616210][T15089] EXT4-fs (loop8): Remounting filesystem read-only [ 470.722380][ T319] usb 4-1: USB disconnect, device number 27 [ 470.905082][T17381] loop4: detected capacity change from 0 to 128 [ 471.009135][T17326] loop9: detected capacity change from 0 to 256 [ 471.635161][ T326] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 471.658972][ T326] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 471.734288][T17389] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.741536][T17389] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.750008][T17389] device bridge_slave_0 entered promiscuous mode [ 471.763039][T17389] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.775666][T17389] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.786818][T17395] xt_TPROXY: Can be used only with -p tcp or -p udp [ 471.791221][T17389] device bridge_slave_1 entered promiscuous mode [ 471.808527][T17395] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2227'. [ 471.914906][T17389] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.922041][T17389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.929407][T17389] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.936494][T17389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.948334][ T326] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 471.968989][ T326] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 471.979494][ T4543] device bridge_slave_1 left promiscuous mode [ 471.986979][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.012282][ T326] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 472.040497][ T326] smsc75xx: probe of 10-1:0.184 failed with error -61 [ 472.049473][T17396] loop4: detected capacity change from 0 to 40427 [ 472.072380][ T4543] device bridge_slave_0 left promiscuous mode [ 472.079476][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.092768][ T4543] device veth1_macvtap left promiscuous mode [ 472.099560][ T4543] device veth0_vlan left promiscuous mode [ 472.207903][T17399] loop4: detected capacity change from 0 to 4096 [ 472.259508][T17399] EXT4-fs (loop4): Test dummy encryption mode enabled [ 472.266501][T17399] EXT4-fs (loop4): dax option not supported [ 472.280483][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.300859][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.336636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 472.344579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 472.360729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 472.375935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 472.385911][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.393020][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.417162][T17399] loop4: detected capacity change from 0 to 512 [ 472.429189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 472.451071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 472.459988][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.467087][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.484538][T17399] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 472.522219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.531047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.539274][T17399] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.558829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.588642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.628189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 472.640313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.650139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 472.658400][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 472.667073][T17389] device veth0_vlan entered promiscuous mode [ 472.680794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 472.689156][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 472.704438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 472.712932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.732741][T17389] device veth1_macvtap entered promiscuous mode [ 472.751768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.759781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.773858][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.789737][T17414] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2232'. [ 472.806621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.818058][T17420] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 472.827479][T17420] SELinux: security_context_str_to_sid() failed for (dev binder, type binder) errno=-22 [ 472.836251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.851216][T17420] loop3: detected capacity change from 0 to 512 [ 472.860745][T17420] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 472.875672][T17420] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.2239: bad orphan inode 131083 [ 472.887648][T17420] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,init_itable,init_itable=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 472.910372][T17420] overlayfs: workdir and upperdir must be separate subtrees [ 473.145074][ T533] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 474.533147][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2243'. [ 474.534685][ T533] usb 3-1: Using ep0 maxpacket: 16 [ 474.547566][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 474.547580][ T30] audit: type=1400 audit(1777724475.672:2803): avc: denied { ioctl } for pid=17436 comm="syz.3.2243" path="socket:[40554]" dev="sockfs" ino=40554 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 474.626405][T17441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2245'. [ 474.636421][ T319] usb 10-1: USB disconnect, device number 3 [ 474.684086][ T533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.714554][ T533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.741003][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 474.976239][ T533] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 474.989294][ T533] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 474.998635][ T533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.028702][ T533] usb 3-1: config 0 descriptor?? [ 475.183311][T17451] set_capacity_and_notify: 1 callbacks suppressed [ 475.183325][T17451] loop4: detected capacity change from 0 to 256 [ 475.241197][T17451] exfat: Deprecated parameter 'utf8' [ 475.246728][T17451] exfat: Deprecated parameter 'namecase' [ 475.252574][T17451] exfat: Deprecated parameter 'namecase' [ 475.258347][T17451] exfat: Deprecated parameter 'utf8' [ 475.266750][T17451] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 475.281240][T17451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2247'. [ 475.293444][ T30] audit: type=1400 audit(1777724476.373:2804): avc: denied { checkpoint_restore } for pid=17421 comm="syz.2.2230" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 475.442502][ T319] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 475.493842][T17458] loop3: detected capacity change from 0 to 2048 [ 475.514099][T17460] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2251'. [ 475.524006][T17460] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2251'. [ 475.572118][ T533] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0027/input/input8 [ 475.668524][ T533] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 475.781894][T17422] device syz_tun entered promiscuous mode [ 475.788000][T17422] device macsec1 entered promiscuous mode [ 475.795425][T17422] device syz_tun left promiscuous mode [ 475.828944][T17469] loop3: detected capacity change from 0 to 256 [ 475.848804][ T319] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.860230][ T319] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.866473][ T533] usb 3-1: USB disconnect, device number 6 [ 475.871021][ T319] usb 10-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 475.885528][ T319] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.894761][ T319] usb 10-1: config 0 descriptor?? [ 476.155035][T17448] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 476.211921][ T320] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 476.352057][ T319] waltop 0003:172F:0501.0028: unknown main item tag 0x0 [ 476.359078][ T319] waltop 0003:172F:0501.0028: unknown main item tag 0x0 [ 476.366357][ T319] waltop 0003:172F:0501.0028: unknown main item tag 0x0 [ 476.374171][ T319] waltop 0003:172F:0501.0028: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.9-1/input0 [ 476.726467][T17448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=17448 comm=syz.9.2246 [ 476.743468][ T319] usb 10-1: USB disconnect, device number 4 [ 476.756473][T17479] incfs: Options parsing error. -22 [ 476.767016][T17479] incfs: mount failed -22 [ 476.874449][ T320] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 476.884775][ T320] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.896199][ T320] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.909416][ T320] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.918758][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.972178][ T320] usb 4-1: invalid MIDI out EP 0 [ 476.979756][ T320] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 477.077456][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 477.190538][ T533] usb 4-1: USB disconnect, device number 28 [ 477.234420][T17490] loop4: detected capacity change from 0 to 2048 [ 477.318436][T17492] loop9: detected capacity change from 0 to 512 [ 477.333933][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 477.339418][T17490] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 477.423416][T17492] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000400000,minixdf,,errors=continue. Quota mode: writeback. [ 477.439756][T17492] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 477.456993][ T30] audit: type=1400 audit(1777724478.395:2805): avc: denied { append } for pid=17491 comm="syz.9.2260" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 477.483951][ T6] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.495254][ T6] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.505640][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 477.512416][ T6] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 477.530640][T17489] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 477.538451][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.546852][T17489] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 482 with error 28 [ 477.565399][T17489] EXT4-fs (loop4): This should not happen!! Data will be lost [ 477.565399][T17489] [ 477.571538][ T6] usb 3-1: config 0 descriptor?? [ 477.577011][T17489] EXT4-fs (loop4): Total free blocks count 0 [ 477.586205][T17489] EXT4-fs (loop4): Free/Dirty block details [ 477.592612][T17489] EXT4-fs (loop4): free_blocks=4096 [ 477.598153][T17489] EXT4-fs (loop4): dirty_blocks=512 [ 477.603685][T17489] EXT4-fs (loop4): Block reservation details [ 477.609690][T17489] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 477.641081][ T336] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 477.654246][ T336] EXT4-fs (loop4): This should not happen!! Data will be lost [ 477.654246][ T336] [ 477.709835][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2261'. [ 478.095437][T17505] loop3: detected capacity change from 0 to 512 [ 478.115908][T17505] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 478.129469][T17505] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.215330][ T30] audit: type=1400 audit(1777724479.106:2806): avc: denied { create } for pid=17504 comm="syz.3.2264" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 478.316704][T17511] loop4: detected capacity change from 0 to 40427 [ 478.335514][T17511] F2FS-fs (loop4): invalid crc value [ 478.349554][T17511] F2FS-fs (loop4): Found nat_bits in checkpoint [ 478.358803][T17519] device veth0_virt_wifi entered promiscuous mode [ 478.365976][T17519] device macsec1 entered promiscuous mode [ 478.390264][T17521] loop3: detected capacity change from 0 to 128 [ 478.408440][T17521] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 478.420442][T17521] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 478.436546][T17511] F2FS-fs (loop4): Start checkpoint disabled! [ 478.448896][T17511] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 478.466780][T17521] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.2268: Directory block failed checksum [ 478.522502][T17530] xt_hashlimit: size too large, truncated to 1048576 [ 478.525911][ T336] attempt to access beyond end of device [ 478.525911][ T336] loop4: rw=2049, want=40976, limit=40427 [ 478.712622][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 478.934177][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 479.088736][ T6] usb 3-1: USB disconnect, device number 7 [ 479.175081][T17543] loop2: detected capacity change from 0 to 4096 [ 479.246774][ T320] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 479.258433][T17543] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 479.292506][T17543] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 16: comm syz.2.2274: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=4096 fake=0 [ 479.314236][T17543] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 16: comm syz.2.2274: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=4096 fake=0 [ 479.516368][T17553] netlink: 'syz.3.2276': attribute type 12 has an invalid length. [ 479.524279][T17553] netlink: 'syz.3.2276': attribute type 29 has an invalid length. [ 479.532940][T17553] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2276'. [ 479.535716][ T320] usb 10-1: device descriptor read/64, error -71 [ 479.545713][T17553] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2276'. [ 479.674724][T17561] loop4: detected capacity change from 0 to 512 [ 479.739738][T17563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2279'. [ 479.978559][T17561] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 479.986573][T17561] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 480.060732][T17561] EXT4-fs (loop4): Test dummy encryption mode enabled [ 480.079949][T17561] EXT4-fs (loop4): Ignoring removed oldalloc option [ 480.086707][T17561] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 480.093916][T17561] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 480.113743][T17561] EXT4-fs (loop4): 1 truncate cleaned up [ 480.119661][T17561] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,mblk_io_submit,test_dummy_encryption=v1,oldalloc,mblk_io_submit,nogrpid,. Quota mode: none. [ 480.144361][ T6] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 480.218264][T17568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17568 comm=syz.4.2281 [ 480.315348][ T320] usb 10-1: device descriptor read/64, error -71 [ 480.587316][T17573] loop3: detected capacity change from 0 to 4096 [ 480.597976][T17573] EXT4-fs (loop3): Test dummy encryption mode enabled [ 480.604882][T17573] EXT4-fs (loop3): dax option not supported [ 480.625245][ T6] usb 3-1: device descriptor read/64, error -71 [ 480.710727][ T320] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 480.999243][ T320] usb 10-1: device descriptor read/64, error -71 [ 481.041966][ T6] usb 3-1: device descriptor read/64, error -71 [ 481.213836][T17580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2285'. [ 481.388027][T17588] Invalid argument reading file caps for ./file0 [ 481.425273][T17591] loop4: detected capacity change from 0 to 1024 [ 481.487752][ T6] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 481.545795][T17591] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 481.654301][T17606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2293'. [ 481.669264][ T320] usb 10-1: device descriptor read/64, error -71 [ 481.945983][T17608] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 481.966990][T17608] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 481.983512][T17608] loop4: detected capacity change from 0 to 512 [ 481.998101][T17611] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17611 comm=syz.9.2295 [ 482.025556][T17608] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 482.068534][T17608] EXT4-fs (loop4): Unrecognized mount option "euid=00000000000000000000" or missing value [ 482.096208][ T320] usb usb10-port1: attempt power cycle [ 482.121301][ T6] usb 3-1: device descriptor read/64, error -71 [ 482.282959][T17613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17613 comm=syz.4.2294 [ 482.467750][T17617] loop3: detected capacity change from 0 to 1024 [ 482.487392][T17617] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 482.507978][T17617] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 482.561626][T17621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2297'. [ 482.571437][T17621] overlayfs: failed to clone upperpath [ 482.597722][T17624] loop3: detected capacity change from 0 to 128 [ 482.655129][ T30] audit: type=1400 audit(1777724483.252:2807): avc: denied { getopt } for pid=17626 comm="syz.3.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 482.690097][ T30] audit: type=1400 audit(1777724483.289:2808): avc: denied { write } for pid=17628 comm="syz.3.2301" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 482.713558][ T30] audit: type=1400 audit(1777724483.289:2809): avc: denied { open } for pid=17628 comm="syz.3.2301" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 482.793405][T17631] loop4: detected capacity change from 0 to 4096 [ 482.811735][T17631] EXT4-fs (loop4): Test dummy encryption mode enabled [ 482.818722][T17631] EXT4-fs (loop4): dax option not supported [ 482.939387][ T6] usb usb3-port1: attempt power cycle [ 483.025722][T17635] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2302'. [ 483.094713][T17637] loop9: detected capacity change from 0 to 128 [ 483.382260][ T6] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 484.051980][T17646] x_tables: unsorted underflow at hook 3 [ 484.083026][T17652] loop4: detected capacity change from 0 to 256 [ 484.119664][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.175900][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2306'. [ 484.610922][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.028410][ T6] usb 3-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 485.047657][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.055936][ T6] usb 3-1: Product: syz [ 485.060156][ T6] usb 3-1: Manufacturer: syz [ 485.064956][ T6] usb 3-1: SerialNumber: syz [ 485.113415][T15597] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 485.213656][T17668] loop9: detected capacity change from 0 to 4096 [ 485.251793][T17668] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 485.303533][T17668] EXT4-fs (loop9): resizing filesystem from 512 to 0 blocks [ 485.311125][T17668] EXT4-fs warning (device loop9): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 485.365754][T17625] loop2: detected capacity change from 0 to 256 [ 485.387095][ T30] audit: type=1400 audit(1777724485.816:2810): avc: denied { ioctl } for pid=17667 comm="syz.9.2313" path="/21/file0/file0/blkio.bfq.io_merged_recursive" dev="loop9" ino=18 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 485.428402][T17625] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 485.455325][T15597] usb 5-1: device descriptor read/64, error -71 [ 485.711910][ T6] usb 3-1: 0:1 : does not exist [ 485.717007][ T6] usb 3-1: 0:2 : does not exist [ 485.990981][ T6] usb 3-1: USB disconnect, device number 10 [ 486.064485][T15597] usb 5-1: device descriptor read/64, error -71 [ 486.225438][ T733] udevd[733]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 486.352959][ T3600] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 486.352957][T15597] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 486.676318][T15597] usb 5-1: device descriptor read/64, error -71 [ 486.720645][ T714] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 486.769850][ T3600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.781404][ T3600] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.791451][ T3600] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 486.800680][ T3600] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.814051][T17691] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2319'. [ 486.869152][ T3600] usb 4-1: config 0 descriptor?? [ 486.994147][ T714] usb 3-1: Using ep0 maxpacket: 16 [ 487.151289][T17683] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 487.304167][ T714] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 487.313333][ T714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.314798][T15597] usb 5-1: device descriptor read/64, error -71 [ 487.321962][ T714] usb 3-1: Product: syz [ 487.332192][ T714] usb 3-1: Manufacturer: syz [ 487.337076][ T714] usb 3-1: SerialNumber: syz [ 487.357977][T17695] loop4: detected capacity change from 0 to 2048 [ 487.369559][ T3600] waltop 0003:172F:0501.0029: unknown main item tag 0x0 [ 487.376608][ T3600] waltop 0003:172F:0501.0029: unknown main item tag 0x0 [ 487.391271][ T3600] waltop 0003:172F:0501.0029: unknown main item tag 0x0 [ 487.399037][ T3600] waltop 0003:172F:0501.0029: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.3-1/input0 [ 487.475167][T15597] usb usb5-port1: attempt power cycle [ 487.880602][T17683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=17683 comm=syz.3.2316 [ 487.895435][ T6] usb 4-1: USB disconnect, device number 29 [ 488.021549][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2322'. [ 488.053500][T17708] xt_TPROXY: Can be used only with -p tcp or -p udp [ 488.060614][T17708] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2321'. [ 488.489767][T17713] netlink: 'syz.1.2324': attribute type 13 has an invalid length. [ 488.536928][ T30] audit: type=1400 audit(1777724488.763:2811): avc: denied { ioctl } for pid=17714 comm="syz.1.2325" path="socket:[40899]" dev="sockfs" ino=40899 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 488.548229][T17715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2325'. [ 488.587733][T17718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17718 comm=syz.1.2326 [ 488.590639][T17685] loop2: detected capacity change from 0 to 256 [ 488.709380][T17685] exfat: Unknown parameter '' [ 488.724853][T17723] loop3: detected capacity change from 0 to 1024 [ 488.780328][T17685] UDC core: couldn't find an available UDC or it's busy: -16 [ 488.788408][T17685] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 489.079432][T17723] EXT4-fs (loop3): Ignoring removed orlov option [ 489.120921][T17723] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 489.148300][T17731] loop9: detected capacity change from 0 to 512 [ 489.196817][T17731] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 489.211248][T17731] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.266042][T17738] loop3: detected capacity change from 0 to 1024 [ 489.306539][T17738] EXT4-fs (loop3): Unrecognized mount option "fowner=00000000000" or missing value [ 489.330432][T17740] 9pnet: Insufficient options for proto=fd [ 489.554546][T17745] xt_TPROXY: Can be used only with -p tcp or -p udp [ 489.561726][T17745] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2334'. [ 489.676315][T15597] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 489.701599][T17751] loop2: detected capacity change from 0 to 512 [ 489.708428][ T714] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 489.718783][ T714] usb 3-1: USB disconnect, device number 11 [ 489.735007][T17751] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 489.753607][T17751] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 489.943499][T15597] usb 10-1: Using ep0 maxpacket: 8 [ 490.324860][T15597] usb 10-1: config 135 has an invalid interface number: 230 but max is 0 [ 490.344462][T15597] usb 10-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 490.378711][T15597] usb 10-1: config 135 has no interface number 0 [ 490.396991][T15597] usb 10-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 490.419539][T15597] usb 10-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 490.444662][T15597] usb 10-1: config 135 interface 230 has no altsetting 0 [ 490.579188][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2339'. [ 490.796639][T15597] usb 10-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 490.873195][T15597] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.919848][T15597] usb 10-1: Product: syz [ 490.925282][T15597] usb 10-1: Manufacturer: syz [ 490.934447][T15597] usb 10-1: SerialNumber: syz [ 491.236555][ T533] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 491.312876][T17777] loop4: detected capacity change from 0 to 512 [ 491.321607][T17779] loop3: detected capacity change from 0 to 512 [ 491.338525][T17777] EXT4-fs (loop4): 1 truncate cleaned up [ 491.367225][T17777] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 491.398378][T17777] overlayfs: upper fs needs to support d_type. [ 491.410523][ T30] audit: type=1400 audit(1777724491.449:2812): avc: denied { write } for pid=17776 comm="syz.4.2344" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.432662][ T30] audit: type=1400 audit(1777724491.449:2813): avc: denied { add_name } for pid=17776 comm="syz.4.2344" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.454991][ T30] audit: type=1326 audit(1777724491.496:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.3.2345" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2212c50dd9 code=0x0 [ 491.485119][T17051] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 491.500849][T17051] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 491.503837][ T533] usb 3-1: Using ep0 maxpacket: 32 [ 491.520914][T17051] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 491.610920][T17786] loop4: detected capacity change from 0 to 256 [ 491.642641][T17786] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3ae73600, utbl_chksum : 0xe619d30d) [ 491.685435][ T533] usb 3-1: unable to get BOS descriptor or descriptor too short [ 491.952537][ T533] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 491.961628][ T533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.991201][ T533] usb 3-1: Product: syz [ 491.995549][ T533] usb 3-1: Manufacturer: syz [ 492.000165][ T533] usb 3-1: SerialNumber: syz [ 492.301300][T17792] loop3: detected capacity change from 0 to 8192 [ 492.318566][T17792] overlayfs: filesystem on './file0' not supported [ 492.387344][ T20] usb 10-1: USB disconnect, device number 8 [ 492.487143][ T533] usb 3-1: MIDIStreaming interface descriptor not found [ 492.793283][ T533] usb 3-1: USB disconnect, device number 12 [ 492.820502][ T361] udevd[361]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 492.837840][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'. [ 492.869531][T17801] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 492.884694][T17801] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 492.909748][T17801] loop4: detected capacity change from 0 to 512 [ 492.917322][T17803] loop9: detected capacity change from 0 to 4096 [ 492.941522][T17803] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 492.956309][T17801] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 492.979624][T17803] EXT4-fs (loop9): resizing filesystem from 512 to 0 blocks [ 493.006742][T17803] EXT4-fs warning (device loop9): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 493.112747][T17813] loop3: detected capacity change from 0 to 512 [ 493.188736][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2354'. [ 493.574681][ T533] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 493.592266][T17825] cgroup: Invalid name [ 494.025933][ T533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.044060][ T533] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 494.055168][T17833] loop4: detected capacity change from 0 to 256 [ 494.061584][ T533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.082080][ T533] usb 3-1: config 0 descriptor?? [ 494.217908][ T20] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 494.338201][T17817] loop2: detected capacity change from 0 to 512 [ 494.380710][ T3600] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 494.391599][T17817] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 494.407724][T17817] EXT4-fs (loop2): 1 truncate cleaned up [ 494.413528][T17817] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 494.453708][ T30] audit: type=1400 audit(1777724494.303:2815): avc: denied { ioctl } for pid=17816 comm="syz.2.2356" path="/10/file1/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 494.482992][ T30] audit: type=1400 audit(1777724494.303:2816): avc: denied { setattr } for pid=17816 comm="syz.2.2356" name="11000000000000000000000000000000" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 494.509811][ T30] audit: type=1400 audit(1777724494.303:2817): avc: denied { link } for pid=17816 comm="syz.2.2356" name="11000000000000000000000000000000" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 494.602925][ T533] usbhid 3-1:0.0: can't add hid device: -71 [ 494.609676][ T533] usbhid: probe of 3-1:0.0 failed with error -71 [ 494.649982][ T533] usb 3-1: USB disconnect, device number 13 [ 494.773929][ T3600] usb 5-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 494.785177][ T3600] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28935, setting to 64 [ 494.798450][ T3600] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.823035][T15597] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 494.944616][ T20] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.956035][ T20] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 494.965162][ T20] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.974187][ T20] usb 10-1: config 0 descriptor?? [ 494.998995][ T3600] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 495.008161][ T3600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.016340][ T3600] usb 5-1: Product: syz [ 495.020608][ T3600] usb 5-1: Manufacturer: syz [ 495.025256][ T3600] usb 5-1: SerialNumber: syz [ 495.039995][ T3600] usb 5-1: config 0 descriptor?? [ 495.084370][ T3600] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 495.169205][T15597] usb 4-1: not running at top speed; connect to a high speed hub [ 495.237105][T17849] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.244524][T17849] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.251993][T17849] device bridge_slave_0 entered promiscuous mode [ 495.258635][T15597] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 495.266860][T15597] usb 4-1: config 0 has no interface number 0 [ 495.272999][T15597] usb 4-1: config 0 interface 30 altsetting 13 has an invalid endpoint with address 0x0, skipping [ 495.283710][T15597] usb 4-1: config 0 interface 30 altsetting 13 has an invalid endpoint with address 0x0, skipping [ 495.294507][T15597] usb 4-1: config 0 interface 30 altsetting 13 has an invalid endpoint with address 0x0, skipping [ 495.305288][T15597] usb 4-1: config 0 interface 30 altsetting 13 endpoint 0x6 has invalid wMaxPacketSize 0 [ 495.315211][T15597] usb 4-1: config 0 interface 30 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 495.327369][T15597] usb 4-1: config 0 interface 30 altsetting 13 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 495.338628][T15597] usb 4-1: config 0 interface 30 altsetting 13 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 495.349767][T15597] usb 4-1: config 0 interface 30 altsetting 13 endpoint 0x8 has invalid maxpacket 1024, setting to 1023 [ 495.363791][T17833] UDC core: couldn't find an available UDC or it's busy: -16 [ 495.371217][T17833] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 495.380667][T15597] usb 4-1: config 0 interface 30 has no altsetting 0 [ 495.387986][T17815] loop9: detected capacity change from 0 to 512 [ 495.400074][T17849] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.400461][T17815] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 495.419682][ T3600] usb 5-1: USB disconnect, device number 5 [ 495.421917][T17849] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.435195][T17849] device bridge_slave_1 entered promiscuous mode [ 495.438557][T17815] EXT4-fs (loop9): 1 truncate cleaned up [ 495.450830][T17815] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 495.482768][T17815] FAULT_INJECTION: forcing a failure. [ 495.482768][T17815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.500084][T17815] CPU: 1 PID: 17815 Comm: syz.9.2357 Not tainted syzkaller #0 [ 495.507630][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.517707][T17815] Call Trace: [ 495.520987][T17815] [ 495.523919][T17815] __dump_stack+0x21/0x30 [ 495.528275][T17815] dump_stack_lvl+0x110/0x170 [ 495.533080][T17815] ? show_regs_print_info+0x20/0x20 [ 495.538285][T17815] ? __ia32_compat_sys_ioctl+0x900/0x900 [ 495.544036][T17815] dump_stack+0x15/0x20 [ 495.548200][T17815] should_fail+0x3c1/0x510 [ 495.552625][T17815] should_fail_usercopy+0x1a/0x20 [ 495.557650][T17815] _copy_from_user+0x20/0xd0 [ 495.562278][T17815] pending_reads_dispatch_ioctl+0x2df/0x1e70 [ 495.568260][T17815] ? ioctl_has_perm+0x1b8/0x4f0 [ 495.573119][T17815] ? pending_reads_poll+0x180/0x180 [ 495.578897][T17815] ? has_cap_mac_admin+0x370/0x370 [ 495.584035][T17815] ? vfs_write+0xc72/0xfd0 [ 495.586138][T15597] usb 4-1: New USB device found, idVendor=19d2, idProduct=1267, bcdDevice=4c.19 [ 495.588472][T17815] ? selinux_file_ioctl+0x3a0/0x4d0 [ 495.588501][T17815] ? selinux_file_alloc_security+0x120/0x120 [ 495.598198][T15597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.602815][T17815] ? mutex_unlock+0x8f/0x230 [ 495.612654][T15597] usb 4-1: Product: syz [ 495.616899][T17815] ? __fget_files+0x2c4/0x320 [ 495.630577][T17815] ? security_file_ioctl+0x84/0xa0 [ 495.635724][T17815] ? pending_reads_poll+0x180/0x180 [ 495.640954][T17815] __se_sys_ioctl+0x121/0x1a0 [ 495.645656][T17815] __x64_sys_ioctl+0x7b/0x90 [ 495.650360][T17815] x64_sys_call+0x2f/0x9a0 [ 495.653584][T15597] usb 4-1: Manufacturer: ь [ 495.654802][T17815] do_syscall_64+0x4c/0xa0 [ 495.659390][T15597] usb 4-1: SerialNumber: syz [ 495.663755][T17815] ? clear_bhb_loop+0x50/0xa0 [ 495.663783][T17815] ? clear_bhb_loop+0x50/0xa0 [ 495.663801][T17815] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 495.682868][T15597] usb 4-1: config 0 descriptor?? [ 495.683792][T17815] RIP: 0033:0x7ff727fe8dd9 [ 495.683815][T17815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.712978][T17815] RSP: 002b:00007ff726a43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.721419][T17815] RAX: ffffffffffffffda RBX: 00007ff728261fa0 RCX: 00007ff727fe8dd9 [ 495.729409][T17815] RDX: 00002000000000c0 RSI: 00000000c058671e RDI: 0000000000000007 [ 495.737428][T17815] RBP: 00007ff726a43090 R08: 0000000000000000 R09: 0000000000000000 [ 495.745526][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.753532][T17815] R13: 00007ff728262038 R14: 00007ff728261fa0 R15: 00007ffeac8537e8 [ 495.761528][T17815] [ 495.793574][T17849] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.800700][T17849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.808038][T17849] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.815284][T17849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.837480][T17863] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 495.847988][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.856053][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.863880][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.873656][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.882188][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.885247][ T20] usbhid 10-1:0.0: can't add hid device: -71 [ 495.889350][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.896072][ T20] usbhid: probe of 10-1:0.0 failed with error -71 [ 495.910259][ T20] usb 10-1: USB disconnect, device number 9 [ 495.919411][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.928173][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.935240][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.950141][T17861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=17861 comm=syz.1.2371 [ 495.964245][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 495.972537][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 495.989407][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 496.001963][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.010324][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 496.018274][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 496.027108][T15597] usb 4-1: USB disconnect, device number 30 [ 496.032268][T17849] device veth0_vlan entered promiscuous mode [ 496.040716][ T336] device bridge_slave_1 left promiscuous mode [ 496.046956][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.054812][ T336] device bridge_slave_0 left promiscuous mode [ 496.061434][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.070066][ T336] device veth1_macvtap left promiscuous mode [ 496.076121][ T336] device veth0_vlan left promiscuous mode [ 496.175619][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.184315][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.193719][T17849] device veth1_macvtap entered promiscuous mode [ 496.212476][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.221621][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.230497][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.239624][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.258713][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 496.274352][T17867] loop4: detected capacity change from 0 to 2048 [ 496.283206][T17868] loop7: detected capacity change from 0 to 2048 [ 497.647542][T17888] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.665702][T17888] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.691977][T17888] device bridge_slave_0 entered promiscuous mode [ 497.711105][T17888] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.730758][T17888] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.738664][T17888] device bridge_slave_1 entered promiscuous mode [ 497.787123][ T3600] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 497.835056][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2380'. [ 498.162981][T17897] loop3: detected capacity change from 0 to 256 [ 498.201738][T17888] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.208868][T17888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.216210][T17888] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.223262][T17888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.251923][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.260594][ T4226] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.279487][ T4226] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.311207][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.319985][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.321685][ T3600] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.327101][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.344160][ T3600] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 498.355544][ T3600] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 498.366532][ T3600] usb 5-1: config 1 interface 1 has no altsetting 0 [ 498.373725][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.382250][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.389352][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.397002][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.417880][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 498.427551][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.441286][T17888] device veth0_vlan entered promiscuous mode [ 498.450917][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 498.463892][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 498.471585][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 498.481497][T17888] device veth1_macvtap entered promiscuous mode [ 498.489067][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 498.497133][T15597] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 498.506947][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.518045][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 498.536006][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 498.544626][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.552951][ T3600] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.552981][ T3600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.553000][ T3600] usb 5-1: Product: syz [ 498.553014][ T3600] usb 5-1: Manufacturer: syz [ 498.565678][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 498.588124][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.596176][ T3600] usb 5-1: SerialNumber: syz [ 498.639217][T17901] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 498.642518][T17875] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 498.655925][T17901] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 498.666179][ T3600] cdc_mbim 5-1:1.0: skipping garbage [ 498.671738][ T3600] usb 5-1: selecting invalid altsetting 1 [ 498.678126][ T3600] usb 5-1: selecting invalid altsetting 0 [ 498.685485][T17901] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 498.697376][ T3600] usb 5-1: selecting invalid altsetting 0 [ 498.703154][ T30] audit: type=1400 audit(1777724498.271:2818): avc: denied { accept } for pid=17900 comm="syz.1.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 498.723761][ T3600] cdc_mbim 5-1:1.0: bind() failure [ 498.729483][T17901] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 498.738922][ T3600] usb 5-1: selecting invalid altsetting 0 [ 498.744820][ T3600] cdc_ncm: probe of 5-1:1.1 failed with error -22 [ 498.752013][ T3600] usb 5-1: selecting invalid altsetting 0 [ 498.766931][T17908] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2379'. [ 498.776264][ T3600] cdc_mbim: probe of 5-1:1.1 failed with error -22 [ 498.780483][T17905] netlink: 'syz.7.2384': attribute type 5 has an invalid length. [ 498.809075][T17905] APIC base relocation is unsupported by KVM [ 498.809901][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 498.825878][ T30] audit: type=1400 audit(1777724498.393:2819): avc: denied { mount } for pid=17904 comm="syz.7.2384" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 498.884298][T17913] loop7: detected capacity change from 0 to 256 [ 498.916150][T17916] loop0: detected capacity change from 0 to 2048 [ 498.930542][T15597] usb 4-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 498.944601][T15597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28935, setting to 64 [ 498.956022][T15597] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.336593][T15597] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 499.347198][T15597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.359669][T15597] usb 4-1: Product: syz [ 499.365099][T15597] usb 4-1: Manufacturer: syz [ 499.371573][T15597] usb 4-1: SerialNumber: syz [ 499.384364][T15597] usb 4-1: config 0 descriptor?? [ 499.433901][T15597] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 499.648676][T17897] UDC core: couldn't find an available UDC or it's busy: -16 [ 499.660546][T17897] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 499.675245][ T3600] usb 5-1: USB disconnect, device number 6 [ 499.685801][ T320] usb 4-1: USB disconnect, device number 31 [ 499.823432][T17931] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 499.906154][T17935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=17935 comm=syz.4.2389 [ 499.941338][T17939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 500.031311][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2392'. [ 500.181759][T17943] loop0: detected capacity change from 0 to 2048 [ 500.251871][T17943] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback. [ 500.270139][T17943] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.303158][T17943] overlayfs: failed to set xattr on upper [ 500.400296][T17951] loop0: detected capacity change from 0 to 256 [ 500.445165][T17888] ------------[ cut here ]------------ [ 500.450788][T17888] WARNING: CPU: 0 PID: 17888 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 500.459167][T17888] Modules linked in: [ 500.463266][T17888] CPU: 0 PID: 17888 Comm: syz-executor Not tainted syzkaller #0 [ 500.471478][T17888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 500.481993][T17888] RIP: 0010:drop_nlink+0xc5/0x110 [ 500.487121][T17888] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 03 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fb cd b2 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 500.507294][T17888] RSP: 0018:ffffc90001237ca8 EFLAGS: 00010293 [ 500.513837][T17888] RAX: ffffffff81b6fbe5 RBX: ffff888128d76ab0 RCX: ffff88811b8fe2c0 [ 500.521963][T17888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.530100][T17888] RBP: ffffc90001237cd0 R08: 0000000000000003 R09: 0000000000000004 [ 500.538234][T17888] R10: dffffc0000000000 R11: fffff52000246f84 R12: dffffc0000000000 [ 500.546316][T17888] R13: 1ffff110251aed5f R14: ffff888128d76af8 R15: 0000000000000000 [ 500.554408][T17888] FS: 0000555582e1b500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 500.563737][T17888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.570513][T17888] CR2: 0000555582e3e948 CR3: 000000012488c000 CR4: 00000000003506b0 [ 500.578589][T17888] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 500.586615][T17888] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 500.594698][T17888] Call Trace: [ 500.598209][T17888] [ 500.601155][T17888] shmem_rmdir+0x5b/0x90 [ 500.605459][T17888] vfs_rmdir+0x313/0x460 [ 500.609796][T17888] incfs_kill_sb+0x105/0x220 [ 500.614471][T17888] deactivate_locked_super+0xa0/0x100 [ 500.619898][T17888] deactivate_super+0xaf/0xe0 [ 500.624621][T17888] cleanup_mnt+0x45b/0x510 [ 500.629083][T17888] __cleanup_mnt+0x19/0x20 [ 500.633795][T17888] task_work_run+0x127/0x190 [ 500.638443][T17888] exit_to_user_mode_loop+0xd0/0xe0 [ 500.643987][T17888] exit_to_user_mode_prepare+0x87/0xd0 [ 500.649612][T17888] syscall_exit_to_user_mode+0x1a/0x30 [ 500.655326][T17888] do_syscall_64+0x58/0xa0 [ 500.659789][T17888] ? clear_bhb_loop+0x50/0xa0 [ 500.664596][T17888] ? clear_bhb_loop+0x50/0xa0 [ 500.669387][T17888] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 500.675812][T17888] RIP: 0033:0x7fd1c6635017 [ 500.680335][T17888] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 500.683436][ T6] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 500.700869][T17888] RSP: 002b:00007fff27e10b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 500.716779][T17888] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd1c6635017 [ 500.726810][T17888] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff27e10bf0 [ 500.734968][T17888] RBP: 00007fff27e10bf0 R08: 00007fff27e11bf0 R09: 00000000ffffffff [ 500.737155][T17956] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17956 comm=syz.1.2399 [ 500.744320][T17888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff27e11c80 [ 500.763611][T17888] R13: 00007fd1c66c9120 R14: 00000000000731e9 R15: 00007fff27e11cc0 [ 500.772086][T17888] [ 500.775199][T17888] ---[ end trace da4488fc194e632f ]--- [ 500.780858][T17888] ================================================================== [ 500.788943][T17888] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 500.795227][T17888] Write of size 4 at addr 0000000000000170 by task syz-executor/17888 [ 500.803496][T17888] [ 500.805849][T17888] CPU: 0 PID: 17888 Comm: syz-executor Tainted: G W syzkaller #0 [ 500.814892][T17888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 500.824973][T17888] Call Trace: [ 500.828284][T17888] [ 500.831248][T17888] __dump_stack+0x21/0x30 [ 500.835623][T17888] dump_stack_lvl+0x110/0x170 [ 500.840330][T17888] ? show_regs_print_info+0x20/0x20 [ 500.845556][T17888] ? __kasan_check_write+0x14/0x20 [ 500.850795][T17888] ? _raw_spin_lock+0x94/0xf0 [ 500.855508][T17888] ? _raw_spin_trylock_bh+0x150/0x150 [ 500.860912][T17888] ? ihold+0x20/0x60 [ 500.864835][T17888] kasan_report+0xe7/0x140 [ 500.869279][T17888] ? ihold+0x20/0x60 [ 500.873204][T17888] kasan_check_range+0x249/0x2a0 [ 500.878164][T17888] __kasan_check_write+0x14/0x20 [ 500.883131][T17888] ihold+0x20/0x60 [ 500.886893][T17888] vfs_rmdir+0x1f0/0x460 [ 500.891162][T17888] incfs_kill_sb+0x105/0x220 [ 500.895786][T17888] deactivate_locked_super+0xa0/0x100 [ 500.901192][T17888] deactivate_super+0xaf/0xe0 [ 500.905888][T17888] cleanup_mnt+0x45b/0x510 [ 500.910358][T17888] __cleanup_mnt+0x19/0x20 [ 500.914796][T17888] task_work_run+0x127/0x190 [ 500.919418][T17888] exit_to_user_mode_loop+0xd0/0xe0 [ 500.924645][T17888] exit_to_user_mode_prepare+0x87/0xd0 [ 500.930132][T17888] syscall_exit_to_user_mode+0x1a/0x30 [ 500.935612][T17888] do_syscall_64+0x58/0xa0 [ 500.940068][T17888] ? clear_bhb_loop+0x50/0xa0 [ 500.944767][T17888] ? clear_bhb_loop+0x50/0xa0 [ 500.949470][T17888] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 500.955470][T17888] RIP: 0033:0x7fd1c6635017 [ 500.959905][T17888] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 500.979537][T17888] RSP: 002b:00007fff27e10b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 500.987987][T17888] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd1c6635017 [ 500.995995][T17888] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff27e10bf0 [ 501.003994][T17888] RBP: 00007fff27e10bf0 R08: 00007fff27e11bf0 R09: 00000000ffffffff [ 501.012211][T17888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff27e11c80 [ 501.020220][T17888] R13: 00007fd1c66c9120 R14: 00000000000731e9 R15: 00007fff27e11cc0 [ 501.028564][T17888] [ 501.031622][T17888] ================================================================== [ 501.039693][T17888] Disabling lock debugging due to kernel taint [ 501.071243][T17888] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 501.079103][T17888] #PF: supervisor write access in kernel mode [ 501.085193][T17888] #PF: error_code(0x0002) - not-present page [ 501.091221][T17888] PGD 137f97067 P4D 137f97067 PUD 0 [ 501.096553][T17888] Oops: 0002 [#1] PREEMPT SMP KASAN [ 501.101791][T17888] CPU: 1 PID: 17888 Comm: syz-executor Tainted: G B W syzkaller #0 [ 501.110837][T17888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.120905][T17888] RIP: 0010:ihold+0x26/0x60 [ 501.125607][T17888] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 11 c6 b2 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 90 fb f1 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 91 [ 501.145336][T17888] RSP: 0018:ffffc90001237ce8 EFLAGS: 00010246 [ 501.151416][T17888] RAX: ffff88811b8fe200 RBX: 0000000000000000 RCX: ffff88811b8fe2c0 [ 501.159399][T17888] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 501.167472][T17888] RBP: ffffc90001237cf8 R08: 0000000000000003 R09: 0000000000000004 [ 501.175552][T17888] R10: dffffc0000000000 R11: fffffbfff0e18c4c R12: 1ffff1102246b538 [ 501.183540][T17888] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 501.191555][T17888] FS: 0000555582e1b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 501.200678][T17888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.207308][T17888] CR2: 0000000000000170 CR3: 000000012488c000 CR4: 00000000003506a0 [ 501.215386][T17888] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 501.223371][T17888] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 501.231354][T17888] Call Trace: [ 501.234647][T17888] [ 501.237596][T17888] vfs_rmdir+0x1f0/0x460 [ 501.241859][T17888] incfs_kill_sb+0x105/0x220 [ 501.246459][T17888] deactivate_locked_super+0xa0/0x100 [ 501.251847][T17888] deactivate_super+0xaf/0xe0 [ 501.256554][T17888] cleanup_mnt+0x45b/0x510 [ 501.260988][T17888] __cleanup_mnt+0x19/0x20 [ 501.265426][T17888] task_work_run+0x127/0x190 [ 501.270037][T17888] exit_to_user_mode_loop+0xd0/0xe0 [ 501.275248][T17888] exit_to_user_mode_prepare+0x87/0xd0 [ 501.280741][T17888] syscall_exit_to_user_mode+0x1a/0x30 [ 501.286210][T17888] do_syscall_64+0x58/0xa0 [ 501.290655][T17888] ? clear_bhb_loop+0x50/0xa0 [ 501.295347][T17888] ? clear_bhb_loop+0x50/0xa0 [ 501.300042][T17888] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 501.305976][T17888] RIP: 0033:0x7fd1c6635017 [ 501.310569][T17888] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 501.330455][T17888] RSP: 002b:00007fff27e10b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 501.338889][T17888] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd1c6635017 [ 501.346890][T17888] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff27e10bf0 [ 501.354876][T17888] RBP: 00007fff27e10bf0 R08: 00007fff27e11bf0 R09: 00000000ffffffff [ 501.362858][T17888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff27e11c80 [ 501.370841][T17888] R13: 00007fd1c66c9120 R14: 00000000000731e9 R15: 00007fff27e11cc0 [ 501.379001][T17888] [ 501.382122][T17888] Modules linked in: [ 501.386045][T17888] CR2: 0000000000000170 [ 501.390217][T17888] ---[ end trace da4488fc194e6330 ]--- [ 501.395677][T17888] RIP: 0010:ihold+0x26/0x60 [ 501.400198][T17888] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 11 c6 b2 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 90 fb f1 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 91 [ 501.419828][T17888] RSP: 0018:ffffc90001237ce8 EFLAGS: 00010246 [ 501.425909][T17888] RAX: ffff88811b8fe200 RBX: 0000000000000000 RCX: ffff88811b8fe2c0 [ 501.433898][T17888] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 501.441886][T17888] RBP: ffffc90001237cf8 R08: 0000000000000003 R09: 0000000000000004 [ 501.449871][T17888] R10: dffffc0000000000 R11: fffffbfff0e18c4c R12: 1ffff1102246b538 [ 501.457854][T17888] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 501.465843][T17888] FS: 0000555582e1b500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 501.474785][T17888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.481379][T17888] CR2: 0000000000000170 CR3: 000000012488c000 CR4: 00000000003506a0 [ 501.489370][T17888] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 501.497355][T17888] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 501.505343][T17888] Kernel panic - not syncing: Fatal exception [ 501.511521][T17888] Kernel Offset: disabled [ 501.515850][T17888] Rebooting in 86400 seconds..