last executing test programs: 2m34.579463518s ago: executing program 32 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003780)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x40004) r1 = fsopen(&(0x7f00000039c0)='efivarfs\x00', 0x0) fsmount(r1, 0x0, 0x2) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/4096) socket$inet(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000003880)=[{&(0x7f00000038c0)=""/194, 0xc2}], 0x1, 0xab, 0x0) write(0xffffffffffffffff, &(0x7f0000003500)='27', 0x2) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000003a00)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a40)={0x0, 0x10, &(0x7f0000003a80)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000003ac0)=0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003b80)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000003bc0)={r3, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 2m2.515853345s ago: executing program 3 (id=252): unshare(0x20020400) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x101000, 0x0) ioctl$int_in(r0, 0x40086610, &(0x7f0000000200)=0x40000) 2m2.208023577s ago: executing program 3 (id=255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x2, &(0x7f0000000980)=@raw=[@call={0x85, 0x0, 0x0, 0x99}, @exit], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x1c1b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x240) 1m59.218973262s ago: executing program 3 (id=267): openat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002880)=@caif=@util, 0x0) syz_mount_image$erofs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x18000c6, &(0x7f0000002e00)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESHEX=r2, @ANYBLOB="fb7a67e75bbc0f115e43f4672297f461170db637e12fcbd4345bb3575f34e905b10e4706c0ccf08e312d1bce938e1e9dcc1308332f7046eae5ae6800d1c4e504e8dbc2071db988f785a6b09c4ccb365868e9efecb6565632c7b3d85a59741151bc4b7888e532063a99980902915bd88f68e1dd5be67bd0db222695d5cbaba6cae81daf6912edf1a8d9946bbaaedee558f4646bdc0cf93a38289e07a573921d4bfa78c1aec30724fb97dd41fc99b7185e7a84ef0f", @ANYRES16], 0x0, 0x17d, &(0x7f00000029c0)="$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") 1m58.175222128s ago: executing program 33 (id=269): bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x9, 0x4, &(0x7f0000000f80)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xba, 0x72, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000fc0)='GPL\x00', 0x2, 0xffa0, &(0x7f0000001000)=""/149, 0x0, 0xe, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 1m58.145781091s ago: executing program 34 (id=268): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="91", 0x1}], 0x1}, 0x48043) r3 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f00000006c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x317e, 0x4) write$P9_RREAD(r2, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r2, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$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") r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) sendfile(r7, r7, &(0x7f00000001c0)=0x6, 0x8112) 1m58.123032193s ago: executing program 3 (id=274): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[], 0x0) r0 = syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1a04447, &(0x7f0000000480)=ANY=[], 0x0, 0x20d, &(0x7f0000000940)="$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") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) umount2(&(0x7f0000000cc0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000dc0)='./file0\x00') openat(r0, 0x0, 0x40, 0x128) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x42, 0x1ff) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r2, &(0x7f0000000f40)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./dev\x00', 0x1ff) 1m56.78829116s ago: executing program 3 (id=279): mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x1004040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x202, 0x0) fallocate(r0, 0x0, 0x8000000, 0x1000) 1m56.432608745s ago: executing program 3 (id=282): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) write$P9_RREAD(r1, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r1, &(0x7f0000000700)=ANY=[], 0x11b0) 1m55.977903982s ago: executing program 35 (id=282): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) write$P9_RREAD(r1, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r1, &(0x7f0000000700)=ANY=[], 0x11b0) 1m16.423940233s ago: executing program 8 (id=401): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="91", 0x1}], 0x1}, 0x48043) socket$caif_stream(0x25, 0x1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r5, 0x0, r2, 0x0, 0x317e, 0x4) write$P9_RREAD(r3, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r3, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$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") r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) sendfile(r7, r7, &(0x7f00000001c0)=0x6, 0x8112) 1m15.362266502s ago: executing program 8 (id=403): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000004, 0xc595, 0x0, 0x5, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000000ac0)={&(0x7f0000000040)=0x6, 0x5, 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.781560621s ago: executing program 8 (id=407): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x1c, 0x0, &(0x7f0000000600)=[@enter_looper, @increfs, @request_freeze={0x400c6313, 0x0, 0x1}], 0x100, 0x0, &(0x7f0000000640)}) 1m14.481092881s ago: executing program 8 (id=409): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1a04447, &(0x7f0000000480)=ANY=[], 0x0, 0x20d, &(0x7f0000000940)="$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") mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) umount2(&(0x7f0000000cc0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000dc0)='./file0\x00') mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r0, &(0x7f0000000f40)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./dev\x00', 0x1ff) 1m13.052268597s ago: executing program 8 (id=413): getdents(0xffffffffffffffff, &(0x7f0000000380)=""/129, 0x81) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000105c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x4, 0x105f5, &(0x7f0000020c00)="$eJzs3M1uG1UUAODr/DalPxFigQQSIwFSgrAVJ2kFG5SWVIiqqSKgC1bg2I7l1vZEsZOYrpDYsOAFKvEk7FnzHAhWSIgNEshzx5C0FLV1FDfN90njM3PnzvG5VjZn7EwAzqz55PffCuFSmAshTIYQLoSQ7RfyLbMWw6shhDdCCBOHtkI+/s/ATAjhfAjh0iB5zFnIT72zPnPz5oPrf3z74NYPv/Rff2t8qwbG7e0QQnsn7h+0Y0wbMd7Nxyv7zSy2V/fzGE+07+XHaYwH9a0sw0FlOK+SxZVGnJ/u7HUHcbtVqQ5io7mdje904ht29xvDPNkFdyu72XGtvpXFZjedPFx7/36M97u9mKeW5/sqSx96vWGM4/V+Pa5n514Wq51ePp7G+mr1/iDu57Ebh0M1bdWyOrae6SM+FW41O3v9ZL++222mneRKqfxeqXy1WN5Na/VefbVYadeuriYLjdZgWrFXr7TXGmnaaNVL1bS9mCw0qtViuZwsrNe3mpVOUi6XVkpLxSuL+d67yUe37yStWrIwiNebnb1es9VNttPdJF6xmCyXVt5fTN4sJ59ubCabn9y4sbH52Rfrn9++tvHxh/mkR8pKFpaXlpeL5aXicnnR+keyNuL1nG2FcRcAcPo8rv/fuThK/1/Q/wP/65T1/1ls5H3/U/b/zal8zU/Y/88OPyP9/4vf/z43658bz/q1b4zEHxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJl15+drr2U78/H4pXz8Yj70cn5cCCFMhBD++g+TYSafNZG9TuZ5ph8zf/qhGn4shCzD4D1m8+18CGEt3/68HM8BAAAAT2/q+2++jt16fJkfd0GcpHjTZuLCl8eUrxBCmJ7/9RiyhOGtpFdGr+rfbFOhP2KWYW3ZDaxzo1cVZbfcpo4r2xOZPBLOHQqFGCZOtBwAAOBEHO0ETrYLAQAA4CR9N+4CGI/s28z8t/j5D/hnY8i/EJw7cgQAAACcQv6lHgAAAF4wlx8dyvr/h5//98FPMT7b8/8iz/8DAACA50d8/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN/s3E1u2kAUAOAHBgr9UVHVHYehLNnTfcUJuuyyUq9RcZscBilHiCDSeAImgohgAwn6Psk2Y6w3z7B6M6MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Jx+Liejzv9/f+vGWa3raeZtAAAAgH1my8kofRiW7U/5/pd861tutyKiHRH7avcietGvxCxynO6B57vPcriLiF7u40M+PkbEj3w8fO2f/4cAAACAGzVfjKdltV6ehtdOiEvqpXP7868Xn2ofHa8VEd3h/WnJdKpRNv1+f2WUwaEvitTFn9Ny23jKLQ1gNTYmlYbcOk1FO0qxc+lXLq3ycvy/DgAAvBu7lcBlqxAAAAAu6fe1E+A60mxmXotfzgWnlffbCcHBTgsAAAB4qw6uiN6uZgYAAABuV6r/m9r/r6r5/f8MVgAAAMCpyv3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKfZcjKaL8bTunFW63qaeRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtmfdxQIgTAIg73rO5O5/2GlQVNTkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAN7/7y/+JqXEmmXttLD2PJGunxtapsXduHP1hfP0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCLfvfL/4mpcSaZO20sHY8ka1eNravG3oPG0YPx9m8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYueOeduo4gCAv/PZbkIFHEHKQBYQAwzQNKRDGC2VhQEpfIModUvAxaiNUFsViYwdWGBClVAZWekn4At0AwWpA0uHDJEogjnone/sSxusoMKd2/x+0t/v78vp3nu2YuV/78UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDa703yND5ko7z1yHm7D29uVtto+GA3ixHzpJbRPr2SxaZHAAAAwEmQlvV9CGF9r7cU21aW1/+d8pxY8995fpSX9fyjdX/Znr9/OytjuHDtl3FH2aifeNGLW4P+2dpmOBsOTv3zz148/PT3jx87o52/8vm9lzR/Q1rv77y838lfz+Sre/fe6+bplD4AgGadKdsiKf8eiu1KkwMD4Fk0f9TBdhGhUv+nWa3jAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjE/k44XeZJCOGV9iSPdh/e3DyqPX//dlbGzz+9dqt6zXiJTgjh4tagf7bGuTTs19++PT31hKvXb3yyMRj0r0imJnPhCa/zwSzMQnL8pPjQedL3fdaS1nF/8f/3zyYAAE6YThGxrl/f6y3FY8lCCAffH67/36jk4Zj1/xd3ej9OepobZ7H+X6lldk+H5e3Lny1fvX7j7a3LG5f6l/qfrqydWzu3uvbu6tpyfq9k+YTdMQEAAOA/1y2iWv+3Fh5f/3+ukodj1v/tWwc/VPtKx+v/SQhf1jbFmTdZ9Gt6JAAAACfbS6/+9UdyxPGk2w3XNra3r6yMHsfP3xk9NjDUf+1UEdX6P11oelQAAABAHfZ3kkPr/xcqeZiy/j98sJuVcfej1U71mmkIYb7Y/39mczi4UN90Zlod/3Lc9BwBAABo1nwR1fX/Tr7/vzXe8tAKIbz5+igvv5Fr2v7/WPvH9s/1rz+f9DR8Ia18/99qnZOcQa3F0f2QvF0Mob3Y9IgAAAB4ls0VEYv9D/d6S3e/e+ubrv3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M3+/NsmDMRxHP358tdtMkJ6S0lmSJMqCiOAkSxZ8gwMwEI0VLQWi8AKIOBc0xmK95rvx9YVdwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN07XD3xEBFFpCFTpN/F++4xIp4iLfv+5+WcxWq/7V4vOVlv/nK+xf9HGRFlFGM8BwBgdNWwOebP+UfT1p+n76atv/J+562mXTu71YUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwVAAD//7m9SZk=") 1m11.824051172s ago: executing program 8 (id=417): r0 = inotify_init() openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20000, 0x105) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2d, &(0x7f00000006c0)=0xb1e0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) capset(&(0x7f0000000700)={0x20080522}, 0x0) r8 = syz_open_dev$sg(0x0, 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000007c0)={0x0, 0x8, 0xa6}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc008011}, 0x20000000) 1m11.822301432s ago: executing program 5 (id=418): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f0000000ac0)={&(0x7f0000000040)=0x6, 0x5, 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m11.172171118s ago: executing program 36 (id=417): r0 = inotify_init() openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20000, 0x105) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2d, &(0x7f00000006c0)=0xb1e0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) capset(&(0x7f0000000700)={0x20080522}, 0x0) r8 = syz_open_dev$sg(0x0, 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000007c0)={0x0, 0x8, 0xa6}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc008011}, 0x20000000) 1m11.146650061s ago: executing program 5 (id=422): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.868154s ago: executing program 5 (id=424): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1a04447, &(0x7f0000000480)=ANY=[], 0x0, 0x20d, &(0x7f0000000940)="$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") mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) umount2(&(0x7f0000000cc0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000dc0)='./file0\x00') mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r0, &(0x7f0000000f40)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./dev\x00', 0x1ff) 1m9.607737128s ago: executing program 5 (id=428): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10e, &(0x7f0000001640), 0x3, 0x470, &(0x7f0000000100)="$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") ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@dev={0xac, 0x14, 0x14, 0x2b}}]}, @ssrr={0x89, 0xf, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x100, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000700)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000800), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000840), 0x80002c1, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xffffff80, 0xf, 0x1010, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000900)='./file2\x00', 0x8000, &(0x7f0000000a80)={[{@nodioread_nolock}], [{@dont_hash}, {@appraise}, {@fowner_gt}, {@obj_type={'obj_type', 0x3d, '-+'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x38, 0x61, 0x34, 0x37, 0x61, 0x61], 0x2d, [0x2e79b96a6bfc129, 0x30, 0x66, 0x51], 0x2d, [0x39, 0x34, 0x34, 0x38], 0x2d, [0x36, 0x63, 0x30, 0x32], 0x2d, [0x33, 0x66, 0x34, 0x38, 0x64, 0x34, 0x35, 0x65]}}}]}, 0x3, 0x542, &(0x7f00000010c0)="$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") syz_mount_image$exfat(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0x2000801c, &(0x7f0000000f80)=ANY=[], 0x8, 0x1545, &(0x7f0000001680)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r4, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="28000000110001000000000000000500fc0100000000008000000000000000016197e27c0a9814a7778a7b99b6d8c922a9f3ed22ae96d6911ce03f8717bf0f90f7ee2e77527ae363afb395998583eb41e7a0ae8534458f18ed1e2fc6414a86cbcde875c1743b7d0ae8f8fb2089a8769cab897f93f390a958affcbc38010beb6c235650d34114ccb287577d798331486c0cf52d139edb489aa05e0772451cba431c843b41fcb636093df8d3625bd253826495f7a9f9dcaea73e9c22b6a3d95c8f541b21a743fd4a2249607c2b7e030bf0ab87454b473158ba02c53e3e9eda170225779b21f889e38b7bdc2a90d0b629ada9e8e1cc00"/258], 0x28}}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002fc0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000003000)='./dev\x00', &(0x7f0000003040)='devtmpfs\x00', 0x0, 0x0) 1m6.493277525s ago: executing program 5 (id=437): openat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000002880)=@caif=@util, 0x0) syz_mount_image$erofs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x18000c6, &(0x7f0000002e00)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESHEX=r2, @ANYBLOB="fb7a67e75bbc0f115e43f4672297f461170db637e12fcbd4345bb3575f34e905b10e4706c0ccf08e312d1bce938e1e9dcc1308332f7046eae5ae6800d1c4e504e8dbc2071db988f785a6b09c4ccb365868e9efecb6565632c7b3d85a59741151bc4b7888e532063a99980902915bd88f68e1dd5be67bd0db222695d5cbaba6cae81daf6912edf1a8d9946bbaaedee558f4646bdc0cf93a38289e07a573921d4bfa78c1aec30724fb97dd41fc99b7185e7a84ef0f", @ANYRES16], 0x0, 0x17d, &(0x7f00000029c0)="$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") 1m5.887960267s ago: executing program 5 (id=441): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="91", 0x1}], 0x1}, 0x48043) r3 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f00000006c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x317e, 0x4) write$P9_RREAD(r2, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r2, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$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") r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) sendfile(r7, r7, &(0x7f00000001c0)=0x6, 0x8112) 1m5.403728966s ago: executing program 37 (id=441): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="91", 0x1}], 0x1}, 0x48043) r3 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x80705864, &(0x7f00000006c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x317e, 0x4) write$P9_RREAD(r2, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r2, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) sendfile(r7, r7, &(0x7f00000001c0)=0x6, 0x8112) 50.137654678s ago: executing program 6 (id=502): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f00000006c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r6, 0x0, r2, 0x0, 0x317e, 0x4) write$P9_RREAD(r3, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r3, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) sendfile(r8, r8, &(0x7f00000001c0)=0x6, 0x8112) 49.006371104s ago: executing program 6 (id=507): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000000)='r:s/p ./file0:0\f\\\"', 0x12) 48.802013425s ago: executing program 6 (id=508): syz_clone3(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x1, @loopback, 0x80}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r2, 0xc61}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 48.586672707s ago: executing program 6 (id=510): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1a04447, &(0x7f0000000480)=ANY=[], 0x0, 0x20d, &(0x7f0000000940)="$eJzsmb9rFEEUx78zu7m7RBFEsLAxYIoIyd7unoqNYPwLhMRfnYdZQ3STk90VcgGRYGNj63/gv2ARECzs7NJqoYJo4YGNlcXIzM7uTvaH5jTBIu8DN/OdmTfvzbwbXrMgCOLQ8unjjw/PrlxcmgNwFDNo6/mvVmHDDfv3HS3evXizfuzRdtkfGzO+DeD1goVEj4WiWJ/R/RJErq+B46zWN8DgaH0bHNe1DsBwS+t7hh5MahEGzp1BuHx3NQxc2Xiy8WXTK59vtMWwDEBeXVi7zx8PN+/3wzCI4mFHeY30zITI4uQzpnGDeIXyriCKzXitav7s0QLHJSN/8v+6+fTJlhw7EI9l74Ln+fPA4WndA8NilhO04ThOkRLj/qfswr9Vf/8/ihM1SztHgD1uH0MwKHF8/jKajed+7+dn09I09vOoZdHSf/EBhvhrIf5b9Oy57YtDZsxMSsFMzydH22+ruz4f5AWn65eef//yUF76X0NA1+zK0s5U1ViItGDs7a2i+a3m9WlXyZL1w4adj7vJ2oNuPNycX13rrwQrwbrv9y6451z3vN9VhSht0YSNjqpPU4b/iQbbFmtho58kkbcBJJGXj/20NSru4svBN7WHq/rHMXsm9cGyGtyuj8H0j6teqlmr8fAEQRAEQRAEQRAEQRAEQRBjcRpMf0UTLP+gVsW/qqx/BQAA//9LzlT6") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) umount2(&(0x7f0000000cc0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000dc0)='./file0\x00') mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r1, &(0x7f0000000f40)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./dev\x00', 0x1ff) 47.446554154s ago: executing program 6 (id=515): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="91", 0x1}], 0x1}, 0x48043) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f00000006c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r6, 0x0, r2, 0x0, 0x317e, 0x4) write$P9_RREAD(r3, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r3, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$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") r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) sendfile(r8, r8, &(0x7f00000001c0)=0x6, 0x8112) 47.408153398s ago: executing program 7 (id=516): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000000)='r:s/p ./file0:0\f\\\"', 0x12) 47.119526717s ago: executing program 7 (id=517): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000240)={0x0, r1}) read$eventfd(r1, &(0x7f0000000280), 0x8) writev(r1, &(0x7f00000002c0), 0x0) 46.812223808s ago: executing program 6 (id=518): syz_clone3(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x1, @loopback, 0x80}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r2, 0xc61}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 46.411802809s ago: executing program 38 (id=518): syz_clone3(0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x1, @loopback, 0x80}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r2, 0xc61}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 46.051744136s ago: executing program 7 (id=522): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) 45.850284577s ago: executing program 7 (id=523): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1a04447, &(0x7f0000000480)=ANY=[], 0x0, 0x20d, &(0x7f0000000940)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) umount2(&(0x7f0000000cc0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000dc0)='./file0\x00') mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r1, &(0x7f0000000f40)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./dev\x00', 0x1ff) 45.084480505s ago: executing program 7 (id=525): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000000)='r:s/p ./file0:0\f\\\"', 0x12) 44.600037565s ago: executing program 7 (id=527): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r2, 0x0, 0x48043) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f00000006c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r6, 0x0, r2, 0x0, 0x317e, 0x4) write$P9_RREAD(r3, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r3, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$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") r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) sendfile(r8, r8, &(0x7f00000001c0)=0x6, 0x8112) 44.125108254s ago: executing program 39 (id=527): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r2, 0x0, 0x48043) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f00000006c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r6, 0x0, r2, 0x0, 0x317e, 0x4) write$P9_RREAD(r3, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r3, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) sendfile(r8, r8, &(0x7f00000001c0)=0x6, 0x8112) 7.334467929s ago: executing program 2 (id=723): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000600)=[@enter_looper, @increfs], 0x100, 0x0, &(0x7f0000000640)}) 7.175918436s ago: executing program 2 (id=726): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 6.874357376s ago: executing program 2 (id=727): r0 = inotify_init() openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20000, 0x105) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2d, &(0x7f00000006c0)=0xb1e0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) capset(&(0x7f0000000700)={0x20080522}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000780), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000007c0)={0x0, 0x8, 0xa6}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc008011}, 0x20000000) 6.731785461s ago: executing program 0 (id=730): r0 = inotify_init() openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20000, 0x105) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2d, &(0x7f00000006c0)=0xb1e0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) capset(&(0x7f0000000700)={0x20080522}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000780), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000007c0)={0x0, 0x8, 0xa6}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc008011}, 0x20000000) 6.589527596s ago: executing program 2 (id=731): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1a04447, &(0x7f0000000480)=ANY=[], 0x0, 0x20d, &(0x7f0000000940)="$eJzsmb9rFEEUx78zu7m7RBFEsLAxYIoIyd7unoqNYPwLhMRfnYdZQ3STk90VcgGRYGNj63/gv2ARECzs7NJqoYJo4YGNlcXIzM7uTvaH5jTBIu8DN/OdmTfvzbwbXrMgCOLQ8unjjw/PrlxcmgNwFDNo6/mvVmHDDfv3HS3evXizfuzRdtkfGzO+DeD1goVEj4WiWJ/R/RJErq+B46zWN8DgaH0bHNe1DsBwS+t7hh5MahEGzp1BuHx3NQxc2Xiy8WXTK59vtMWwDEBeXVi7zx8PN+/3wzCI4mFHeY30zITI4uQzpnGDeIXyriCKzXitav7s0QLHJSN/8v+6+fTJlhw7EI9l74Ln+fPA4WndA8NilhO04ThOkRLj/qfswr9Vf/8/ihM1SztHgD1uH0MwKHF8/jKajed+7+dn09I09vOoZdHSf/EBhvhrIf5b9Oy57YtDZsxMSsFMzydH22+ruz4f5AWn65eef//yUF76X0NA1+zK0s5U1ViItGDs7a2i+a3m9WlXyZL1w4adj7vJ2oNuPNycX13rrwQrwbrv9y6451z3vN9VhSht0YSNjqpPU4b/iQbbFmtho58kkbcBJJGXj/20NSru4svBN7WHq/rHMXsm9cGyGtyuj8H0j6teqlmr8fAEQRAEQRAEQRAEQRAEQRBjcRpMf0UTLP+gVsW/qqx/BQAA//9LzlT6") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000cc0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000dc0)='./file0\x00') mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r1, &(0x7f0000000f40)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./dev\x00', 0x1ff) 6.028566313s ago: executing program 0 (id=732): r0 = inotify_init() openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20000, 0x105) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2d, &(0x7f00000006c0)=0xb1e0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) capset(&(0x7f0000000700)={0x20080522}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000780), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000007c0)={0x0, 0x8, 0xa6}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc008011}, 0x20000000) 5.716053065s ago: executing program 0 (id=733): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000240)={0x0, r1}) read$eventfd(r1, &(0x7f0000000280), 0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="569534ab1bbe0e", 0x7}], 0x1) 5.678596649s ago: executing program 9 (id=734): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x4) mount(0x0, 0x0, &(0x7f0000000800)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000880)='27', 0x2) getdents(r0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000008c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) 5.3760323s ago: executing program 4 (id=737): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1404c, &(0x7f00000009c0)={[{@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@inlinecrypt}, {@oldalloc}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@test_dummy_encryption_v1}, {@noblock_validity}]}, 0x5, 0x4a2, &(0x7f0000000f40)="$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") sendmsg$unix(0xffffffffffffffff, 0x0, 0x24008080) openat(r0, 0x0, 0x400, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000015c0)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x2) getdents(r1, 0x0, 0x54) 5.37518944s ago: executing program 2 (id=738): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x80) io_setup(0x10, &(0x7f0000000800)=0x0) eventfd(0x80000000) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4000000) io_submit(r1, 0x1, &(0x7f0000003c00)=[&(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x0, 0x0, 0x500000000000}]) 5.161739722s ago: executing program 1 (id=739): timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f0000000340), &(0x7f0000000380)) 4.972195911s ago: executing program 1 (id=740): r0 = syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xccd, 0xb1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xa7, 0x0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 4.971900591s ago: executing program 2 (id=741): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="91", 0x1}], 0x1}, 0x48043) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f00000006c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r6, 0x0, r2, 0x0, 0x317e, 0x4) write$P9_RREAD(r3, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r3, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$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") r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) sendfile(r8, r8, &(0x7f00000001c0)=0x6, 0x8112) 4.513280028s ago: executing program 40 (id=741): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="91", 0x1}], 0x1}, 0x48043) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f00000006c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r6, 0x0, r2, 0x0, 0x317e, 0x4) write$P9_RREAD(r3, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r3, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) sendfile(r8, r8, &(0x7f00000001c0)=0x6, 0x8112) 4.500562259s ago: executing program 0 (id=743): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000800), &(0x7f0000000840)='./file2\x00', 0x0, &(0x7f0000000880)=ANY=[], 0xfd, 0x1501, &(0x7f0000000f40)="$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") mknod$loop(&(0x7f0000002480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000002580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd3) syz_mount_image$vfat(&(0x7f0000002680), &(0x7f00000026c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814c61, 0x0, 0x40, 0x0, &(0x7f00000027c0)) syz_mount_image$vfat(&(0x7f0000002800), &(0x7f0000002840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000002940)) mknod$loop(&(0x7f0000002980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000002a80), &(0x7f0000002ac0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x215d030, 0x0, 0x40, 0x0, &(0x7f0000002bc0)) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x1, 0x0) 4.4926232s ago: executing program 9 (id=744): r0 = inotify_init() openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20000, 0x105) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2d, &(0x7f00000006c0)=0xb1e0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) capset(&(0x7f0000000700)={0x20080522}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000780), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000007c0)={0x0, 0x8, 0xa6}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc008011}, 0x20000000) 4.490265s ago: executing program 4 (id=745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000600)=[@enter_looper, @request_freeze={0x400c6313, 0x0, 0x1}], 0x100, 0x0, &(0x7f0000000640)}) 4.088730921s ago: executing program 4 (id=746): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000200)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="91", 0x1}], 0x1}, 0x48043) r4 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r4, 0x80705864, &(0x7f00000006c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000680)={0x7, 0x1b, 0x2}, 0xffffff9a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) splice(r6, 0x0, r2, 0x0, 0x317e, 0x4) write$P9_RREAD(r3, &(0x7f00000006c0)=ANY=[], 0xb) write$tun(r3, &(0x7f0000000700)=ANY=[], 0x11b0) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0\x00', 0x1800c10, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="da2b390afffdae51adf4f4ec951acb4c1a2531de6b3ced9fe28b255886754b9145c212602fe6d01a5b806e97c283b8d6bc499a5f88f3eb59ff03960c3bf37fc9e0240172d5a27826746b9d786ff85527f8c0f02144cadada1bb78ebd3fc9a9ba8a786522ee88b20b841ca76bfb36121bc4bb8cfaf8f41e0547c93d096893e57ae6fd2ce133ea46cd0ecd3426713c99683603908f5cb68739e0d86e385651cb473b5067fb0ca8938d03e080eb6a9f2e", @ANYRES8=0x0, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b29908c4a774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8], 0x1, 0x304, &(0x7f0000000bc0)="$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") r8 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000100)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x5, {0x200006, 0x9, 0x40, 0x8000005, 0x4000000000000006, 0xd616, 0x7ff, 0x40, 0xfff, 0xa000, 0x8, 0x0, 0xee00, 0x6d, 0x5}}, {0x0, 0xa}}}, 0xa0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) sendfile(r8, r8, &(0x7f00000001c0)=0x6, 0x8112) 3.956081935s ago: executing program 9 (id=747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2", 0x51}, {0x0}, {&(0x7f0000000280)}], 0x5, 0x4, 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setuid(0xee00) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.370848025s ago: executing program 0 (id=748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r0}, &(0x7f0000001480), &(0x7f00000014c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.369951175s ago: executing program 9 (id=749): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1a04447, &(0x7f0000000480)=ANY=[], 0x0, 0x20d, &(0x7f0000000940)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), 0x1, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000cc0)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), 0x0, &(0x7f0000000d80)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000dc0)='./file0\x00') mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./proc/thread-self/fail-nth\x00', 0x2, 0x10) write(r1, &(0x7f0000000f40)='7', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./dev\x00', 0x1ff) 3.256914767s ago: executing program 4 (id=750): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e000000000000000c", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000005f2ffffff00"/28], 0x31) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x6, r0}, 0x38) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0xa010}) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4984, &(0x7f0000000840)={0x0, 0xc5, 0x24, 0x2, 0x32a}, &(0x7f00000008c0), &(0x7f0000000900), 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000600)='./dm0\x00', 0x6180, r3) r4 = openat$dm_dev(0xffffffffffffff9c, &(0x7f00000006c0)='./dm0\x00', 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, 0x0) 2.697215124s ago: executing program 0 (id=751): openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) ioctl$DM_DEV_CREATE(0xffffffffffffffff, 0xc138fd03, &(0x7f0000004b80)={0x4, 0x0, 0x0, 0x138, 0xfcbe, 0x0, 0x0, 0x8800, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000340)={0xfffffffe, 0x2, 0x1, 0x8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x6, 0x30, @empty, @empty, 0x40, 0x20, 0x0, 0xa7a}}) ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x220, 0x138, 0x1, 0x0, 0x71f17c35bc64209b, 0x0, 0x0, @by_dev={r3}, [@verity={0x0, 0x40, 0x0, 0xe8, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '512', 0x20, '512', 0x20, 0x36f, 0x20, 0x3ee, 0x20, 'blake2b-256', 0x20, @hex16=[0x54, 0x64, 0x35, 0x34, 0x66, 0x65, 0x62, 0x35, 0x36, 0x30, 0x64, 0x61, 0x35, 0x66, 0x38, 0x66, 0x64, 0x39, 0x30, 0x61, 0x62, 0x66, 0x30, 0x63, 0x34, 0x64, 0x31, 0x39, 0x34, 0x3, 0x35, 0x32], 0x20, @none, ' 2 ignore_zero_blocks check_at_most_once'}}]}) 2.696598734s ago: executing program 4 (id=752): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000240)={0x0, r1}) read$eventfd(r1, &(0x7f0000000280), 0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="569534ab1bbe0e", 0x7}], 0x1) 2.679956586s ago: executing program 9 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./proc\x00', 0x4) mount(0x0, 0x0, &(0x7f0000000800)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000880)='27', 0x2) getdents(r0, 0x0, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000008c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) 1.912255414s ago: executing program 1 (id=754): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000004, &(0x7f0000000080)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000180)="$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") rename(&(0x7f0000000500)='./file2\x00', &(0x7f0000000dc0)='./file1\x00') 1.912107784s ago: executing program 9 (id=755): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x10, 0x0, &(0x7f0000000600)=[@request_freeze={0x400c6313, 0x0, 0x1}], 0x100, 0x0, &(0x7f0000000640)}) 1.912036814s ago: executing program 41 (id=755): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x10, 0x0, &(0x7f0000000600)=[@request_freeze={0x400c6313, 0x0, 0x1}], 0x100, 0x0, &(0x7f0000000640)}) 1.634325063s ago: executing program 4 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f0000003080)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1.634016153s ago: executing program 1 (id=757): openat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002cc0), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x18000c6, &(0x7f0000002e00)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESHEX=r2, @ANYBLOB="fb7a67e75bbc0f115e43f4672297f461170db637e12fcbd4345bb3575f34e905b10e4706c0ccf08e312d1bce938e1e9dcc1308332f7046eae5ae6800d1c4e504e8dbc2071db988f785a6b09c4ccb365868e9efecb6565632c7b3d85a59741151bc4b7888e532063a99980902915bd88f68e1dd5be67bd0db222695d5cbaba6cae81daf6912edf1a8d9946bbaaedee558f4646bdc0cf93a38289e07a573921d4bfa78c1aec30724fb97dd41fc99b7185e7a84ef0f", @ANYRES16], 0x0, 0x17d, &(0x7f00000029c0)="$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") 263.973633ms ago: executing program 1 (id=758): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000380)="1ce0", 0xffeb, 0x0, &(0x7f00000003c0)={0x2, 0x0, @private}, 0x10) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/210, 0xd2}], 0x1}, 0x5}], 0x1, 0x10060, 0x0) 0s ago: executing program 1 (id=759): r0 = inotify_init() openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20000, 0x105) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2d, &(0x7f00000006c0)=0xb1e0, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x0}) capset(&(0x7f0000000700)={0x20080522}, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000780), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000007c0)={0x0, 0x8, 0xa6}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc008011}, 0x20000000) kernel console output (not intermixed with test programs): V_CHANGE): veth1_to_bond: link becomes ready [ 145.027275][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.056601][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.081031][ T5342] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 145.123452][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.165539][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.194571][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.216515][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.232282][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.252736][ T5305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.278346][ T5305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.306807][ T5342] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 145.318054][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.336247][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.355609][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.364510][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.395979][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.439921][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.683122][ T5342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.691873][ T5501] hsr0: VLAN not yet supported [ 145.745546][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.773760][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.817737][ T5342] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.870553][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.882933][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.945836][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.953012][ T5189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.977099][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.003399][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.022010][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.041858][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.049159][ T5189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.083509][ T5506] loop5: detected capacity change from 0 to 128 [ 146.135592][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.193422][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.227443][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.247480][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.287888][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.326580][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.366190][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.391093][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.425698][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.457955][ T5342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.469379][ T5517] program syz.0.330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.496300][ T5342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.509766][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.519562][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.540421][ T5520] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.329'. [ 146.560693][ T5520] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 146.596977][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.626027][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.664682][ T5311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.692631][ T5305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.721035][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.745901][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.957836][ T5528] loop5: detected capacity change from 0 to 128 [ 147.061610][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 147.061627][ T27] audit: type=1326 audit(1793793661.014:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5529 comm="syz.0.332" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0225d9fb19 code=0x0 [ 147.495305][ T5534] block device autoloading is deprecated and will be removed. [ 147.637099][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.688726][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.712734][ T5342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.364813][ T5571] loop0: detected capacity change from 0 to 16 [ 148.378870][ T5571] erofs: (device loop0): mounted with root inode @ nid 36. [ 148.451590][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.659722][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.037060][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.094955][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.217199][ T4948] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.241545][ T5311] device veth0_vlan entered promiscuous mode [ 149.279631][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.306473][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.446971][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.520165][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.589274][ T5305] device veth0_vlan entered promiscuous mode [ 149.891197][ T5581] loop5: detected capacity change from 0 to 128 [ 151.231261][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.441890][ T5585] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 152.504947][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.810124][ T5583] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.207017][ T5311] device veth1_vlan entered promiscuous mode [ 153.335644][ T4502] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.801305][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.828607][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.999313][ T5305] device veth1_vlan entered promiscuous mode [ 154.147052][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.166160][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.244707][ T5311] device veth0_macvtap entered promiscuous mode [ 154.299448][ T5311] device veth1_macvtap entered promiscuous mode [ 154.432944][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.521089][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.588023][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.619978][ T5595] loop5: detected capacity change from 0 to 16 [ 154.650414][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.695181][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.793004][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.825317][ T5595] erofs: (device loop5): mounted with root inode @ nid 36. [ 154.874500][ T5311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.913415][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.931081][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.960681][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.987360][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.004087][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.041997][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.069715][ T5305] device veth0_macvtap entered promiscuous mode [ 155.099891][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.137865][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.185928][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.234661][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.271789][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.300300][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.327585][ T5311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.345588][ T5305] device veth1_macvtap entered promiscuous mode [ 155.367903][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.397740][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.430388][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.466037][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.474935][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.533325][ T5311] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.564258][ T5311] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.594722][ T5311] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.603873][ T5311] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.642400][ T5342] device veth0_vlan entered promiscuous mode [ 155.675968][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.702837][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.721014][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.746413][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.791054][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.803029][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.816405][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.837296][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.858041][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.885213][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.905237][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.925480][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.947434][ T5305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.963800][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.980060][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.001194][ T5342] device veth1_vlan entered promiscuous mode [ 156.052209][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.085850][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.115164][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.145271][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.165194][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.185234][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.212970][ T5305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.227233][ T5305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.241210][ T5618] program syz.0.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.252592][ T5305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.262143][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.272664][ T5573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.336868][ T5305] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.348434][ T5305] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.357643][ T5305] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.385241][ T5305] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.478231][ T5573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.493782][ T5573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.528116][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.553159][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.582604][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.658304][ T5625] loop0: detected capacity change from 0 to 16 [ 156.754977][ T5573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.869009][ T5573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.460676][ T5625] erofs: (device loop0): mounted with root inode @ nid 36. [ 157.503532][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.541459][ T5342] device veth0_macvtap entered promiscuous mode [ 157.661667][ T5342] device veth1_macvtap entered promiscuous mode [ 157.746003][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.778758][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.796104][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.827327][ T5630] loop0: detected capacity change from 0 to 1024 [ 157.835638][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.864009][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.894772][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.914404][ T5630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 157.944313][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.970816][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.015477][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.050971][ T5638] binder: 5634:5638 unknown command 1074553619 [ 158.057337][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.092737][ T5638] binder: 5634:5638 ioctl c0306201 2000000005c0 returned -22 [ 158.112958][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.113183][ T5643] binder: 5634:5643 unknown command 1074553620 [ 158.148312][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.173428][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 158.190058][ T5638] binder: 5634:5638 ioctl 400c620e 2000000008c0 returned -22 [ 158.200316][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.239498][ T5643] binder: 5634:5643 ioctl c0306201 200000000740 returned -22 [ 158.252578][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.279866][ T5638] binder: 5634:5638 ioctl c00c620f 200000000fc0 returned -22 [ 158.294322][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.314806][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.352034][ T5638] binder: 5634:5638 unknown command 1074291477 [ 158.375138][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.382323][ T5638] binder: 5634:5638 ioctl c0306201 200000001000 returned -22 [ 158.402339][ T5643] binder: 5634:5643 ioctl 400c620e 200000001180 returned -22 [ 158.415215][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.453288][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.475609][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.502382][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.538362][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.600533][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.618882][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.640050][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.663689][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.708695][ T5342] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.738849][ T5342] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.785520][ T5342] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.794344][ T5342] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.868784][ T4814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.925288][ T4814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.994859][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.040508][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.063520][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.106606][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.235355][ T4814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.243487][ T4814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.301518][ T5672] loop5: detected capacity change from 0 to 16 [ 159.342389][ T5674] loop0: detected capacity change from 0 to 16 [ 159.377032][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.391402][ T5672] erofs: (device loop5): mounted with root inode @ nid 36. [ 159.436598][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.444537][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.536970][ T5674] erofs: (device loop0): mounted with root inode @ nid 36. [ 159.561703][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.025838][ T5692] loop8: detected capacity change from 0 to 16 [ 160.681489][ T5694] loop7: detected capacity change from 0 to 128 [ 160.835851][ T5692] erofs: (device loop8): mounted with root inode @ nid 36. [ 161.050279][ T27] audit: type=1800 audit(1793793675.004:99): pid=5693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.360" name="bus" dev="loop7" ino=1048728 res=0 errno=0 [ 161.461578][ T5703] rxe_eth0 speed is unknown, defaulting to 1000 [ 161.640633][ T5703] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 162.555381][ T957] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 162.795231][ T957] usb 9-1: Using ep0 maxpacket: 32 [ 162.813275][ T957] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 162.862502][ T957] usb 9-1: config 0 has no interface number 0 [ 162.904292][ T957] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 162.995404][ T957] usb 9-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.068049][ T957] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 163.130009][ T957] usb 9-1: config 0 interface 196 has no altsetting 0 [ 163.180488][ T957] usb 9-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 163.228858][ T957] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.267934][ T957] usb 9-1: Product: syz [ 163.283196][ T957] usb 9-1: Manufacturer: syz [ 163.334469][ T957] usb 9-1: SerialNumber: syz [ 163.366566][ T957] usb 9-1: config 0 descriptor?? [ 163.375174][ T5707] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 163.619660][ T957] ipheth 9-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 163.662582][ T957] ipheth: probe of 9-1:0.196 failed with error -71 [ 163.728719][ T957] usb 9-1: USB disconnect, device number 2 [ 164.124778][ T5730] loop6: detected capacity change from 0 to 256 [ 165.161854][ T5737] loop7: detected capacity change from 0 to 16 [ 165.184177][ T5737] erofs: (device loop7): mounted with root inode @ nid 36. [ 165.555313][ T4502] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.926417][ T5744] loop5: detected capacity change from 0 to 16 [ 165.999587][ T5744] erofs: (device loop5): mounted with root inode @ nid 36. [ 166.626521][ T27] audit: type=1326 audit(1793793680.554:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5751 comm="syz.7.372" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbff99fb19 code=0x0 [ 166.629317][ T4430] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.903368][ T5760] 9pnet_fd: Insufficient options for proto=fd [ 167.158478][ T5769] loop8: detected capacity change from 0 to 16 [ 167.222595][ T5769] erofs: (device loop8): mounted with root inode @ nid 36. [ 167.627750][ T5779] loop5: detected capacity change from 0 to 16 [ 167.636536][ T5779] erofs: (device loop5): mounted with root inode @ nid 36. [ 167.712295][ T4948] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 168.016159][ T5791] binder: 5788:5791 unknown command 1074553619 [ 168.055480][ T5791] binder: 5788:5791 ioctl c0306201 2000000005c0 returned -22 [ 168.175852][ T5793] loop0: detected capacity change from 0 to 16 [ 168.218398][ T5793] erofs: (device loop0): mounted with root inode @ nid 36. [ 168.284313][ T5793] overlayfs: overlapping lowerdir path [ 168.656639][ T5799] loop5: detected capacity change from 0 to 4096 [ 168.697109][ T5804] loop0: detected capacity change from 0 to 16 [ 168.714037][ T5804] erofs: (device loop0): mounted with root inode @ nid 36. [ 168.741446][ T5799] EXT4-fs: inline encryption not supported [ 168.799069][ T5799] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.835393][ T5799] EXT4-fs (loop5): Test dummy encryption mode enabled [ 168.906316][ T5799] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.154797][ T5820] 9pnet_fd: Insufficient options for proto=fd [ 171.678267][ T4528] EXT4-fs (loop5): unmounting filesystem. [ 172.104042][ T5842] loop7: detected capacity change from 0 to 16 [ 172.119640][ T5842] erofs: (device loop7): mounted with root inode @ nid 36. [ 173.004005][ T5844] binder: 5843:5844 unknown command 1074553619 [ 173.010384][ T5844] binder: 5843:5844 ioctl c0306201 2000000005c0 returned -22 [ 173.043365][ T4948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 173.258820][ T5850] loop0: detected capacity change from 0 to 16 [ 173.300858][ T5850] erofs: (device loop0): mounted with root inode @ nid 36. [ 173.334825][ T5850] overlayfs: overlapping lowerdir path [ 173.821191][ T5869] loop8: detected capacity change from 0 to 128 [ 173.873929][ T5876] loop5: detected capacity change from 0 to 16 [ 173.880494][ T5867] loop0: detected capacity change from 0 to 4096 [ 173.908710][ T5867] EXT4-fs: inline encryption not supported [ 173.990486][ T5867] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.045675][ T5876] erofs: (device loop5): mounted with root inode @ nid 36. [ 174.061886][ T5867] EXT4-fs (loop0): Test dummy encryption mode enabled [ 174.164793][ T5867] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 174.314504][ T5869] syz.8.401: attempt to access beyond end of device [ 174.314504][ T5869] loop8: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 174.385547][ T5869] Buffer I/O error on dev loop8, logical block 128, lost async page write [ 174.707788][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 175.340548][ T5907] binder: 5906:5907 unknown command 1074553619 [ 175.370176][ T5907] binder: 5906:5907 ioctl c0306201 2000000005c0 returned -22 [ 175.417970][ T5910] fuse: Bad value for 'fd' [ 175.690482][ T5914] loop8: detected capacity change from 0 to 16 [ 175.724717][ T5914] erofs: (device loop8): mounted with root inode @ nid 36. [ 175.803325][ T5914] fuse: Bad value for 'fd' [ 175.822311][ T5921] loop7: detected capacity change from 0 to 16 [ 175.836983][ T5921] erofs: (device loop7): mounted with root inode @ nid 36. [ 175.848946][ T5921] erofs: (device loop7): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 175.863474][ T5921] syz.7.410: attempt to access beyond end of device [ 175.863474][ T5921] loop7: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 176.005690][ T5921] erofs: (device loop7): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 176.015445][ T5921] syz.7.410: attempt to access beyond end of device [ 176.015445][ T5921] loop7: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 176.045886][ T5921] syz.7.410: attempt to access beyond end of device [ 176.045886][ T5921] loop7: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 176.080943][ T27] audit: type=1800 audit(1793793690.014:101): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.410" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 176.579366][ T5921] syz.7.410 (5921) used greatest stack depth: 19568 bytes left [ 176.636286][ T5924] overlayfs: failed to get redirect (-117) [ 176.966624][ T5342] erofs: (device loop8): erofs_fill_dentries: bogus dirent @ nid 36 [ 177.182476][ T5932] loop6: detected capacity change from 0 to 128 [ 177.524365][ T5934] loop0: detected capacity change from 0 to 128 [ 177.664477][ T5932] syz.6.412: attempt to access beyond end of device [ 177.664477][ T5932] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 177.766428][ T5932] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 178.248715][ T5939] 9pnet_fd: Insufficient options for proto=fd [ 178.306458][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.396649][ T5940] loop0: detected capacity change from 0 to 128 [ 178.468967][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.675235][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.726624][ T5940] syz.0.415: attempt to access beyond end of device [ 178.726624][ T5940] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 178.748523][ T5940] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 178.914579][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.958938][ T5957] fuse: Bad value for 'fd' [ 179.206038][ T5964] loop0: detected capacity change from 0 to 16 [ 179.320634][ T5964] erofs: (device loop0): mounted with root inode @ nid 36. [ 179.998306][ T5966] loop5: detected capacity change from 0 to 16 [ 180.005596][ T4502] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.056849][ T5966] erofs: (device loop5): mounted with root inode @ nid 36. [ 180.071516][ T5966] fuse: Bad value for 'fd' [ 180.103944][ T5966] overlayfs: overlapping lowerdir path [ 180.419523][ T5971] loop6: detected capacity change from 0 to 128 [ 180.576310][ T5980] loop5: detected capacity change from 0 to 512 [ 180.619397][ T5980] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 180.698962][ T5980] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.749414][ T5984] loop7: detected capacity change from 0 to 16 [ 180.759257][ T5984] erofs: (device loop7): mounted with root inode @ nid 36. [ 180.797930][ T4502] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.861859][ T5980] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.428: invalid indirect mapped block 32768 (level 2) [ 180.876366][ T5990] 9pnet_fd: Insufficient options for proto=fd [ 180.944473][ T5980] EXT4-fs (loop5): 1 orphan inode deleted [ 180.962597][ T5980] EXT4-fs (loop5): 1 truncate cleaned up [ 180.993021][ T5980] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 181.020472][ T5991] program syz.6.430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.065595][ T5991] Zero length message leads to an empty skb [ 181.096813][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 181.106757][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 181.114626][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 181.134421][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 181.142066][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 181.150882][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.216033][ T5980] EXT4-fs error (device loop5): ext4_lookup:1860: inode #15: comm syz.5.428: iget: bad extra_isize 46 (inode size 256) [ 182.069981][ T5992] rxe_eth0 speed is unknown, defaulting to 1000 [ 182.628562][ T6006] fuse: Bad value for 'fd' [ 182.692906][ T5978] loop0: detected capacity change from 0 to 40427 [ 182.807516][ T5978] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 182.896535][ T5978] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 183.033889][ T5978] F2FS-fs (loop0): invalid crc value [ 183.118991][ T5978] F2FS-fs (loop0): Found nat_bits in checkpoint [ 183.245620][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 183.507968][ T4528] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 183.546646][ T4528] EXT4-fs error (device loop5): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 17 [ 183.640765][ T4528] EXT4-fs error (device loop5): ext4_lookup:1864: inode #2: comm syz-executor: deleted inode referenced: 17 [ 183.836983][ T6022] loop7: detected capacity change from 0 to 16 [ 183.881988][ T6022] erofs: (device loop7): mounted with root inode @ nid 36. [ 183.900586][ T6022] fuse: Bad value for 'fd' [ 183.918170][ T6022] overlayfs: overlapping lowerdir path [ 184.015512][ T4528] EXT4-fs (loop5): unmounting filesystem. [ 184.199452][ T5992] chnl_net:caif_netlink_parms(): no params data found [ 184.358742][ T6025] loop7: detected capacity change from 0 to 128 [ 184.687953][ T6039] fuse: Bad value for 'fd' [ 184.707304][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.714644][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.782251][ T5992] device bridge_slave_0 entered promiscuous mode [ 184.790749][ T6040] program syz.0.443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.831485][ T11] device hsr_slave_0 left promiscuous mode [ 184.837463][ T6025] syz.7.440: attempt to access beyond end of device [ 184.837463][ T6025] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 184.837499][ T6025] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 184.998146][ T11] device hsr_slave_1 left promiscuous mode [ 185.054922][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.082204][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.106787][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.167668][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.184561][ T11] device bridge_slave_1 left promiscuous mode [ 185.211333][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.243087][ T11] device bridge_slave_0 left promiscuous mode [ 185.265978][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.285466][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 185.421202][ T11] device veth1_macvtap left promiscuous mode [ 185.435307][ T11] device veth0_macvtap left promiscuous mode [ 185.461382][ T11] device veth1_vlan left promiscuous mode [ 185.507725][ T11] device veth0_vlan left promiscuous mode [ 185.525421][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.544375][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.553071][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.562883][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.572857][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.580512][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.787147][ T6074] loop6: detected capacity change from 0 to 16 [ 185.801431][ T6074] erofs: (device loop6): mounted with root inode @ nid 36. [ 186.639406][ T6077] loop0: detected capacity change from 0 to 16 [ 186.654035][ T6077] erofs: (device loop0): mounted with root inode @ nid 36. [ 186.706603][ T4502] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.034165][ T6086] loop0: detected capacity change from 0 to 128 [ 187.366111][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 187.544915][ T6096] loop6: detected capacity change from 0 to 128 [ 187.605908][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 187.794132][ T6096] syz.6.455: attempt to access beyond end of device [ 187.794132][ T6096] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 187.808489][ T6096] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 187.984315][ T6099] program syz.6.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.021232][ T11] team0 (unregistering): Port device team_slave_1 removed [ 188.084249][ T11] team0 (unregistering): Port device team_slave_0 removed [ 188.142703][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.197378][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.581873][ T11] bond0 (unregistering): Released all slaves [ 188.642899][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.662650][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.671829][ T5992] device bridge_slave_1 entered promiscuous mode [ 188.904455][ T5992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.955983][ T5992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.997835][ T6064] rxe_eth0 speed is unknown, defaulting to 1000 [ 189.047317][ T5992] team0: Port device team_slave_0 added [ 189.100440][ T5992] team0: Port device team_slave_1 added [ 189.233384][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.251327][ T6109] loop7: detected capacity change from 0 to 128 [ 189.283447][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.332899][ T5992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.348185][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.416470][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.457041][ T6117] loop0: detected capacity change from 0 to 16 [ 189.473277][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 189.494116][ T6117] erofs: (device loop0): mounted with root inode @ nid 36. [ 189.696700][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 189.779185][ T27] audit: type=1800 audit(1793793703.724:102): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.459" name="bus" dev="loop7" ino=1048749 res=0 errno=0 [ 190.265165][ T5992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.406263][ T5992] device hsr_slave_0 entered promiscuous mode [ 190.426157][ T5992] device hsr_slave_1 entered promiscuous mode [ 190.472411][ T5992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.496284][ T5992] Cannot create hsr debugfs directory [ 190.560153][ T6123] loop6: detected capacity change from 0 to 128 [ 190.708834][ T6128] loop0: detected capacity change from 0 to 128 [ 190.771320][ T6128] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÚ+9 [ 190.771320][ T6128] ÿý®Q­ôôì•ËL%1Þk<íŸâ‹%X†uK‘EÂ`/æÐ[€n—ƒ¸Ö¼Iš_ˆóëYÿ– ;óÉà$rÕ¢x&tkxoøU'øÀð!DÊÚÚ·Ž½?É©ºŠxe" „§kû6Ä»ŒúøôGÉ= h“åzæý" or missing value [ 190.963477][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.023729][ T6123] syz.6.463: attempt to access beyond end of device [ 191.023729][ T6123] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 191.075228][ T6123] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 191.194763][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.343703][ T6064] chnl_net:caif_netlink_parms(): no params data found [ 191.440977][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.594938][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.641256][ T6145] loop0: detected capacity change from 0 to 128 [ 191.694117][ T6150] loop6: detected capacity change from 0 to 16 [ 191.765276][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 191.893286][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.902467][ T6150] erofs: (device loop6): mounted with root inode @ nid 36. [ 191.945514][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.964605][ T6157] loop7: detected capacity change from 0 to 128 [ 191.998525][ T4502] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.007366][ T6064] device bridge_slave_0 entered promiscuous mode [ 192.043527][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.074998][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.116039][ T6064] device bridge_slave_1 entered promiscuous mode [ 192.154836][ T6145] syz.0.467: attempt to access beyond end of device [ 192.154836][ T6145] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 192.175043][ T6145] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 192.295977][ T6064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.323654][ T5992] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 192.403359][ T6064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.464164][ T5992] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 192.549546][ T5992] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 192.629038][ T6064] team0: Port device team_slave_0 added [ 192.636564][ T5992] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 192.706442][ T6064] team0: Port device team_slave_1 added [ 192.809459][ T6173] loop7: detected capacity change from 0 to 16 [ 192.822805][ T6173] erofs: (device loop7): mounted with root inode @ nid 36. [ 192.999769][ T6168] loop0: detected capacity change from 0 to 128 [ 193.559931][ T4948] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.845212][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 193.870429][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.885888][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.990986][ T6064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.021607][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.037855][ T6179] loop7: detected capacity change from 0 to 128 [ 194.060475][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.096697][ T6179] FAT-fs (loop7): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÚ+9 [ 194.096697][ T6179] ÿý®Q­ôôì•ËL%1Þk<íŸâ‹%X†uK‘EÂ`/æÐ[€n—ƒ¸Ö¼Iš_ˆóëYÿ– ;óÉà$rÕ¢x&tkxoøU'øÀð!DÊÚÚ·Ž½?É©ºŠxe" „§kû6Ä»ŒúøôGÉ= h“åzæý" or missing value [ 194.135183][ T6064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.408472][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.414872][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.440399][ T6064] device hsr_slave_0 entered promiscuous mode [ 194.486781][ T6064] device hsr_slave_1 entered promiscuous mode [ 194.499682][ T6064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.522216][ T6064] Cannot create hsr debugfs directory [ 194.568117][ T6187] loop7: detected capacity change from 0 to 128 [ 194.636358][ T5992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.760113][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.804512][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.873729][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.934568][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.947974][ T6187] syz.7.475: attempt to access beyond end of device [ 194.947974][ T6187] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 194.967046][ T6197] loop6: detected capacity change from 0 to 128 [ 194.982960][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.996575][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.003790][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.015249][ T6187] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 195.041618][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.075913][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.099930][ T6202] loop0: detected capacity change from 0 to 128 [ 195.115953][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.123205][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.271430][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.289034][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.403173][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.418914][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.432463][ T6202] syz.0.479: attempt to access beyond end of device [ 195.432463][ T6202] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 195.447820][ T6202] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 195.458947][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.472945][ T6209] loop7: detected capacity change from 0 to 128 [ 195.486263][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.540662][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.820547][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 195.843301][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.844736][ T6209] syz.7.481: attempt to access beyond end of device [ 195.844736][ T6209] loop7: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 195.870557][ T6217] loop0: detected capacity change from 0 to 128 [ 195.885766][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.894438][ T6209] Buffer I/O error on dev loop7, logical block 128, lost async page write [ 195.921451][ T6217] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÚ+9 [ 195.921451][ T6217] ÿý®Q­ôôì•ËL%1Þk<íŸâ‹%X†uK‘EÂ`/æÐ[€n—ƒ¸Ö¼Iš_ˆóëYÿ– ;óÉà$rÕ¢x&tkxoøU'øÀð!DÊÚÚ·Ž½?É©ºŠxe" „§kû6Ä»ŒúøôGÉ= h“åzæý" or missing value [ 195.959082][ T5992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.025494][ T5992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 196.107968][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 196.128773][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 196.916145][ T6243] loop6: detected capacity change from 0 to 128 [ 197.282970][ T6243] syz.6.489: attempt to access beyond end of device [ 197.282970][ T6243] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 197.300061][ T6243] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 197.339503][ T11] device hsr_slave_0 left promiscuous mode [ 197.348277][ T11] device hsr_slave_1 left promiscuous mode [ 197.375379][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.389329][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.406200][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.413692][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.463740][ T11] device bridge_slave_1 left promiscuous mode [ 197.488654][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.498604][ T11] device bridge_slave_0 left promiscuous mode [ 197.504950][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.535519][ T11] device veth1_macvtap left promiscuous mode [ 197.541803][ T11] device veth0_macvtap left promiscuous mode [ 197.552222][ T11] device veth1_vlan left promiscuous mode [ 197.558504][ T11] device veth0_vlan left promiscuous mode [ 197.569948][ T6261] loop6: detected capacity change from 0 to 128 [ 197.596633][ T6259] loop0: detected capacity change from 0 to 128 [ 197.623242][ T27] audit: type=1800 audit(1793793711.574:103): pid=6261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.492" name="bus" dev="loop6" ino=1048769 res=0 errno=0 [ 197.860462][ T6259] syz.0.491: attempt to access beyond end of device [ 197.860462][ T6259] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 197.894290][ T6259] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 198.126209][ T6266] loop0: detected capacity change from 0 to 16 [ 198.133963][ T6266] erofs: (device loop0): mounted with root inode @ nid 36. [ 198.176778][ T4948] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.694461][ T11] team0 (unregistering): Port device team_slave_1 removed [ 198.742169][ T11] team0 (unregistering): Port device team_slave_0 removed [ 198.794341][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.850133][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.053542][ T6272] loop0: detected capacity change from 0 to 128 [ 199.238452][ T6272] syz.0.495: attempt to access beyond end of device [ 199.238452][ T6272] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 199.259523][ T6272] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 199.463193][ T11] bond0 (unregistering): Released all slaves [ 199.878100][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.920836][ T6289] loop7: detected capacity change from 0 to 128 [ 199.935560][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.951620][ T5992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.097903][ T6295] program syz.0.503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.199445][ T6296] loop6: detected capacity change from 0 to 128 [ 200.446550][ T6308] FAULT_INJECTION: forcing a failure. [ 200.446550][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 200.484958][ T6308] CPU: 0 PID: 6308 Comm: syz.0.505 Not tainted syzkaller #0 [ 200.492629][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.502845][ T6308] Call Trace: [ 200.506186][ T6308] [ 200.509186][ T6308] dump_stack_lvl+0x188/0x24e [ 200.510960][ T6296] syz.6.502: attempt to access beyond end of device [ 200.510960][ T6296] loop6: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 200.513923][ T6308] ? show_regs_print_info+0x12/0x12 [ 200.532659][ T6308] ? load_image+0x410/0x410 [ 200.537276][ T6308] ? __lock_acquire+0x7ea0/0x7ea0 [ 200.542377][ T6308] ? __x64_sys_setsockopt+0xb1/0xc0 [ 200.547649][ T6308] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.553899][ T6308] should_fail_ex+0x390/0x4c0 [ 200.558742][ T6308] should_failslab+0x5/0x20 [ 200.563277][ T6308] slab_pre_alloc_hook+0x59/0x300 [ 200.568342][ T6308] ? sock_kmalloc+0x92/0xf0 [ 200.572900][ T6308] __kmem_cache_alloc_node+0x4f/0x270 [ 200.578317][ T6308] ? sock_kmalloc+0x92/0xf0 [ 200.582946][ T6308] __kmalloc+0xa3/0x240 [ 200.587139][ T6308] sock_kmalloc+0x92/0xf0 [ 200.591508][ T6308] ip6_mc_msfilter+0x59c/0xce0 [ 200.596317][ T6308] ipv6_set_mcast_msfilter+0x230/0x2d0 [ 200.601815][ T6308] do_ipv6_setsockopt+0xdee/0x3c30 [ 200.606968][ T6308] ? sk_dst_reset+0xa0/0xa0 [ 200.611503][ T6308] ? __schedule+0x1091/0x4140 [ 200.616230][ T6308] ? mark_lock+0x94/0x320 [ 200.620596][ T6308] ? __lock_acquire+0x1359/0x7ea0 [ 200.625662][ T6308] ? release_firmware_map_entry+0x187/0x187 [ 200.631626][ T6308] ? futex_wait_queue+0x23/0x1b0 [ 200.636600][ T6308] ? futex_wait+0x525/0x640 [ 200.641132][ T6308] ? verify_lock_unused+0x140/0x140 [ 200.646365][ T6308] ? aa_label_sk_perm+0x501/0x6b0 [ 200.651435][ T6308] ? futex_wait_setup+0x270/0x270 [ 200.656578][ T6308] ? aa_sk_perm+0x8c0/0x8c0 [ 200.661138][ T6308] ? __fget_files+0x28/0x460 [ 200.665767][ T6308] ? __lock_acquire+0x7ea0/0x7ea0 [ 200.670821][ T6308] ? do_futex+0x310/0x320 [ 200.675274][ T6308] ? aa_sk_perm+0x795/0x8c0 [ 200.679814][ T6308] ? __ia32_sys_get_robust_list+0x100/0x100 [ 200.685764][ T6308] ? aa_af_perm+0x340/0x340 [ 200.690303][ T6308] ? __fget_files+0x3fc/0x460 [ 200.695198][ T6308] ? aa_sock_opt_perm+0x74/0x100 [ 200.700182][ T6308] ipv6_setsockopt+0x55/0x190 [ 200.704904][ T6308] ? sock_common_recvmsg+0x190/0x190 [ 200.710228][ T6308] __sys_setsockopt+0x2bf/0x3d0 [ 200.715133][ T6308] __x64_sys_setsockopt+0xb1/0xc0 [ 200.720192][ T6308] do_syscall_64+0x4c/0xa0 [ 200.724641][ T6308] ? clear_bhb_loop+0x60/0xb0 [ 200.729357][ T6308] ? clear_bhb_loop+0x60/0xb0 [ 200.734088][ T6308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.740028][ T6308] RIP: 0033:0x7f0225d9fb19 [ 200.744470][ T6308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.764199][ T6308] RSP: 002b:00007f0226b89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 200.772652][ T6308] RAX: ffffffffffffffda RBX: 00007f0226025fa0 RCX: 00007f0225d9fb19 [ 200.780674][ T6308] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000004 [ 200.788696][ T6308] RBP: 00007f0225e37b70 R08: 0000000000000590 R09: 0000000000000000 [ 200.796693][ T6308] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 200.804693][ T6308] R13: 00007f0226026038 R14: 00007f0226025fa0 R15: 00007ffeb90377a8 [ 200.812731][ T6308] [ 200.826875][ T6296] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 201.078213][ T6064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.149580][ T6064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.173210][ T6064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.217778][ T6064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.315919][ T6316] loop0: detected capacity change from 0 to 128 [ 201.505554][ T6325] program syz.7.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.571155][ T6330] loop6: detected capacity change from 0 to 16 [ 201.611155][ T6330] erofs: (device loop6): mounted with root inode @ nid 36. [ 201.656609][ T6064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.688527][ T6330] FAULT_INJECTION: forcing a failure. [ 201.688527][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 201.723481][ T6330] CPU: 0 PID: 6330 Comm: syz.6.510 Not tainted syzkaller #0 [ 201.730903][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 201.741029][ T6330] Call Trace: [ 201.744370][ T6330] [ 201.747359][ T6330] dump_stack_lvl+0x188/0x24e [ 201.752158][ T6330] ? show_regs_print_info+0x12/0x12 [ 201.757450][ T6330] ? load_image+0x410/0x410 [ 201.762048][ T6330] ? __might_sleep+0xd0/0xd0 [ 201.766710][ T6330] ? __lock_acquire+0x7ea0/0x7ea0 [ 201.771828][ T6330] should_fail_ex+0x390/0x4c0 [ 201.776596][ T6330] should_failslab+0x5/0x20 [ 201.781179][ T6330] slab_pre_alloc_hook+0x59/0x300 [ 201.786288][ T6330] ? ovl_alloc_entry+0x20/0x80 [ 201.791122][ T6330] __kmem_cache_alloc_node+0x4f/0x270 [ 201.796580][ T6330] ? ovl_alloc_entry+0x20/0x80 [ 201.801417][ T6330] __kmalloc+0xa3/0x240 [ 201.805743][ T6330] ovl_alloc_entry+0x20/0x80 [ 201.810414][ T6330] ovl_lookup+0x1226/0x18d0 [ 201.815048][ T6330] ? ovl_path_next+0x260/0x260 [ 201.819893][ T6330] ? __lock_acquire+0x7ea0/0x7ea0 [ 201.825011][ T6330] ? __rwlock_init+0x140/0x140 [ 201.829844][ T6330] ? d_set_d_op+0x242/0x370 [ 201.834421][ T6330] ? do_raw_spin_unlock+0x11d/0x230 [ 201.839702][ T6330] ? _raw_spin_unlock+0x24/0x40 [ 201.844665][ T6330] ? d_alloc+0x1e7/0x250 [ 201.844797][ T6064] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.848957][ T6330] lookup_one_qstr_excl+0x10e/0x240 [ 201.848991][ T6330] filename_create+0x242/0x450 [ 201.849027][ T6330] ? kern_path_create+0x50/0x50 [ 201.870669][ T6330] ? __virt_addr_valid+0x467/0x540 [ 201.876132][ T6330] do_mkdirat+0xa5/0x440 [ 201.880456][ T6330] ? vfs_mkdir+0x570/0x570 [ 201.884966][ T6330] __x64_sys_mkdirat+0x85/0x90 [ 201.890114][ T6330] do_syscall_64+0x4c/0xa0 [ 201.894621][ T6330] ? clear_bhb_loop+0x60/0xb0 [ 201.899488][ T6330] ? clear_bhb_loop+0x60/0xb0 [ 201.904247][ T6330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 201.910262][ T6330] RIP: 0033:0x7fef18b9fb19 [ 201.914753][ T6330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.934467][ T6330] RSP: 002b:00007fef19a57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 201.942952][ T6330] RAX: ffffffffffffffda RBX: 00007fef18e25fa0 RCX: 00007fef18b9fb19 [ 201.951084][ T6330] RDX: 00000000000001ff RSI: 0000200000000f80 RDI: ffffffffffffff9c [ 201.959317][ T6330] RBP: 00007fef18c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 201.967444][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.975452][ T6330] R13: 00007fef18e26038 R14: 00007fef18e25fa0 R15: 00007ffe012093d8 [ 201.983560][ T6330] [ 202.010782][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.050558][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.078829][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.109378][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.144745][ T4810] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.152051][ T4810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.180537][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.208910][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.249167][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.282613][ T4810] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.289899][ T4810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.384579][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.414982][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.436581][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.458507][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.486060][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.517283][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.546335][ T5311] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 202.549481][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.609627][ T6342] loop0: detected capacity change from 0 to 128 [ 202.643988][ T5992] device veth0_vlan entered promiscuous mode [ 202.665392][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.710302][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.741268][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.765040][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.792850][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.810836][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.830170][ T6064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.872936][ T6064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.971593][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.982619][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.994702][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.009561][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.025214][ T5992] device veth1_vlan entered promiscuous mode [ 203.043198][ T6342] syz.0.514: attempt to access beyond end of device [ 203.043198][ T6342] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 203.067146][ T6342] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 203.226230][ T4311] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.271397][ T5992] device veth0_macvtap entered promiscuous mode [ 203.323075][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.341034][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.366422][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.379304][ T6353] program syz.0.519 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.429687][ T4311] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.451612][ T5992] device veth1_macvtap entered promiscuous mode [ 203.543054][ T4311] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.584686][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.625167][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.646386][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.667812][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.698067][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.718930][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.739076][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.765413][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.789959][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.803102][ T6357] loop0: detected capacity change from 0 to 128 [ 203.848424][ T4311] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.895863][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.930328][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.965834][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.008039][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.035836][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.046229][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.057012][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.067267][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.082293][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.123727][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.154887][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.193470][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.201669][ T6357] syz.0.521: attempt to access beyond end of device [ 204.201669][ T6357] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 204.228061][ T6363] loop7: detected capacity change from 0 to 16 [ 204.235433][ T6357] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 204.258906][ T6363] erofs: (device loop7): mounted with root inode @ nid 36. [ 204.268223][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.304851][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.338630][ T5992] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.350537][ T6363] FAULT_INJECTION: forcing a failure. [ 204.350537][ T6363] name failslab, interval 1, probability 0, space 0, times 0 [ 204.372047][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.381644][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.392790][ T5992] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.392826][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.408861][ T5992] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.418975][ T6363] CPU: 1 PID: 6363 Comm: syz.7.523 Not tainted syzkaller #0 [ 204.426335][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.436436][ T6363] Call Trace: [ 204.439744][ T6363] [ 204.442703][ T6363] dump_stack_lvl+0x188/0x24e [ 204.447446][ T6363] ? show_regs_print_info+0x12/0x12 [ 204.452681][ T6363] ? load_image+0x410/0x410 [ 204.457225][ T6363] ? __might_sleep+0xd0/0xd0 [ 204.461842][ T6363] ? __lock_acquire+0x7ea0/0x7ea0 [ 204.466906][ T6363] should_fail_ex+0x390/0x4c0 [ 204.471614][ T6363] should_failslab+0x5/0x20 [ 204.476170][ T6363] slab_pre_alloc_hook+0x59/0x300 [ 204.481256][ T6363] kmem_cache_alloc_lru+0x49/0x2e0 [ 204.486403][ T6363] ? __d_alloc+0x2e/0x6e0 [ 204.490896][ T6363] __d_alloc+0x2e/0x6e0 [ 204.495085][ T6363] d_alloc_parallel+0xdc/0x1590 [ 204.499983][ T6363] ? verify_lock_unused+0x140/0x140 [ 204.505238][ T6363] ? unwind_next_frame+0x1719/0x1fd0 [ 204.510584][ T6363] ? deref_stack_reg+0x18e/0x220 [ 204.515565][ T6363] ? lockdep_softirqs_off+0x430/0x430 [ 204.520994][ T6363] ? lockdep_softirqs_off+0x430/0x430 [ 204.526409][ T6363] ? d_hash_and_lookup+0x1b0/0x1b0 [ 204.531570][ T6363] ? __init_waitqueue_head+0xa4/0x140 [ 204.537226][ T6363] __lookup_slow+0x134/0x3f0 [ 204.541916][ T6363] ? lookup_one_len+0x2d0/0x2d0 [ 204.546857][ T6363] ? down_read+0x1a8/0x2d0 [ 204.551318][ T6363] lookup_one_unlocked+0x184/0x2a0 [ 204.556487][ T6363] ? lookup_one+0x2d0/0x2d0 [ 204.561052][ T6363] ovl_lookup_single+0x129/0x970 [ 204.566039][ T6363] ? ovl_lower_positive+0x350/0x350 [ 204.571286][ T6363] ovl_lookup_layer+0x379/0x440 [ 204.576197][ T6363] ? rcu_is_watching+0x11/0xa0 [ 204.581000][ T6363] ? ovl_lookup+0x523/0x18d0 [ 204.585651][ T6363] ovl_lookup+0x752/0x18d0 [ 204.590382][ T6363] ? ovl_path_next+0x260/0x260 [ 204.595178][ T6363] ? __lock_acquire+0x7ea0/0x7ea0 [ 204.600237][ T6363] ? __rwlock_init+0x140/0x140 [ 204.605030][ T6363] ? d_set_d_op+0x242/0x370 [ 204.609585][ T6363] ? do_raw_spin_unlock+0x11d/0x230 [ 204.614820][ T6363] ? _raw_spin_unlock+0x24/0x40 [ 204.619715][ T6363] ? d_alloc+0x1e7/0x250 [ 204.624006][ T6363] lookup_one_qstr_excl+0x10e/0x240 [ 204.629242][ T6363] filename_create+0x242/0x450 [ 204.634046][ T6363] ? kern_path_create+0x50/0x50 [ 204.638932][ T6363] ? __virt_addr_valid+0x467/0x540 [ 204.644088][ T6363] do_mkdirat+0xa5/0x440 [ 204.648365][ T6363] ? vfs_mkdir+0x570/0x570 [ 204.652843][ T6363] __x64_sys_mkdirat+0x85/0x90 [ 204.657667][ T6363] do_syscall_64+0x4c/0xa0 [ 204.662124][ T6363] ? clear_bhb_loop+0x60/0xb0 [ 204.666840][ T6363] ? clear_bhb_loop+0x60/0xb0 [ 204.671566][ T6363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.677520][ T6363] RIP: 0033:0x7fdbff99fb19 [ 204.681975][ T6363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.701624][ T6363] RSP: 002b:00007fdc00907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 204.710084][ T6363] RAX: ffffffffffffffda RBX: 00007fdbffc25fa0 RCX: 00007fdbff99fb19 [ 204.718085][ T6363] RDX: 00000000000001ff RSI: 0000200000000f80 RDI: ffffffffffffff9c [ 204.726089][ T6363] RBP: 00007fdbffa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 204.734101][ T6363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.742098][ T6363] R13: 00007fdbffc26038 R14: 00007fdbffc25fa0 R15: 00007fff3b2b7088 [ 204.750139][ T6363] [ 204.770481][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.779470][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 204.786900][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.794485][ T5992] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.906122][ T5305] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 36 [ 204.943474][ T6364] rxe_eth0 speed is unknown, defaulting to 1000 [ 204.961009][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.991246][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 205.080627][ T6064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.251838][ T6371] loop0: detected capacity change from 0 to 16 [ 205.275817][ T6371] erofs: (device loop0): mounted with root inode @ nid 36. [ 205.399964][ T4872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.426695][ T4872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.578093][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.611656][ T5190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.634908][ T5190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.680541][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 206.401645][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 206.514713][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.526881][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.535754][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.545708][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.553329][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.563811][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.703031][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.712020][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.720927][ T6364] device bridge_slave_0 entered promiscuous mode [ 206.750121][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.757755][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.767365][ T6364] device bridge_slave_1 entered promiscuous mode [ 206.810916][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 206.885373][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 206.898531][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.907972][ T6388] rxe_eth0 speed is unknown, defaulting to 1000 [ 206.924292][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.971880][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 206.992388][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.057753][ T6397] program syz.9.532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.109377][ T6364] team0: Port device team_slave_0 added [ 207.140511][ T6364] team0: Port device team_slave_1 added [ 207.239104][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.276359][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.345772][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.363119][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.411671][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.435037][ T6064] device veth0_vlan entered promiscuous mode [ 207.442382][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.456651][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.479351][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.501745][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.532870][ T6403] loop0: detected capacity change from 0 to 128 [ 207.583886][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.620839][ T6064] device veth1_vlan entered promiscuous mode [ 207.662936][ T4311] device hsr_slave_0 left promiscuous mode [ 207.685006][ T4311] device hsr_slave_1 left promiscuous mode [ 207.694047][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.701701][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.710049][ T4311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.717788][ T4311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.737536][ T4311] device bridge_slave_1 left promiscuous mode [ 207.750551][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.765529][ T4311] device bridge_slave_0 left promiscuous mode [ 207.772105][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.808508][ T4311] device veth1_macvtap left promiscuous mode [ 207.814945][ T4311] device veth0_macvtap left promiscuous mode [ 207.821490][ T4311] device veth1_vlan left promiscuous mode [ 207.827774][ T4311] device veth0_vlan left promiscuous mode [ 207.897996][ T6403] syz.0.535: attempt to access beyond end of device [ 207.897996][ T6403] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 207.912105][ T6403] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 207.949542][ T6412] loop9: detected capacity change from 0 to 16 [ 207.960168][ T6412] erofs: (device loop9): mounted with root inode @ nid 36. [ 208.063856][ T6414] loop0: detected capacity change from 0 to 128 [ 208.109737][ T27] audit: type=1800 audit(1793793722.064:104): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.538" name="bus" dev="loop0" ino=1048797 res=0 errno=0 [ 208.645325][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 208.879115][ T6420] loop0: detected capacity change from 0 to 16 [ 208.912898][ T6420] erofs: (device loop0): mounted with root inode @ nid 36. [ 208.943688][ T6420] fuse: Bad value for 'fd' [ 208.965804][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 208.975575][ T6420] overlayfs: overlapping lowerdir path [ 209.053377][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 209.144634][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 209.242185][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.321316][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.350453][ T6429] program syz.0.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.680068][ T4311] bond0 (unregistering): Released all slaves [ 209.906206][ T6364] device hsr_slave_0 entered promiscuous mode [ 209.927911][ T6364] device hsr_slave_1 entered promiscuous mode [ 209.944837][ T6364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.991836][ T6364] Cannot create hsr debugfs directory [ 210.182158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.203618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.230918][ T6064] device veth0_macvtap entered promiscuous mode [ 210.278147][ T6432] loop0: detected capacity change from 0 to 128 [ 210.343433][ T6064] device veth1_macvtap entered promiscuous mode [ 210.484664][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.501383][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.554772][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.583330][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.594219][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.615334][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.625956][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.638067][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.685849][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.710376][ T6432] syz.0.543: attempt to access beyond end of device [ 210.710376][ T6432] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 210.724039][ T6432] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 210.733410][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 210.768459][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.790559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.828140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.874413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.924953][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.960661][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.992148][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.002860][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.021525][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.034230][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.051315][ T6064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.063600][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 211.085904][ T6064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.130414][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.158392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.182687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.204747][ T6064] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.216261][ T6064] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.225044][ T6064] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.234194][ T6064] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.419485][ T6388] chnl_net:caif_netlink_parms(): no params data found [ 211.454418][ T6452] loop0: detected capacity change from 0 to 16 [ 211.463646][ T6453] loop9: detected capacity change from 0 to 16 [ 211.477797][ T6453] erofs: (device loop9): mounted with root inode @ nid 36. [ 211.525619][ T6452] erofs: (device loop0): mounted with root inode @ nid 36. [ 211.593380][ T6452] fuse: Bad value for 'fd' [ 211.603095][ T6452] overlayfs: overlapping lowerdir path [ 211.919160][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.941532][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.978190][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.986876][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.056990][ T6461] loop0: detected capacity change from 0 to 16 [ 212.073158][ T6461] erofs: (device loop0): mounted with root inode @ nid 36. [ 212.337266][ T4948] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.415919][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.457731][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.611628][ T6467] program syz.0.551 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.639159][ T6388] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.647050][ T6388] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.657437][ T6388] device bridge_slave_0 entered promiscuous mode [ 212.671043][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.678957][ T6388] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.694544][ T6388] device bridge_slave_1 entered promiscuous mode [ 212.815538][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 212.836257][ T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.915694][ T6473] 9pnet_fd: Insufficient options for proto=fd [ 212.979605][ T6388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.054417][ T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.107736][ T6388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.125386][ T4292] Bluetooth: hci3: command 0x0419 tx timeout [ 213.187057][ T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.193150][ T6483] loop9: detected capacity change from 0 to 16 [ 213.240621][ T6388] team0: Port device team_slave_0 added [ 213.277669][ T6483] erofs: (device loop9): mounted with root inode @ nid 36. [ 213.295741][ T6388] team0: Port device team_slave_1 added [ 213.330918][ T6483] fuse: Bad value for 'fd' [ 213.348875][ T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.363562][ T6483] overlayfs: overlapping lowerdir path [ 213.375857][ T6364] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.440714][ T6364] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.471273][ T6364] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.522621][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.562732][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.596282][ T6388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.610419][ T6364] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 213.636593][ T6388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.650989][ T6388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.679899][ T6490] loop9: detected capacity change from 0 to 16 [ 213.688495][ T6490] erofs: (device loop9): mounted with root inode @ nid 36. [ 213.702048][ T6388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.722129][ T6491] loop4: detected capacity change from 0 to 128 [ 213.988464][ T6487] syz.4.558: attempt to access beyond end of device [ 213.988464][ T6487] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 214.012192][ T6487] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 214.033970][ T6388] device hsr_slave_0 entered promiscuous mode [ 214.053676][ T6388] device hsr_slave_1 entered promiscuous mode [ 214.072158][ T6388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.094883][ T6388] Cannot create hsr debugfs directory [ 214.208411][ T6495] 9pnet_fd: Insufficient options for proto=fd [ 214.544591][ T6509] program syz.9.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.610941][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.754082][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.777248][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.790072][ T6517] 9pnet_fd: Insufficient options for proto=fd [ 214.808625][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.859098][ T6519] program syz.0.566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.891508][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 214.932726][ T6388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.989349][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 215.006229][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 215.027769][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.035312][ T5586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.068672][ T6524] loop9: detected capacity change from 0 to 16 [ 215.146070][ T6524] erofs: (device loop9): mounted with root inode @ nid 36. [ 215.211809][ T6388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.223503][ T6524] overlayfs: overlapping lowerdir path [ 215.276914][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.386230][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 215.404591][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.434382][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.441647][ T5586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.471912][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 215.551163][ T6533] loop9: detected capacity change from 0 to 128 [ 215.580397][ T6388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.622910][ T6537] loop0: detected capacity change from 0 to 16 [ 215.636478][ T6537] erofs: (device loop0): mounted with root inode @ nid 36. [ 215.746500][ T6388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.784836][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 215.860139][ T6533] syz.9.570: attempt to access beyond end of device [ 215.860139][ T6533] loop9: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 215.897706][ T6533] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 215.911539][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 215.928149][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.104132][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.136203][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.183872][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.223113][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.246177][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.272988][ T6364] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.297743][ T6548] program syz.9.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.319274][ T6364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 216.348406][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.368769][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.571266][ T6553] program syz.4.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.607435][ T6556] 9pnet_fd: Insufficient options for proto=fd [ 216.667774][ T6560] loop9: detected capacity change from 0 to 16 [ 216.734086][ T6560] erofs: (device loop9): mounted with root inode @ nid 36. [ 216.857821][ T6388] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.876178][ T6560] overlayfs: overlapping lowerdir path [ 216.936344][ T6388] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.977543][ T6388] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.085530][ T6388] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.207662][ T6574] fuse: Bad value for 'group_id' [ 217.263444][ T11] device hsr_slave_0 left promiscuous mode [ 217.286492][ T11] device hsr_slave_1 left promiscuous mode [ 217.307242][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.333101][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.358231][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.368755][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.395974][ T11] device bridge_slave_1 left promiscuous mode [ 217.403637][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.452467][ T11] device bridge_slave_0 left promiscuous mode [ 217.459600][ T6578] loop4: detected capacity change from 0 to 128 [ 217.468533][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.574214][ T11] device veth1_macvtap left promiscuous mode [ 217.587685][ T11] device veth0_macvtap left promiscuous mode [ 217.594749][ T11] device veth1_vlan left promiscuous mode [ 217.601453][ T11] device veth0_vlan left promiscuous mode [ 217.782712][ T6578] syz.4.582: attempt to access beyond end of device [ 217.782712][ T6578] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 217.811333][ T6578] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 218.112127][ T6595] loop0: detected capacity change from 0 to 512 [ 218.149738][ T6595] EXT4-fs: Ignoring removed oldalloc option [ 218.167806][ T6595] EXT4-fs (loop0): Test dummy encryption mode enabled [ 218.186747][ T6598] loop4: detected capacity change from 0 to 16 [ 218.194809][ T6598] erofs: (device loop4): mounted with root inode @ nid 36. [ 218.326626][ T6595] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 218.921398][ T6595] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 219.060609][ T6621] 9pnet_fd: Insufficient options for proto=fd [ 219.067444][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 219.287419][ T6626] program syz.0.587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.641637][ T6635] program syz.4.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.667621][ T11] team0 (unregistering): Port device team_slave_1 removed [ 219.721100][ T11] team0 (unregistering): Port device team_slave_0 removed [ 219.766715][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.812433][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.184174][ T11] bond0 (unregistering): Released all slaves [ 220.368761][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.385475][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.424484][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.452150][ T6640] loop0: detected capacity change from 0 to 16 [ 220.511374][ T6640] erofs: (device loop0): mounted with root inode @ nid 36. [ 220.543338][ T6388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.552041][ T6641] loop4: detected capacity change from 0 to 128 [ 220.573595][ T6640] overlayfs: overlapping lowerdir path [ 220.599649][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.621699][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.705894][ T6388] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.723983][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.751256][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.800776][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.837792][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.898524][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.930369][ T6651] binder: 6650:6651 ioctl c0306201 0 returned -14 [ 220.940653][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.958320][ T6641] syz.4.591: attempt to access beyond end of device [ 220.958320][ T6641] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 220.980654][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.987927][ T4385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.996689][ T6641] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 221.046997][ T6364] device veth0_vlan entered promiscuous mode [ 221.063484][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.076406][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.095535][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.107843][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.118796][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.127913][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.135126][ T4385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.190749][ T6364] device veth1_vlan entered promiscuous mode [ 221.224362][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.246173][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.314181][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.330017][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.342542][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.377645][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.448062][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.458905][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.492629][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.531983][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.543406][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.558718][ T6388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.592427][ T6388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.661621][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.679961][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.703980][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.749120][ T5190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.784183][ T6364] device veth0_macvtap entered promiscuous mode [ 221.832761][ T6364] device veth1_macvtap entered promiscuous mode [ 221.936654][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.966119][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.996459][ T6674] program syz.4.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.006888][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.025610][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.056942][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.083293][ T6680] loop9: detected capacity change from 0 to 128 [ 222.098513][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.145285][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.177747][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.259697][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.289098][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.310962][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.354590][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.402424][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.417514][ T6680] syz.9.600: attempt to access beyond end of device [ 222.417514][ T6680] loop9: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 222.459350][ T6680] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 222.561248][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.577633][ T6688] loop4: detected capacity change from 0 to 16 [ 222.595014][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.652576][ T6688] erofs: (device loop4): mounted with root inode @ nid 36. [ 222.673260][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.706668][ T6690] binder: 6689:6690 ioctl c0306201 0 returned -14 [ 222.715024][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.744675][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.774826][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.786262][ T6693] overlayfs: overlapping lowerdir path [ 222.815629][ T6364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.845316][ T6364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.889509][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.977028][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.016053][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.115612][ T6704] loop0: detected capacity change from 0 to 16 [ 223.139753][ T6704] erofs: (device loop0): mounted with root inode @ nid 36. [ 223.157059][ T6704] erofs: (device loop0): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 223.168287][ T6704] syz.0.603: attempt to access beyond end of device [ 223.168287][ T6704] loop0: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 223.197476][ T6704] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 223.208440][ T6704] syz.0.603: attempt to access beyond end of device [ 223.208440][ T6704] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 223.225550][ T6704] syz.0.603: attempt to access beyond end of device [ 223.225550][ T6704] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 223.272239][ T6704] syz.0.603: attempt to access beyond end of device [ 223.272239][ T6704] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 223.291081][ T6704] syz.0.603: attempt to access beyond end of device [ 223.291081][ T6704] loop0: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 223.405561][ T27] audit: type=1800 audit(1793793737.194:105): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.603" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 223.830856][ T6703] loop9: detected capacity change from 0 to 128 [ 225.048081][ T6364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.095746][ T6364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.135218][ T6364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.154424][ T6364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.318446][ T6704] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.518378][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.535827][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.581377][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.846063][ T5189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.863414][ T5189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.913300][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.929530][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.939429][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.206441][ T5923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.235646][ T6742] program syz.4.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.267563][ T5923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.301547][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.322001][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.347042][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.356620][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.369257][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.388257][ T6388] device veth0_vlan entered promiscuous mode [ 226.509776][ T6388] device veth1_vlan entered promiscuous mode [ 226.610171][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.632650][ T6752] binder: 6751:6752 ioctl c0306201 0 returned -14 [ 226.642861][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.758983][ T6753] loop2: detected capacity change from 0 to 128 [ 226.934119][ T6388] device veth0_macvtap entered promiscuous mode [ 226.996724][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 227.065859][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 227.108912][ T6759] loop4: detected capacity change from 0 to 128 [ 227.127489][ T6388] device veth1_macvtap entered promiscuous mode [ 227.183600][ T6761] program syz.2.615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.263844][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 227.272573][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.363030][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.409488][ T6759] syz.4.613: attempt to access beyond end of device [ 227.409488][ T6759] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 227.412525][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.436370][ T6759] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 227.454930][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.475280][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.491569][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.503021][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.521537][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.533670][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.554431][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.572509][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.597153][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.620117][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.646465][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.782353][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.815244][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.825627][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.839234][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.849761][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.861486][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.871823][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.890488][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.911958][ T6388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.934237][ T6388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.998904][ T6388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.019398][ T6388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.070638][ T6388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.105134][ T6388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.136807][ T6388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.191878][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.217020][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.274486][ T11] device hsr_slave_0 left promiscuous mode [ 228.299857][ T11] device hsr_slave_1 left promiscuous mode [ 228.355447][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.363361][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.403498][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.431817][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.452050][ T11] device bridge_slave_1 left promiscuous mode [ 228.465405][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.492892][ T6792] loop2: detected capacity change from 0 to 16 [ 228.499825][ T6789] program syz.4.621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.520734][ T6792] erofs: (device loop2): mounted with root inode @ nid 36. [ 228.556392][ T11] device bridge_slave_0 left promiscuous mode [ 228.563867][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.631377][ T6798] overlayfs: overlapping lowerdir path [ 228.711955][ T11] device veth1_macvtap left promiscuous mode [ 228.722809][ T11] device veth0_macvtap left promiscuous mode [ 228.757101][ T11] device veth1_vlan left promiscuous mode [ 228.763388][ T11] device veth0_vlan left promiscuous mode [ 229.310388][ T6814] loop2: detected capacity change from 0 to 1024 [ 229.324990][ T6814] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 229.423013][ T6814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.439809][ T6814] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.633142][ T6820] loop9: detected capacity change from 0 to 128 [ 229.767465][ T4383] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 229.958993][ T6820] syz.9.626: attempt to access beyond end of device [ 229.958993][ T6820] loop9: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 229.990054][ T6820] Buffer I/O error on dev loop9, logical block 128, lost async page write [ 230.004438][ T4383] usb 3-1: Using ep0 maxpacket: 16 [ 230.014453][ T4383] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 230.040216][ T4383] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.055462][ T4383] usb 3-1: config 0 has no interface number 0 [ 230.079089][ T4383] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 230.101349][ T4383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.117385][ T4383] usb 3-1: Product: syz [ 230.121652][ T4383] usb 3-1: Manufacturer: syz [ 230.129903][ T4383] usb 3-1: SerialNumber: syz [ 230.155006][ T4383] usb 3-1: config 0 descriptor?? [ 230.165926][ T6817] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 230.198947][ T4383] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 230.216357][ T4383] usb 3-1: No valid video chain found. [ 230.594151][ T11] team0 (unregistering): Port device team_slave_1 removed [ 230.664581][ T11] team0 (unregistering): Port device team_slave_0 removed [ 230.747399][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.815956][ T4354] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 230.843661][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.963334][ T4383] usb 3-1: USB disconnect, device number 2 [ 231.006549][ T6364] EXT4-fs (loop2): unmounting filesystem. [ 231.025655][ T4354] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 231.059231][ T4354] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.230674][ T6848] 9pnet_fd: Insufficient options for proto=fd [ 231.512428][ T4354] usb 10-1: Cannot set MAC address [ 231.521460][ T4354] MOSCHIP usb-ethernet driver: probe of 10-1:7.0 failed with error -71 [ 231.538059][ T4354] usb 10-1: USB disconnect, device number 2 [ 231.642983][ T11] bond0 (unregistering): Released all slaves [ 231.885653][ T4810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.893564][ T4810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.912286][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.020281][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.042755][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.128813][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.431933][ T6873] program syz.1.528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.461792][ T6877] loop2: detected capacity change from 0 to 16 [ 232.504603][ T6877] erofs: (device loop2): mounted with root inode @ nid 36. [ 232.558720][ T6877] overlayfs: overlapping lowerdir path [ 232.875770][ T6892] program syz.1.638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.897570][ T6890] 9pnet_fd: Insufficient options for proto=fd [ 233.026445][ T6898] program syz.4.640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.574338][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.9.648'. [ 233.591065][ T6926] loop0: detected capacity change from 0 to 16 [ 233.635830][ T6923] program syz.1.649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.646299][ T6926] erofs: (device loop0): mounted with root inode @ nid 36. [ 233.688349][ T6926] overlayfs: overlapping lowerdir path [ 233.961483][ T6933] program syz.1.653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.045497][ T6936] loop0: detected capacity change from 0 to 128 [ 234.146239][ T6941] program syz.9.655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.330506][ T6936] syz.0.654: attempt to access beyond end of device [ 234.330506][ T6936] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 234.352033][ T6936] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 234.838267][ T6967] program syz.1.663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.860884][ T6971] loop4: detected capacity change from 0 to 16 [ 234.893769][ T6969] loop0: detected capacity change from 0 to 128 [ 234.944028][ T6971] erofs: (device loop4): mounted with root inode @ nid 36. [ 234.951975][ T6974] fuse: Unknown parameter 'grou00000000000000000000' [ 234.976700][ T6969] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÚ+9 [ 234.976700][ T6969] ÿý®Q­ôôì•ËL%1Þk<íŸâ‹%X†uK‘EÂ`/æÐ[€n—ƒ¸Ö¼Iš_ˆóëYÿ– ;óÉà$rÕ¢x&tkxoøU'øÀð!DÊÚÚ·Ž½?É©ºŠxe" „§kû6Ä»ŒúøôGÉ= h“åzæý" or missing value [ 235.072037][ T6971] overlayfs: overlapping lowerdir path [ 235.431755][ T6990] program syz.0.671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.481010][ T6986] loop4: detected capacity change from 0 to 128 [ 235.528453][ T6992] loop2: detected capacity change from 0 to 128 [ 235.875813][ T6992] syz.2.672: attempt to access beyond end of device [ 235.875813][ T6992] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 235.906545][ T6992] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 236.263378][ T7018] program syz.4.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.380153][ T7024] fuse: Unknown parameter 'grou00000000000000000000' [ 236.459135][ T7021] loop2: detected capacity change from 0 to 128 [ 236.496330][ T7021] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÚ+9 [ 236.496330][ T7021] ÿý®Q­ôôì•ËL%1Þk<íŸâ‹%X†uK‘EÂ`/æÐ[€n—ƒ¸Ö¼Iš_ˆóëYÿ– ;óÉà$rÕ¢x&tkxoøU'øÀð!DÊÚÚ·Ž½?É©ºŠxe" „§kû6Ä»ŒúøôGÉ= h“åzæý" or missing value [ 236.938002][ T7038] program syz.2.685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.021360][ T7036] loop0: detected capacity change from 0 to 128 [ 237.066238][ T7036] FAT-fs (loop0): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÚ+9 [ 237.066238][ T7036] ÿý®Q­ôôì•ËL%1Þk<íŸâ‹%X†uK‘EÂ`/æÐ[€n—ƒ¸Ö¼Iš_ˆóëYÿ– ;óÉà$rÕ¢x&tkxoøU'øÀð!DÊÚÚ·Ž½?É©ºŠxe" „§kû6Ä»ŒúøôGÉ= h“åzæý" or missing value [ 237.335917][ T7049] loop1: detected capacity change from 0 to 128 [ 237.695829][ T7049] syz.1.689: attempt to access beyond end of device [ 237.695829][ T7049] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 237.718422][ T7049] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 237.747873][ T7065] fuse: Unknown parameter 'grou00000000000000000000' [ 237.766449][ T7066] program syz.4.693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.101187][ T7070] loop1: detected capacity change from 0 to 128 [ 238.146530][ T7070] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÚ+9 [ 238.146530][ T7070] ÿý®Q­ôôì•ËL%1Þk<íŸâ‹%X†uK‘EÂ`/æÐ[€n—ƒ¸Ö¼Iš_ˆóëYÿ– ;óÉà$rÕ¢x&tkxoøU'øÀð!DÊÚÚ·Ž½?É©ºŠxe" „§kû6Ä»ŒúøôGÉ= h“åzæý" or missing value [ 238.428953][ T7082] program syz.0.699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.546466][ T7087] program syz.2.701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.693817][ T7097] loop0: detected capacity change from 0 to 16 [ 238.765505][ T7097] erofs: (device loop0): mounted with root inode @ nid 36. [ 238.832234][ T7097] overlayfs: overlapping lowerdir path [ 238.883011][ T7103] loop2: detected capacity change from 0 to 512 [ 239.246608][ T7113] loop1: detected capacity change from 0 to 128 [ 240.076733][ T7103] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.088096][ T4354] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 240.151044][ T7103] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.166046][ T7111] loop0: detected capacity change from 0 to 128 [ 240.195136][ T4354] hid-generic 0000:0008:0000.0001: unknown main item tag 0x0 [ 240.277414][ T4354] hid-generic 0000:0008:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 240.424666][ T7118] fuse: Unknown parameter 'group_i00000000000000000000' [ 240.564167][ T27] audit: type=1800 audit(1793793754.514:106): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.704" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 240.873263][ T6364] EXT4-fs (loop2): unmounting filesystem. [ 241.186391][ T7122] fido_id[7122]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 241.575651][ T7136] program syz.1.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.603333][ T7129] loop0: detected capacity change from 0 to 128 [ 241.913767][ T7151] loop1: detected capacity change from 0 to 16 [ 241.941336][ T7129] syz.0.711: attempt to access beyond end of device [ 241.941336][ T7129] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 241.967100][ T7151] erofs: (device loop1): mounted with root inode @ nid 36. [ 241.978035][ T7129] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 241.992519][ T7152] program syz.2.715 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.042180][ T7151] overlayfs: overlapping lowerdir path [ 242.250188][ T7159] capability: warning: `syz.0.718' uses 32-bit capabilities (legacy support in use) [ 242.319191][ T7163] program syz.2.719 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.549089][ T7164] loop1: detected capacity change from 0 to 128 [ 242.897082][ T7164] syz.1.720: attempt to access beyond end of device [ 242.897082][ T7164] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 242.933457][ T7164] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 242.961593][ T7180] loop4: detected capacity change from 0 to 16 [ 243.017522][ T7180] erofs: (device loop4): mounted with root inode @ nid 36. [ 243.257055][ T7183] program syz.2.727 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.340267][ T7157] loop9: detected capacity change from 0 to 40427 [ 243.384369][ T7157] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 243.398419][ T7157] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 243.454869][ T7157] F2FS-fs (loop9): invalid crc value [ 243.464454][ T7190] program syz.0.730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.487838][ T7199] loop2: detected capacity change from 0 to 16 [ 243.509651][ T7157] F2FS-fs (loop9): Found nat_bits in checkpoint [ 243.516784][ T7199] erofs: (device loop2): mounted with root inode @ nid 36. [ 243.541445][ T7189] loop4: detected capacity change from 0 to 128 [ 243.586234][ T7199] FAULT_INJECTION: forcing a failure. [ 243.586234][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 243.668041][ T7199] CPU: 1 PID: 7199 Comm: syz.2.731 Not tainted syzkaller #0 [ 243.675431][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 243.685540][ T7199] Call Trace: [ 243.688889][ T7199] [ 243.691891][ T7199] dump_stack_lvl+0x188/0x24e [ 243.696620][ T7199] ? show_regs_print_info+0x12/0x12 [ 243.701865][ T7199] ? load_image+0x410/0x410 [ 243.706409][ T7199] ? __might_sleep+0xd0/0xd0 [ 243.711034][ T7199] ? __lock_acquire+0x7ea0/0x7ea0 [ 243.716099][ T7199] should_fail_ex+0x390/0x4c0 [ 243.720820][ T7199] should_failslab+0x5/0x20 [ 243.725360][ T7199] slab_pre_alloc_hook+0x59/0x300 [ 243.730448][ T7199] ? ovl_alloc_entry+0x20/0x80 [ 243.735264][ T7199] __kmem_cache_alloc_node+0x4f/0x270 [ 243.740701][ T7199] ? ovl_alloc_entry+0x20/0x80 [ 243.745534][ T7199] __kmalloc+0xa3/0x240 [ 243.749724][ T7199] ovl_alloc_entry+0x20/0x80 [ 243.754348][ T7199] ovl_lookup+0x1226/0x18d0 [ 243.758904][ T7199] ? ovl_path_next+0x260/0x260 [ 243.763699][ T7199] ? __lock_acquire+0x7ea0/0x7ea0 [ 243.768766][ T7199] ? __rwlock_init+0x140/0x140 [ 243.773562][ T7199] ? d_set_d_op+0x242/0x370 [ 243.778110][ T7199] ? do_raw_spin_unlock+0x11d/0x230 [ 243.783340][ T7199] ? _raw_spin_unlock+0x24/0x40 [ 243.788222][ T7199] ? d_alloc+0x1e7/0x250 [ 243.792493][ T7199] lookup_one_qstr_excl+0x10e/0x240 [ 243.797755][ T7199] filename_create+0x242/0x450 [ 243.802564][ T7199] ? kern_path_create+0x50/0x50 [ 243.807479][ T7199] ? __virt_addr_valid+0x467/0x540 [ 243.812629][ T7199] do_mkdirat+0xa5/0x440 [ 243.816928][ T7199] ? vfs_mkdir+0x570/0x570 [ 243.821381][ T7199] __x64_sys_mkdirat+0x85/0x90 [ 243.826177][ T7199] do_syscall_64+0x4c/0xa0 [ 243.830629][ T7199] ? clear_bhb_loop+0x60/0xb0 [ 243.835343][ T7199] ? clear_bhb_loop+0x60/0xb0 [ 243.840061][ T7199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.845993][ T7199] RIP: 0033:0x7fe7b6f9fb19 [ 243.850448][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.870084][ T7199] RSP: 002b:00007fe7b7ee8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 243.878539][ T7199] RAX: ffffffffffffffda RBX: 00007fe7b7225fa0 RCX: 00007fe7b6f9fb19 [ 243.886624][ T7199] RDX: 00000000000001ff RSI: 0000200000000f80 RDI: ffffffffffffff9c [ 243.894652][ T7199] RBP: 00007fe7b7037b70 R08: 0000000000000000 R09: 0000000000000000 [ 243.902652][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.910699][ T7199] R13: 00007fe7b7226038 R14: 00007fe7b7225fa0 R15: 00007ffee9815378 [ 243.918859][ T7199] [ 243.998817][ T7157] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 244.030693][ T7157] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 244.081935][ T7202] program syz.0.732 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.173606][ T7189] syz.4.729: attempt to access beyond end of device [ 244.173606][ T7189] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 244.198375][ T7189] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 244.615617][ T6364] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 244.746976][ T7222] loop4: detected capacity change from 0 to 512 [ 244.754309][ T7222] EXT4-fs: inline encryption not supported [ 244.778730][ T7222] EXT4-fs: Ignoring removed oldalloc option [ 244.786092][ T7222] EXT4-fs (loop4): Test dummy encryption mode enabled [ 244.813729][ T7222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 244.865270][ T7222] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.737: bad orphan inode 131083 [ 244.884747][ T7222] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 244.907348][ T7222] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.737: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=44, inode=12, rec_len=9, size=1024 fake=0 [ 245.132588][ T6064] EXT4-fs (loop4): unmounting filesystem. [ 245.190000][ T5190] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.358470][ T129] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 245.448604][ T5190] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.575723][ T129] usb 2-1: Using ep0 maxpacket: 32 [ 245.589180][ T129] usb 2-1: unable to get BOS descriptor or descriptor too short [ 245.593595][ T7243] loop0: detected capacity change from 0 to 256 [ 245.609940][ T7239] program syz.9.744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.628805][ T129] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 245.638016][ T5190] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.648610][ T129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.656963][ T7242] binder: 7240:7242 unknown command 1074553619 [ 245.663209][ T7242] binder: 7240:7242 ioctl c0306201 2000000005c0 returned -22 [ 245.696298][ T129] usb 2-1: Product: syz [ 245.707406][ T129] usb 2-1: Manufacturer: syz [ 245.723328][ T7243] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 245.731786][ T129] usb 2-1: SerialNumber: syz [ 245.874231][ T5190] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.259697][ T7251] loop4: detected capacity change from 0 to 128 [ 246.543560][ T7251] syz.4.746: attempt to access beyond end of device [ 246.543560][ T7251] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 246.564132][ T7251] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 246.640311][ T129] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 246.663067][ T129] usb 2-1: USB disconnect, device number 2 [ 246.716890][ T7265] loop9: detected capacity change from 0 to 16 [ 246.754406][ T7265] erofs: (device loop9): mounted with root inode @ nid 36. [ 246.894772][ T7265] FAULT_INJECTION: forcing a failure. [ 246.894772][ T7265] name failslab, interval 1, probability 0, space 0, times 0 [ 246.943646][ T7265] CPU: 0 PID: 7265 Comm: syz.9.749 Not tainted syzkaller #0 [ 246.951125][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 246.961236][ T7265] Call Trace: [ 246.964560][ T7265] [ 246.967534][ T7265] dump_stack_lvl+0x188/0x24e [ 246.972325][ T7265] ? show_regs_print_info+0x12/0x12 [ 246.977873][ T7265] ? load_image+0x410/0x410 [ 246.982466][ T7265] ? __might_sleep+0xd0/0xd0 [ 246.987129][ T7265] ? __lock_acquire+0x7ea0/0x7ea0 [ 246.992232][ T7265] should_fail_ex+0x390/0x4c0 [ 247.003653][ T7265] should_failslab+0x5/0x20 [ 247.009004][ T7265] slab_pre_alloc_hook+0x59/0x300 [ 247.014190][ T7265] ? ovl_alloc_entry+0x20/0x80 [ 247.019019][ T7265] __kmem_cache_alloc_node+0x4f/0x270 [ 247.024640][ T7265] ? ovl_alloc_entry+0x20/0x80 [ 247.029470][ T7265] __kmalloc+0xa3/0x240 [ 247.033695][ T7265] ovl_alloc_entry+0x20/0x80 [ 247.038352][ T7265] ovl_lookup+0x1226/0x18d0 [ 247.043215][ T7265] ? ovl_path_next+0x260/0x260 [ 247.048055][ T7265] ? __lock_acquire+0x7ea0/0x7ea0 [ 247.053188][ T7265] ? __rwlock_init+0x140/0x140 [ 247.058055][ T7265] ? d_set_d_op+0x242/0x370 [ 247.062647][ T7265] ? do_raw_spin_unlock+0x11d/0x230 [ 247.067913][ T7265] ? _raw_spin_unlock+0x24/0x40 [ 247.072833][ T7265] ? d_alloc+0x1e7/0x250 [ 247.077155][ T7265] lookup_one_qstr_excl+0x10e/0x240 [ 247.082423][ T7265] filename_create+0x242/0x450 [ 247.087254][ T7265] ? kern_path_create+0x50/0x50 [ 247.092164][ T7265] ? __virt_addr_valid+0x467/0x540 [ 247.097361][ T7265] do_mkdirat+0xa5/0x440 [ 247.101663][ T7265] ? vfs_mkdir+0x570/0x570 [ 247.106154][ T7265] __x64_sys_mkdirat+0x85/0x90 [ 247.110976][ T7265] do_syscall_64+0x4c/0xa0 [ 247.115454][ T7265] ? clear_bhb_loop+0x60/0xb0 [ 247.120198][ T7265] ? clear_bhb_loop+0x60/0xb0 [ 247.124977][ T7265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.130939][ T7265] RIP: 0033:0x7f7305f9fb19 [ 247.135410][ T7265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.155114][ T7265] RSP: 002b:00007f7306e08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 247.163596][ T7265] RAX: ffffffffffffffda RBX: 00007f7306225fa0 RCX: 00007f7305f9fb19 [ 247.171631][ T7265] RDX: 00000000000001ff RSI: 0000200000000f80 RDI: ffffffffffffff9c [ 247.179685][ T7265] RBP: 00007f7306037b70 R08: 0000000000000000 R09: 0000000000000000 [ 247.187714][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.195741][ T7265] R13: 00007f7306226038 R14: 00007f7306225fa0 R15: 00007ffd38f2baf8 [ 247.203786][ T7265] [ 247.308908][ T5992] erofs: (device loop9): erofs_fill_dentries: bogus dirent @ nid 36 [ 248.095017][ T7293] loop1: detected capacity change from 0 to 512 [ 248.464279][ T7300] xt_hashlimit: size too large, truncated to 1048576 [ 248.689985][ T7308] loop1: detected capacity change from 0 to 16 [ 248.705993][ T7308] erofs: (device loop1): mounted with root inode @ nid 36. [ 248.828019][ T4948] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.033106][ T7321] program syz.1.759 is using a deprecated SCSI ioctl, please convert it to SG_IO SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=3 req=742 state=1 status=67 (errno 9: Bad file descriptor) [ 251.913181][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.938857][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.948220][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.956472][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.964197][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 251.971701][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.339597][ T7350] rxe_eth0 speed is unknown, defaulting to 1000 [ 254.085517][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 254.118443][ T7350] chnl_net:caif_netlink_parms(): no params data found [ 254.306076][ T5190] device hsr_slave_0 left promiscuous mode [ 254.319840][ T5190] device hsr_slave_1 left promiscuous mode [ 254.329171][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.344314][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.359598][ T5190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.370083][ T5190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.384195][ T5190] device bridge_slave_1 left promiscuous mode [ 254.391913][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.401275][ T5190] device bridge_slave_0 left promiscuous mode [ 254.408812][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.434646][ T5190] device veth1_macvtap left promiscuous mode [ 254.440891][ T5190] device veth0_macvtap left promiscuous mode [ 254.447108][ T5190] device veth1_vlan left promiscuous mode [ 254.453016][ T5190] device veth0_vlan left promiscuous mode [ 255.394781][ T5190] team0 (unregistering): Port device team_slave_1 removed [ 255.482961][ T5190] team0 (unregistering): Port device team_slave_0 removed [ 255.549553][ T5190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.605295][ T5190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.853095][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.859548][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.091593][ T5190] bond0 (unregistering): Released all slaves [ 256.164704][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.172154][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 256.178599][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.188350][ T7350] device bridge_slave_0 entered promiscuous mode [ 256.208660][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.224368][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.242806][ T7350] device bridge_slave_1 entered promiscuous mode [ 256.324260][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.344941][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.432227][ T7350] team0: Port device team_slave_0 added [ 256.451366][ T7350] team0: Port device team_slave_1 added [ 256.493585][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.504863][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.539980][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.560322][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.570005][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.605630][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.666863][ T7350] device hsr_slave_0 entered promiscuous mode [ 256.674002][ T7350] device hsr_slave_1 entered promiscuous mode [ 256.684383][ T7350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.694326][ T7350] Cannot create hsr debugfs directory [ 256.977366][ T5190] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.088531][ T5190] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.184842][ T5190] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.296789][ T5190] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.466333][ T7350] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 257.503922][ T7350] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 257.558516][ T5190] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.581571][ T7350] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 257.599239][ T7350] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 257.657182][ T5190] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.741947][ T5190] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.803647][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.849755][ T5190] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.889377][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.903957][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.919641][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.951753][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.967354][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.981698][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.988974][ T5189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.008149][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.016689][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.027849][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.036679][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.043838][ T5189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.054632][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.091781][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.169302][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.182010][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.191320][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.203890][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 258.215873][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.224762][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.240651][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.251375][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 258.263149][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.274785][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 258.320536][ T5190] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.418472][ T5190] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.477684][ T5190] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.574032][ T5190] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.810588][ T5190] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.849551][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.860856][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.882396][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.923207][ T5190] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.025388][ T5190] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.118730][ T5190] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.548324][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.559924][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.860917][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.870866][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.881665][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.892592][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.905930][ T7350] device veth0_vlan entered promiscuous mode [ 259.995014][ T7350] device veth1_vlan entered promiscuous mode [ 260.037199][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.051313][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.064685][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.081338][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.180324][ T7350] device veth0_macvtap entered promiscuous mode [ 260.193576][ T7350] device veth1_macvtap entered promiscuous mode [ 260.302255][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.313026][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.324374][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.335546][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 260.347649][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.358114][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.368835][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.378811][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.389599][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.401541][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.411763][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.426901][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.441295][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.451169][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.473772][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.484649][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.497513][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.515159][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.526994][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.538036][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.548201][ T7350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.559109][ T7350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.577452][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.715887][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 260.735774][ T5586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 260.747653][ T7350] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.762204][ T7350] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.773807][ T7350] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.783002][ T7350] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.014069][ T4814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.035486][ T4814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.190153][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.221051][ T5586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.246250][ T5586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50