000c0)='./bus/file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') 03:40:34 executing program 0: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x43000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') 03:40:34 executing program 3: syz_mount_image$gfs2(&(0x7f000001f680), &(0x7f000001f6c0)='./file0\x00', 0x0, &(0x7f000001f700), 0x1, 0x1f679, &(0x7f000001f740)="$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") 03:40:34 executing program 2: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x43000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') 03:40:34 executing program 4: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x43000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') 03:40:34 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 03:40:34 executing program 5: syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0xfe, 0x172, &(0x7f0000000240)="$eJzs20tOwlAUxvGvgIr4fhtHJibGiVSBhDCTBbgBZwQqIRY14gRiYlyKO3EnbgAGbsAaSqOWOKhtoMb+fwn0TL7e28Gh5w4QgMQ6c78NGcq6leM4j/uSLs4lZWLeHICJcrzruwMgedK0PpBQg2raff+/GNLr20O9732yAeeHQTU1Kgyp/y0/HzT/ZLjXvYw/n5O0EGR+eR7lD+XPL/5y/dxYfilwfvT8Rwf+/LKkFUmrktYkrUvakLQpaeuH9Rtj6+8GXB8AAAAAgCCGp8981HyEGwxPz5ct2zoJmZ/x8qch87NevhAxXwyZn/Py+fqN3Qh5DyCsVMz9n47Y/5mI/Q8kWafbu6rZtnVHQUFB8VnE/csEYNLM+/at2en2jlvtWtNqWtelcqVSLhULFdMdy80owzmAP+3rpR/3TgAAAAAAAAAAAAAAQFjbknbi3gQAAACAqZjG34nifkYAAAAAAAAAAAAAAP67jwAAAP//zxJLFg==") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r0, 0xffff) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff6, 0x11, r1, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0x10}, 0x10) write$FUSE_LSEEK(r1, &(0x7f00000000c0)={0x18}, 0x18) 03:40:34 executing program 0: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x43000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') 03:40:34 executing program 2: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x43000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') 03:40:34 executing program 4: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x43000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') 03:40:34 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 03:40:34 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 03:40:35 executing program 2: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x69) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x0, 0x0, [{{r1}}]}) 03:40:35 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) [ 2890.011632][ T27] audit: type=1804 audit(2000000435.209:1268): pid=17187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4137920193/syzkaller.w4r8zt/986/bus/file0" dev="overlay" ino=1225 res=1 errno=0 03:40:35 executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x69) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x0, 0x0, [{{r1}}]}) 03:40:35 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) 03:40:35 executing program 4: clock_adjtime(0x0, &(0x7f0000001100)) 03:40:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 03:40:35 executing program 2: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x69) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x0, 0x0, [{{r1}}]}) 03:40:35 executing program 1: r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) 03:40:35 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) 03:40:35 executing program 4: clock_adjtime(0x0, &(0x7f0000001100)) 03:40:36 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x69) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x0, 0x0, [{{r1}}]}) 03:40:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) [ 2890.869041][T17208] overlayfs: failed to resolve './file0': -2 03:40:36 executing program 4: clock_adjtime(0x0, &(0x7f0000001100)) [ 2891.044084][ T27] audit: type=1804 audit(2000000436.229:1269): pid=17202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4137920193/syzkaller.w4r8zt/987/bus/file0" dev="overlay" ino=1241 res=1 errno=0 03:40:36 executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x69) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x0, 0x0, [{{r1}}]}) 03:40:36 executing program 2: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x69) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x0, 0x0, [{{r1}}]}) 03:40:36 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) 03:40:36 executing program 4: clock_adjtime(0x0, &(0x7f0000001100)) 03:40:36 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x29, 0x3, 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11fffffffff70000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180002000321e1943715949184860eb6b52cdb608f29"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\b\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="0000000000000000f2ff0000080001007533320020000200080003000000000014000500"/52], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x4000000) getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000005c0), 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002400040529bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0600000004000200080603000600050005040000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmmsg$unix(r4, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5b662275dac011173f0a3dff6bd10800b8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be", 0x4e}], 0x2, &(0x7f0000000a40)=ANY=[], 0x40, 0x800}}], 0x1, 0x20004805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 03:40:36 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) [ 2891.299424][ T27] audit: type=1804 audit(2000000436.499:1270): pid=17215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1932162161/syzkaller.dQysdF/1051/bus/file0" dev="overlay" ino=1257 res=1 errno=0 03:40:36 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x69) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x0, 0x0, [{{r1}}]}) [ 2892.981056][T17238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:40:39 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) 03:40:39 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) [ 2893.926756][ T27] audit: type=1804 audit(2000000439.119:1271): pid=17228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2555077571/syzkaller.tls069/1060/bus/file0" dev="overlay" ino=1227 res=1 errno=0 03:40:39 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x29, 0x3, 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11fffffffff70000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180002000321e1943715949184860eb6b52cdb608f29"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\b\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="0000000000000000f2ff0000080001007533320020000200080003000000000014000500"/52], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x4000000) getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000005c0), 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002400040529bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0600000004000200080603000600050005040000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmmsg$unix(r4, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5b662275dac011173f0a3dff6bd10800b8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be", 0x4e}], 0x2, &(0x7f0000000a40)=ANY=[], 0x40, 0x800}}], 0x1, 0x20004805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 03:40:39 executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x69) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x0, 0x0, [{{r1}}]}) [ 2894.346422][ T27] audit: type=1804 audit(2000000439.539:1272): pid=17240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4137920193/syzkaller.w4r8zt/988/bus/file0" dev="overlay" ino=1253 res=1 errno=0 03:40:39 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="44c0f49952ffee802a6334c1dc02b36ebb34f9fe69346eef3d5d6d76b8d2b88369358f2ce7e564a1c36146376d15f0fd89f31cd5c4ee768332b3026569fc2b2ab8cfbfabc7a3387e8e3f51949da7a76d70a47d61701d3ae482c8bea64a0dd73cf5fd5994f42813471bc41cb1a70d0369010cb1276595873d7dc777654a787c062a615f9acb826a390434de36c942cc9d5e639d3c25cbf3de841a31b2a6f0914c98ffb219080d1ed01f2bc2ec74c3634032afc2e37816130582b74554984c7cd8bece7fe269e2f6922349b14cea9331c3bf140ab8d6ef76f7a7521a09788779211faab23160f6cd3bf1f60cc018aa1667bb9751e2032bec608a62330d7b20f024c4444f6744028efa407cf24a5d88cb5ee5770ade7610a4b7c9169614fdd7c703c603d2ec04921ac203fba7b2372acafdc33dbdda972fa7fdc8825c5511e8d52328688097ff3f7d1788995571700db2d76712cf06c8b42e3006b302f686c7f94a958ffa68f90225bacd9a2a7ce6df2b474f77db88b05050ce7d5e5b82dc11dc39c3d0534fd56dfa5b2a20d510195f3e4304de5883a7ba1f80b2487276105a82dc2371edbfad94d518fdf74e05f33ca361ca3b2e75a640ac3412f1b3", 0x1bb) 03:40:40 executing program 2: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x69) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x0, 0x0, [{{r1}}]}) 03:40:40 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) 03:40:41 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x29, 0x3, 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11fffffffff70000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180002000321e1943715949184860eb6b52cdb608f29"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\b\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="0000000000000000f2ff0000080001007533320020000200080003000000000014000500"/52], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x4000000) getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000005c0), 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002400040529bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0600000004000200080603000600050005040000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmmsg$unix(r4, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5b662275dac011173f0a3dff6bd10800b8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be", 0x4e}], 0x2, &(0x7f0000000a40)=ANY=[], 0x40, 0x800}}], 0x1, 0x20004805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) [ 2897.484143][T17274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:40:43 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) 03:40:45 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) [ 2899.893850][T17275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 03:40:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x29, 0x3, 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11fffffffff70000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180002000321e1943715949184860eb6b52cdb608f29"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\b\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="0000000000000000f2ff0000080001007533320020000200080003000000000014000500"/52], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x4000000) getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000005c0), 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002400040529bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0600000004000200080603000600050005040000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmmsg$unix(r4, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5b662275dac011173f0a3dff6bd10800b8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be", 0x4e}], 0x2, &(0x7f0000000a40)=ANY=[], 0x40, 0x800}}], 0x1, 0x20004805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 03:40:46 executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000540)='./bus\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[], 0x69) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2, 0x1, 0x0, 0x0, [{{r1}}]}) 03:40:46 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x29, 0x3, 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11fffffffff70000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180002000321e1943715949184860eb6b52cdb608f29"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\b\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="0000000000000000f2ff0000080001007533320020000200080003000000000014000500"/52], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x4000000) getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000005c0), 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002400040529bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0600000004000200080603000600050005040000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmmsg$unix(r4, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5b662275dac011173f0a3dff6bd10800b8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be", 0x4e}], 0x2, &(0x7f0000000a40)=ANY=[], 0x40, 0x800}}], 0x1, 0x20004805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 03:40:46 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) [ 2900.994615][ T27] audit: type=1804 audit(2000000446.189:1273): pid=17299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1932162161/syzkaller.dQysdF/1052/bus/file0" dev="overlay" ino=1196 res=1 errno=0 03:40:46 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) [ 2901.107155][ T27] audit: type=1804 audit(2000000446.229:1274): pid=17302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4137920193/syzkaller.w4r8zt/989/bus/file0" dev="overlay" ino=1254 res=1 errno=0 [ 2902.094908][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 03:40:49 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) 03:40:49 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x29, 0x3, 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11fffffffff70000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180002000321e1943715949184860eb6b52cdb608f29"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\b\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="0000000000000000f2ff0000080001007533320020000200080003000000000014000500"/52], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x4000000) getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000005c0), 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002400040529bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0600000004000200080603000600050005040000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmmsg$unix(r4, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5b662275dac011173f0a3dff6bd10800b8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be", 0x4e}], 0x2, &(0x7f0000000a40)=ANY=[], 0x40, 0x800}}], 0x1, 0x20004805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 03:40:49 executing program 3: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, 0x0) [ 2904.235957][ T27] audit: type=1804 audit(2000000446.309:1275): pid=17303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2555077571/syzkaller.tls069/1061/bus/file0" dev="overlay" ino=1253 res=1 errno=0 [ 2904.261822][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:40:49 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x29, 0x3, 0x8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11fffffffff70000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r4, @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180002000321e1943715949184860eb6b52cdb608f29"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\b\x00\x00\x00\x00\x00\x00\x00`\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="0000000000000000f2ff0000080001007533320020000200080003000000000014000500"/52], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES8], 0x6c}, 0x1, 0x0, 0x0, 0x40440c1}, 0x4000000) getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f00000005c0), 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002400040529bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0600000004000200080603000600050005040000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmmsg$unix(r4, &(0x7f0000000680)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000400)="d5593aac8678973b44e52aefccf45aa952ca4e4d710950c2fbf3b9a6d94262ed51dddc11e9c9ebb03752593d9d451f41793cbbbe85a12c74d094c451f9ec248d4b4ac6ff99a9f369", 0x48}, {&(0x7f0000000500)="43ef61b0080002bfc60d643e361f192a3e9d5fc22a3ed77f358f4af87c6dd9c4c5b662275dac011173f0a3dff6bd10800b8795cc87e07f8b38a0ef3b5721341375a49f25cafadb31e66344a7f6be", 0x4e}], 0x2, &(0x7f0000000a40)=ANY=[], 0x40, 0x800}}], 0x1, 0x20004805) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) 03:40:51 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) [ 2906.400229][ T27] audit: type=1804 audit(2000000451.599:1276): pid=17323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1932162161/syzkaller.dQysdF/1053/bus/file0" dev="overlay" ino=1236 res=1 errno=0 [ 2906.489851][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 03:40:51 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) 03:40:53 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) 03:40:53 executing program 3: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, 0x0) 03:40:53 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, 0x0) 03:40:54 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$hidraw(0xffffffffffffffff, 0xfffffffffffffffc, 0x101142) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x16, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x0) ftruncate(r2, 0x9) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000240)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000b40)) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) write$hidraw(r4, &(0x7f00000002c0), 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1bb) [ 2910.298621][T17351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:40:56 executing program 3: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, 0x0) 03:40:56 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, 0x0) 03:40:56 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x7fffffffffffffff, 0x401}) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:40:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x7fffffffffffffff, 0x401}) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:40:57 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0xc00, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "d67c2e955dfc8d2809389b7bbf2733abab45f0a9da6f2b5022690218681adc92c08e992e41c18a16fafb9272b2b750b66e5999dc52ea9d2f21e7d9d3beb5df13"}}, 0x80}}, 0x0) 03:40:57 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) 03:40:57 executing program 3: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, 0x0) 03:40:57 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x80086601, 0x0) 03:40:57 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x7fffffffffffffff, 0x401}) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:40:57 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0xc00, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "d67c2e955dfc8d2809389b7bbf2733abab45f0a9da6f2b5022690218681adc92c08e992e41c18a16fafb9272b2b750b66e5999dc52ea9d2f21e7d9d3beb5df13"}}, 0x80}}, 0x0) 03:40:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x7fffffffffffffff, 0x401}) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:40:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x18, 0x4, 0x7, 0x5, 0x0, 0x0, {}, [@generic="f7"]}, 0x18}}, 0x0) 03:40:58 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0xc00, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "d67c2e955dfc8d2809389b7bbf2733abab45f0a9da6f2b5022690218681adc92c08e992e41c18a16fafb9272b2b750b66e5999dc52ea9d2f21e7d9d3beb5df13"}}, 0x80}}, 0x0) 03:40:58 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0xc00, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "d67c2e955dfc8d2809389b7bbf2733abab45f0a9da6f2b5022690218681adc92c08e992e41c18a16fafb9272b2b750b66e5999dc52ea9d2f21e7d9d3beb5df13"}}, 0x80}}, 0x0) [ 2913.266185][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2913.320267][T17401] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 2913.328901][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2913.344899][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2913.352260][T17401] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:40:58 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$PIO_UNISCRNMAP(r0, 0x8910, 0x0) [ 2913.369459][T17401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2913.386723][T17403] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:40:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x7fffffffffffffff, 0x401}) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:40:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x18, 0x4, 0x7, 0x5, 0x0, 0x0, {}, [@generic="f7"]}, 0x18}}, 0x0) [ 2913.621428][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:40:59 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) 03:40:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000380)="ec", 0x0}, 0x20) 03:40:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x7fffffffffffffff, 0x401}) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:40:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x7fffffffffffffff, 0x401}) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:40:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x18, 0x4, 0x7, 0x5, 0x0, 0x0, {}, [@generic="f7"]}, 0x18}}, 0x0) 03:40:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000380)="ec", 0x0}, 0x20) 03:40:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x18, 0x4, 0x7, 0x5, 0x0, 0x0, {}, [@generic="f7"]}, 0x18}}, 0x0) [ 2914.215752][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2914.328685][T17440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:40:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000380)="ec", 0x0}, 0x20) 03:41:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000380)="ec", 0x0}, 0x20) 03:41:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x7fffffffffffffff, 0x401}) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:41:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000380)="ec", 0x0}, 0x20) 03:41:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000380)="ec", 0x0}, 0x20) [ 2915.293664][T17442] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 2915.302083][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2915.338391][T17442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2915.345795][T17442] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2915.354613][T17442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2915.364040][T17442] 8021q: adding VLAN 0 to HW filter on device team0 [ 2915.374668][T17442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2915.391583][T17443] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:41:01 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) 03:41:01 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) 03:41:01 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x6, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000380)="ec", 0x0}, 0x20) 03:41:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x7fffffffffffffff, 0x401}) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:41:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x2010050, 0x0) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0xbc9dc8fbd81cb4a1) fcntl$lock(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rcu_utilization\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x2, 0x1, 0x7fffffffffffffff, 0x401}) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 03:41:01 executing program 1: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) 03:41:02 executing program 5: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2917.965400][ T1199] ieee802154 phy0 wpan0: encryption failed: -22 [ 2917.994333][ T1199] ieee802154 phy1 wpan1: encryption failed: -22 [ 2917.994547][T17472] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2918.009126][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2918.048742][T17472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2918.056220][T17472] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2918.065134][T17472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2918.073802][T17472] 8021q: adding VLAN 0 to HW filter on device team0 [ 2918.095707][T17472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2918.112922][T17473] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:41:03 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) 03:41:03 executing program 3: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2921.194771][T17473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2921.376503][T17481] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 2921.384832][T17481] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:06 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2921.424212][T17481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2921.431555][T17481] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2921.440335][T17481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2921.451325][T17481] 8021q: adding VLAN 0 to HW filter on device team0 [ 2921.462656][T17481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2921.478892][T17483] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:41:07 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2922.250956][T17484] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2922.259485][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2922.303089][T17484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2922.310925][T17484] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2922.320559][T17484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2922.330196][T17484] 8021q: adding VLAN 0 to HW filter on device team0 [ 2922.346099][T17484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2922.404807][T17486] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:41:09 executing program 1: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2923.878272][T17492] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2923.887251][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2923.903883][T17492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2923.911302][T17492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2923.927354][T17492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2923.943592][T17493] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:41:10 executing program 5: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2925.498200][T17502] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 2925.506562][T17502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2925.529708][T17502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2925.537270][T17502] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2925.551110][T17502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2925.567863][T17501] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 2925.576305][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2925.611667][T17501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2925.619103][T17501] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2925.628234][T17501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2925.640135][T17501] 8021q: adding VLAN 0 to HW filter on device team0 [ 2925.653142][T17501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2925.669739][T17504] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 2926.467539][T17504] bridge0: port 2(bridge_slave_1) entered disabled state [ 2926.474925][T17504] bridge0: port 1(bridge_slave_0) entered disabled state [ 2927.131596][T17504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2927.186625][T17504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2927.668851][T17504] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2927.678107][T17504] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2927.687481][T17504] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2927.696473][T17504] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 03:41:13 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2928.014381][T17503] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 03:41:14 executing program 3: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2929.369503][T17510] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2929.377871][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2929.414392][T17510] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2929.421760][T17510] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2929.430460][T17510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2929.439135][T17510] 8021q: adding VLAN 0 to HW filter on device team0 [ 2929.450490][T17510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2929.466638][T17511] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2930.763923][T17516] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 2930.772153][T17516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 03:41:16 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2930.807438][T17516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2930.814924][T17516] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2930.823565][T17516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2930.832896][T17516] 8021q: adding VLAN 0 to HW filter on device team0 [ 2930.861192][T17516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2930.877579][T17517] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:41:17 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2932.249883][T17522] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2932.258427][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2932.294582][T17522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2932.301929][T17522] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2932.310601][T17522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2932.319237][T17522] 8021q: adding VLAN 0 to HW filter on device team0 [ 2932.335147][T17522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2932.351550][T17523] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:41:18 executing program 1: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2933.648056][T17528] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2933.656572][T17528] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2933.695329][T17528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2933.702669][T17528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2933.711409][T17528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2933.728011][T17528] 8021q: adding VLAN 0 to HW filter on device team0 [ 2933.739520][T17528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2933.755591][T17529] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2935.086574][T17536] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 2935.095029][T17536] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:41:20 executing program 5: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2935.132260][T17536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2935.139749][T17536] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2935.148528][T17536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2935.157202][T17536] 8021q: adding VLAN 0 to HW filter on device team0 [ 2935.168457][T17536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2935.184568][T17537] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 2936.484011][T17542] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 2936.492232][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:21 executing program 0: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2936.528149][T17542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2936.535569][T17542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2936.544226][T17542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2936.553523][T17542] 8021q: adding VLAN 0 to HW filter on device team0 [ 2936.597960][T17542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2936.613845][T17543] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 2937.443643][T17548] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2937.451999][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:22 executing program 3: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2937.504362][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2937.512168][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2937.522000][T17548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2937.532740][T17548] 8021q: adding VLAN 0 to HW filter on device team0 [ 2937.595600][T17548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2937.612174][T17549] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:41:24 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2939.054664][T17554] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 2939.062941][T17554] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2939.100334][T17554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2939.107757][T17554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2939.116531][T17554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2939.126082][T17554] 8021q: adding VLAN 0 to HW filter on device team0 [ 2939.137414][T17554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2939.154050][T17555] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:41:25 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2940.489320][T17560] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2940.497905][T17560] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2940.535181][T17560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2940.542539][T17560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2940.551247][T17560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2940.560015][T17560] 8021q: adding VLAN 0 to HW filter on device team0 [ 2940.571578][T17560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2940.587863][T17561] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:41:27 executing program 1: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2941.904463][T17566] netlink: 'syz-executor.5': attribute type 27 has an invalid length. [ 2941.912813][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2941.956223][T17566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2941.963575][T17566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2941.972508][T17566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2941.981795][T17566] 8021q: adding VLAN 0 to HW filter on device team0 [ 2941.993494][T17566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2942.009586][T17567] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 03:41:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) [ 2943.329668][T17573] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 2943.337968][T17573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2943.373685][T17573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2943.381187][T17573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2943.389943][T17573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2943.398629][T17573] 8021q: adding VLAN 0 to HW filter on device team0 03:41:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) 03:41:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) [ 2943.411029][T17573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2943.427124][T17574] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 03:41:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) 03:41:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 03:41:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 03:41:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) [ 2943.926569][T17579] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 2943.935082][T17579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 03:41:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) [ 2943.971456][T17579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2943.979070][T17579] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2943.987830][T17579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2943.997406][T17579] 8021q: adding VLAN 0 to HW filter on device team0 [ 2944.011837][T17579] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2944.028100][T17580] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 03:41:29 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x6, 0xc8, "79dec89067002a46"}}}}, 0xf) [ 2944.504296][T17585] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2944.512526][T17585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2944.547744][T17585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2944.555171][T17585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2944.563873][T17585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2944.572219][T17585] 8021q: adding VLAN 0 to HW filter on device team0 [ 2944.584193][T17585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2944.601428][T17586] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:41:30 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2944.961557][T17591] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 2944.969915][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2945.006277][T17591] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2945.013631][T17591] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2945.022484][T17591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2945.034432][T17591] 8021q: adding VLAN 0 to HW filter on device team0 [ 2945.054348][T17591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2945.070675][T17592] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 2946.360476][T17597] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2946.368919][T17597] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:41:31 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2946.403214][T17597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2946.410618][T17597] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2946.419242][T17597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2946.428100][T17597] 8021q: adding VLAN 0 to HW filter on device team0 [ 2946.448090][T17597] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2946.464444][T17598] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:41:33 executing program 1: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) 03:41:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e60, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e60, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4a60, 0x0, @empty}, 0x1c) 03:41:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in6=@empty, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 03:41:33 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x6, 0xc8, "79dec89067002a46"}}}}, 0xf) [ 2947.804968][T17622] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2947.813233][T17622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 03:41:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in6=@empty, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 03:41:33 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x6, 0xc8, "79dec89067002a46"}}}}, 0xf) [ 2947.850691][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2947.858183][T17622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2947.866822][T17622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2947.875788][T17622] 8021q: adding VLAN 0 to HW filter on device team0 03:41:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e60, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e60, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4a60, 0x0, @empty}, 0x1c) [ 2947.889743][T17622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2947.906136][T17623] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:41:33 executing program 5: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x6, 0xc8, "79dec89067002a46"}}}}, 0xf) 03:41:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in6=@empty, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 03:41:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e60, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e60, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4a60, 0x0, @empty}, 0x1c) 03:41:34 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) [ 2949.574442][T17629] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 2949.582672][T17629] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2949.620245][T17629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2949.627676][T17629] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2949.636345][T17629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2949.646146][T17629] 8021q: adding VLAN 0 to HW filter on device team0 [ 2949.656381][T17629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2949.672585][T17630] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 03:41:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e60, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e60, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4a60, 0x0, @empty}, 0x1c) [ 2951.171566][T17651] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2951.180272][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2951.214380][T17651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2951.221735][T17651] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2951.230398][T17651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2951.238857][T17651] 8021q: adding VLAN 0 to HW filter on device team0 [ 2951.254252][T17651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2951.270767][T17652] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:41:37 executing program 1: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x8) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x5, 0xfffffffffffffffc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000300)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ftruncate(r0, 0xfffffffffffffffb) unlinkat(r1, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001000000000000000000080000000000000029000000", @ANYRES32=0x0, @ANYBLOB="14001b00000000000000002100000000000000040000000000000000000000f37b3fb727008cb27cbdf183afb4001859b07edec01c4c36ca63c2dbb2c66ee60d732cc73669d3b130c4d7227ff40bdffae201891f9a686fbfff3c03b011f3fe578efe776e9625a1b9402846accd78a94f026b241174496ae582b3c5f4adc38c8d84959bd183c74b2a6cf8bfbc920869cc3a34"], 0x40}], 0x1}, 0x0) sendmsg$netlink(r6, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x38, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0x4}]}, 0x38}], 0x1}, 0x0) ptrace$getregs(0xc, 0x0, 0x3, &(0x7f0000001040)=""/16) 03:41:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e60, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e60, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4a60, 0x0, @empty}, 0x1c) 03:41:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in6=@empty, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 03:41:37 executing program 2: [ 2951.788347][T17661] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 2951.796759][T17661] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. syz_mount_image$ntfs(&(0x7f0000000000), &(0x7f000001ee80)='./file1\x00', 0x1800800, &(0x7f00000003c0)={[{@errors_continue}, {@show_sys_files_no}, {@show_sys_files_yes}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x1}}, {@dmask={'dmask', 0x3d, 0x2}}, {@dmask={'dmask', 0x3d, 0x3}}, {@disable_sparse_yes}, {@nls={'nls', 0x3d, 'cp1255'}}, {@nls={'nls', 0x3d, 'iso8859-14'}}, {@utf8}, {@gid}]}, 0x1, 0x1ee41, &(0x7f000003dd00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103a42, 0x0) ftruncate(r0, 0x6000000) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18}, 0x18) read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) creat(&(0x7f0000000280)='./file1\x00', 0x0) 03:41:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x19, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 2951.833027][T17661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2951.840474][T17661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2951.850564][T17661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2951.859276][T17661] 8021q: adding VLAN 0 to HW filter on device team0 03:41:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e60, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e60, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4a60, 0x0, @empty}, 0x1c) 03:41:37 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f0000000000)={@empty, @mcast1, @empty}) [ 2951.880899][T17661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2951.897578][T17662] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 03:41:37 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e60, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e60, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4a60, 0x0, @empty}, 0x1c) 03:41:37 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f0000000000)={@empty, @mcast1, @empty}) 03:41:37 executing program 5: r0 = getpid() r1 = gettid() tgkill(r0, r1, 0xb) 03:41:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x19, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 03:41:38 executing program 5: r0 = getpid() r1 = gettid() tgkill(r0, r1, 0xb) [ 2953.402156][T17683] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 2953.410593][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2953.447259][T17683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2953.454703][T17683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2953.463493][T17683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2953.472080][T17683] 8021q: adding VLAN 0 to HW filter on device team0 [ 2953.515146][T17683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2953.531468][T17684] netlink: 'syz-executor.1': attribute type 27 has an invalid length. 03:41:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x19, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 03:41:39 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f0000000000)={@empty, @mcast1, @empty}) 03:41:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x19, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 03:41:39 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 03:41:39 executing program 5: r0 = getpid() r1 = gettid() tgkill(r0, r1, 0xb) 03:41:39 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) [ 2953.997043][ T27] audit: type=1326 audit(2000000499.199:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cba8c0c9 code=0x7ffc0000 03:41:39 executing program 5: r0 = getpid() r1 = gettid() tgkill(r0, r1, 0xb) 03:41:39 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 03:41:39 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f0000000000)={@empty, @mcast1, @empty}) [ 2954.080759][ T27] audit: type=1326 audit(2000000499.229:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f04cba8c0c9 code=0x7ffc0000 03:41:39 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x77682a85, 0x0, 0x0}, @flat, @fda={0x77622a85, 0x1}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 03:41:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 03:41:39 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) [ 2954.325048][ T27] audit: type=1326 audit(2000000499.229:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17696 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cba8c0c9 code=0x7ffc0000 [ 2954.353596][ T27] audit: type=1326 audit(2000000499.429:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cba8c0c9 code=0x7ffc0000 [ 2955.030118][ T27] audit: type=1326 audit(2000000499.429:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f04cba8c0c9 code=0x7ffc0000 [ 2955.197099][ T27] audit: type=1326 audit(2000000499.449:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17710 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cba8c0c9 code=0x7ffc0000 [ 2955.306329][ T27] audit: type=1326 audit(2000000499.679:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cba8c0c9 code=0x7ffc0000 03:41:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x19, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 03:41:40 executing program 5: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 03:41:40 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 03:41:40 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) 03:41:40 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) 03:41:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x19, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) [ 2955.354586][ T27] audit: type=1326 audit(2000000500.209:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cba8c0c9 code=0x7ffc0000 [ 2955.429599][ T27] audit: type=1326 audit(2000000500.209:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f04cba8c0c9 code=0x7ffc0000 03:41:40 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 03:41:42 executing program 5: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 03:41:42 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 03:41:42 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) [ 2957.233976][ T27] audit: type=1326 audit(2000000500.209:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17717 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04cba8c0c9 code=0x7ffc0000 03:41:42 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 03:41:44 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) [ 2961.714491][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 2961.714514][ T27] audit: type=1800 audit(2000000505.589:1297): pid=17759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1196 res=0 errno=0 [ 2961.802490][ T27] audit: type=1804 audit(2000000505.919:1298): pid=17758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2168300432/syzkaller.gq46bn/1080/bus" dev="sda1" ino=1196 res=1 errno=0 03:41:47 executing program 3: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 03:41:47 executing program 5: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 03:41:47 executing program 4: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 03:41:47 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) 03:41:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x19, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x2905, 0x0, 0x0, 0x0, 0x200000000000000) 03:41:47 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) [ 2962.271836][ T27] audit: type=1800 audit(2000000507.449:1299): pid=17774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1249 res=0 errno=0 03:41:48 executing program 5: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) [ 2963.627509][ T27] audit: type=1804 audit(2000000507.459:1300): pid=17774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2478965530/syzkaller.RAQCd5/1099/bus" dev="sda1" ino=1249 res=1 errno=0 03:41:49 executing program 1: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) [ 2964.171115][ T27] audit: type=1800 audit(2000000509.039:1301): pid=17780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1196 res=0 errno=0 03:41:49 executing program 3: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 03:41:49 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) [ 2964.279931][ T27] audit: type=1804 audit(2000000509.049:1302): pid=17780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2168300432/syzkaller.gq46bn/1081/bus" dev="sda1" ino=1196 res=1 errno=0 [ 2964.365883][ T27] audit: type=1800 audit(2000000509.089:1303): pid=17781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1206 res=0 errno=0 [ 2964.453564][ T27] audit: type=1800 audit(2000000509.099:1304): pid=17782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1253 res=0 errno=0 03:41:49 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) [ 2964.486803][ T27] audit: type=1804 audit(2000000509.119:1305): pid=17781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4137920193/syzkaller.w4r8zt/1004/bus" dev="sda1" ino=1206 res=1 errno=0 [ 2964.513040][ T27] audit: type=1804 audit(2000000509.129:1306): pid=17782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2555077571/syzkaller.tls069/1084/bus" dev="sda1" ino=1253 res=1 errno=0 03:41:54 executing program 1: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 03:41:54 executing program 3: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 03:41:54 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) 03:41:54 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) 03:41:54 executing program 2: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 03:41:54 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) [ 2969.235137][ T27] audit: type=1800 audit(2000000510.589:1307): pid=17799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1243 res=0 errno=0 [ 2969.290944][ T27] audit: type=1804 audit(2000000510.989:1308): pid=17799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2555077571/syzkaller.tls069/1085/bus" dev="sda1" ino=1243 res=1 errno=0 [ 2970.169931][T17808] loop0: detected capacity change from 0 to 512 03:41:55 executing program 1: r0 = dup(0xffffffffffffffff) mkdir(&(0x7f00000010c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x61) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7ffc) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', &(0x7f00000005c0), 0x6000) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x14da42, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x80001d00c0d0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3) open(&(0x7f0000000340)='./bus\x00', 0x200, 0x140) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') unlinkat(r6, &(0x7f0000000280)='./file0\x00', 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/70, 0x46}, {&(0x7f0000000840)=""/207, 0xcf}, {&(0x7f0000000940)=""/174, 0xae}], 0x9}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.net/syz0\x00', 0x1ff) statfs(&(0x7f0000000240)='./file1\x00', 0x0) write$UHID_INPUT(r0, 0x0, 0x0) [ 2970.225462][ T27] audit: type=1800 audit(2000000511.659:1309): pid=17796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1245 res=0 errno=0 [ 2970.248458][ T27] audit: type=1800 audit(2000000511.949:1310): pid=17800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1246 res=0 errno=0 [ 2970.294375][ T27] audit: type=1804 audit(2000000513.239:1311): pid=17796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2478965530/syzkaller.RAQCd5/1100/bus" dev="sda1" ino=1245 res=1 errno=0 [ 2970.344065][ T27] audit: type=1804 audit(2000000513.249:1312): pid=17795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1932162161/syzkaller.dQysdF/1074/bus" dev="sda1" ino=1246 res=1 errno=0 [ 2970.411882][ T27] audit: type=1800 audit(2000000514.579:1313): pid=17810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1226 res=0 errno=0 [ 2970.436900][T17808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 2970.449583][T17808] ext4 filesystem being mounted at /root/syzkaller-testdir2588034640/syzkaller.6cilqI/161/file0 supports timestamps until 2038 (0x7fffffff) 03:41:58 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) 03:41:58 executing program 4: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) 03:41:58 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, &(0x7f0000000040)) 03:41:58 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) [ 2973.680650][ T27] audit: type=1804 audit(2000000514.589:1314): pid=17810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1932162161/syzkaller.dQysdF/1075/bus" dev="sda1" ino=1226 res=1 errno=0 [ 2973.709090][ T27] audit: type=1800 audit(2000000515.529:1315): pid=17822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1210 res=0 errno=0 03:41:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 03:41:59 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, &(0x7f0000000040)) [ 2973.891584][ T27] audit: type=1804 audit(2000000515.539:1316): pid=17822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2555077571/syzkaller.tls069/1086/bus" dev="sda1" ino=1210 res=1 errno=0 [ 2975.877336][T12811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:42:01 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) 03:42:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 03:42:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$FIONREAD(r0, 0x4b41, 0x0) 03:42:01 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, &(0x7f0000000040)) 03:42:01 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) 03:42:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x73, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 2976.600688][T17865] loop0: detected capacity change from 0 to 512 03:42:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x2c}}, 0x0) 03:42:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5437, 0x0) 03:42:01 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r0, 0x0, &(0x7f0000000040)) 03:42:01 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@private}, {@in=@loopback, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) [ 2976.779025][T17865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 2976.791490][T17865] ext4 filesystem being mounted at /root/syzkaller-testdir2588034640/syzkaller.6cilqI/162/file0 supports timestamps until 2038 (0x7fffffff) 03:42:03 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) accept$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:42:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@private}, {@in=@loopback, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 03:42:03 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./bus\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', 0x0, &(0x7f00000003c0)='overlay\x00', 0x8, 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0/file0\x00', 0x100, 0x8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000240)='./file1\x00', 0xee01, r5) 03:42:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r4 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x102) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac85800000000000000024e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb292f7d3acec77f5efad9c1165a0e3ccae669e173a649c1cfd6587d452d66b7cc957d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66cf6dd6dcd54c3b3ff02000000d7c983c044c03bf3a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4a37c9af2551ce935b0f327cb3f011a7d069111d5a34ed09baafa9e87110bd5602e2fd5234712596b696418f163d1a13ed38ae89d24e1cebfba2fc7925bfacbb03109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a70000000000000000000000d7900a820b63278f4e9a217b98000000002a92895614cd50cbe43a1ed25268816b0000000000d75dc0cb753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d62ad0a97aec773713a66b223fa8b148871c8d31d24291c25449f106a99"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sched_switch\x00', r4}, 0x10) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x8923, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYRESDEC=r4]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'erspan0\x00', &(0x7f0000000940)=ANY=[]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x7a, &(0x7f0000000740)=':\xb6\x8d$\xe6k/\xc3\xaf\xa5\x96?X\x8b\x16H\x0f/\xceB\x8f8\x93\x81\x83v\x86.\\;\xfb\xfdn\x03NP\xe3\x87\xe7\xd0\xed*/\xda\xe56OP\xdfy*\x8b\xaf\x00\xe9b?\x9a/\xfd\x0e\x18\xc3\x91\xa5H\x9b\xd6J\x89\xd9\xc6\xcc\x06\xe1\\\xc6\x13\xa6c\xd4\x95n\xe2\x81\xef$\xbc\x02\x06c\x88WH\xbf\xa47\xf4\xb7\x97=&\xdb\xdc\xdb\x84\xe2\n\xc2=\xd3n\xdb\xc1by\xd5\xae\x95g'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007580)=[{{&(0x7f0000001ec0)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="140000000000000200010000070000000000000af8000000"], 0x18}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x40, 0x6, 0x7, 0x48, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x80, 0x8000, 0x6, 0x10000}}) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sendfile(0xffffffffffffffff, r5, &(0x7f0000000380)=0x9, 0x9) sendfile(r0, r0, 0x0, 0x24002da8) 03:42:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) 03:42:03 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 03:42:03 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000003db65802f900000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x80000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xcb, &(0x7f00000004c0)=""/203, 0x0, 0xa, '\x00', 0x0, 0x19, r5, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x11}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TCSETS(r10, 0x541b, 0x0) socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) sendmmsg$unix(r2, &(0x7f0000000840), 0x0, 0x40094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r11 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r11, @ANYRESDEC, @ANYRES8], 0x1, 0x524, &(0x7f0000000fc0)="$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") open(&(0x7f0000000100)='./file2\x00', 0x1cda42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) [ 2978.581698][T12811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:42:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@private}, {@in=@loopback, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) [ 2978.646852][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 2978.646870][ T27] audit: type=1800 audit(2000000523.849:1321): pid=17896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1230 res=0 errno=0 03:42:03 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) 03:42:03 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@private}, {@in=@loopback, 0x0, 0x6c}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) [ 2978.798259][T17905] loop0: detected capacity change from 0 to 512 [ 2979.142392][ T27] audit: type=1800 audit(2000000524.329:1322): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="sda1" ino=1150 res=0 errno=0 03:42:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r4 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x102) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sched_switch\x00', r4}, 0x10) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x8923, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYRESDEC=r4]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'erspan0\x00', &(0x7f0000000940)=ANY=[]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x7a, &(0x7f0000000740)=':\xb6\x8d$\xe6k/\xc3\xaf\xa5\x96?X\x8b\x16H\x0f/\xceB\x8f8\x93\x81\x83v\x86.\\;\xfb\xfdn\x03NP\xe3\x87\xe7\xd0\xed*/\xda\xe56OP\xdfy*\x8b\xaf\x00\xe9b?\x9a/\xfd\x0e\x18\xc3\x91\xa5H\x9b\xd6J\x89\xd9\xc6\xcc\x06\xe1\\\xc6\x13\xa6c\xd4\x95n\xe2\x81\xef$\xbc\x02\x06c\x88WH\xbf\xa47\xf4\xb7\x97=&\xdb\xdc\xdb\x84\xe2\n\xc2=\xd3n\xdb\xc1by\xd5\xae\x95g'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007580)=[{{&(0x7f0000001ec0)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="140000000000000200010000070000000000000af8000000"], 0x18}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x40, 0x6, 0x7, 0x48, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x80, 0x8000, 0x6, 0x10000}}) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sendfile(0xffffffffffffffff, r5, &(0x7f0000000380)=0x9, 0x9) sendfile(r0, r0, 0x0, 0x24002da8) 03:42:04 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) [ 2979.776205][ T1199] ieee802154 phy0 wpan0: encryption failed: -22 [ 2979.782563][ T1199] ieee802154 phy1 wpan1: encryption failed: -22 [ 2979.848961][T17905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 without journal. Quota mode: writeback. [ 2979.861325][T17905] ext4 filesystem being mounted at /root/syzkaller-testdir2588034640/syzkaller.6cilqI/163/file0 supports timestamps until 2038 (0x7fffffff) [ 2979.913858][ T27] audit: type=1800 audit(2000000525.089:1323): pid=17920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1196 res=0 errno=0 03:42:05 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) accept$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:42:05 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000003db65802f900000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x80000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xcb, &(0x7f00000004c0)=""/203, 0x0, 0xa, '\x00', 0x0, 0x19, r5, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x11}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TCSETS(r10, 0x541b, 0x0) socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) sendmmsg$unix(r2, &(0x7f0000000840), 0x0, 0x40094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r11 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r11, @ANYRESDEC, @ANYRES8], 0x1, 0x524, &(0x7f0000000fc0)="$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") open(&(0x7f0000000100)='./file2\x00', 0x1cda42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) 03:42:06 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r4 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x102) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sched_switch\x00', r4}, 0x10) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x8923, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYRESDEC=r4]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'erspan0\x00', &(0x7f0000000940)=ANY=[]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x7a, &(0x7f0000000740)=':\xb6\x8d$\xe6k/\xc3\xaf\xa5\x96?X\x8b\x16H\x0f/\xceB\x8f8\x93\x81\x83v\x86.\\;\xfb\xfdn\x03NP\xe3\x87\xe7\xd0\xed*/\xda\xe56OP\xdfy*\x8b\xaf\x00\xe9b?\x9a/\xfd\x0e\x18\xc3\x91\xa5H\x9b\xd6J\x89\xd9\xc6\xcc\x06\xe1\\\xc6\x13\xa6c\xd4\x95n\xe2\x81\xef$\xbc\x02\x06c\x88WH\xbf\xa47\xf4\xb7\x97=&\xdb\xdc\xdb\x84\xe2\n\xc2=\xd3n\xdb\xc1by\xd5\xae\x95g'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007580)=[{{&(0x7f0000001ec0)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="140000000000000200010000070000000000000af8000000"], 0x18}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x40, 0x6, 0x7, 0x48, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x80, 0x8000, 0x6, 0x10000}}) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sendfile(0xffffffffffffffff, r5, &(0x7f0000000380)=0x9, 0x9) sendfile(r0, r0, 0x0, 0x24002da8) [ 2980.906406][ T27] audit: type=1800 audit(2000000526.109:1324): pid=17931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="sda1" ino=1186 res=0 errno=0 03:42:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) 03:42:06 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c29184ff7f0000cef809606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d9854353ea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a6b260cc5cc8d03bc460583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000110000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4a00fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550dbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf27bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83186c1526af6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af930cd6db49a47613808bad959719c0000000000378a921c7f7f8433c2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205aa00b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966da7d39d4f0413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f9360984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0eab5002512bcbf9b24accfecb0f477db103463af2847e6ade5b9e065ec0d0ba58fedae5f08818fea475b169469f9efd131925d98c34b3cb26fe26796dd43b87e1cdee39f5cf21d2e80a64ac97e71cafc29bfb78db090dd12225efeda2e93bf7f6ba7865e9c375a780929dfa5a210bf5858e2a4ff8e8d1e8c9cceed07c6312b734c72510d335acc94f76e7078ce4066f1e0ac9429f8013683301277a11e25b248b61180cb6207a0e26757f3f1bfc6c27f3720d1fb74afb17f3b5239bc2243853d5234afb05ed6024e94dee34666c5b5522b54cb433efa54b4e9022533e6a4598b453c9e549847c89bdee957dfa9ded9f16fdcd1b681e4c72f32fa3334313e334cc140daec7dcb22f46ff000000ac230bbded86250000000000003e90a3338bcef8241cef4b21e41090b923ac0a42f36e02d7dd2a9c1715a59878d942ce21e362b4b389a9bf23877df1f37cbb7e6b23b9c0e0c1ec929b17a3e6f6f39fb209a4d864aad57520a8a3a2d4a70c6863812ea28a2f449058c912264aa5187d359589e41a63e12ead7fe031341e1574ba01c09144e81ffd8e140178427122c47d09626a98a0b78837f172cd9840fbe105baaca982537861c5227646808514d0fea1ed5291300466e1bce37c7bde868e1140b62af951"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) [ 2981.198775][T12811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:42:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000003db65802f900000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x80000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xcb, &(0x7f00000004c0)=""/203, 0x0, 0xa, '\x00', 0x0, 0x19, r5, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x11}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TCSETS(r10, 0x541b, 0x0) socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) sendmmsg$unix(r2, &(0x7f0000000840), 0x0, 0x40094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r11 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r11, @ANYRESDEC, @ANYRES8], 0x1, 0x524, &(0x7f0000000fc0)="$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") open(&(0x7f0000000100)='./file2\x00', 0x1cda42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) 03:42:06 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000003db65802f900000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x80000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xcb, &(0x7f00000004c0)=""/203, 0x0, 0xa, '\x00', 0x0, 0x19, r5, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x11}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TCSETS(r10, 0x541b, 0x0) socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) sendmmsg$unix(r2, &(0x7f0000000840), 0x0, 0x40094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r11 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r11, @ANYRESDEC, @ANYRES8], 0x1, 0x524, &(0x7f0000000fc0)="$eJzs1b9qFFEUB+CT3TWuVqnF4oKNVYh2Vi5IAoEFQZjehazNjAg7zexWeQQfwAezsLaWrdKthJmoCWIT5w/L9zX3cH+7c8+5xcz7px/zi0/lh6+fv8R0dhCjWTwaXR3EUYzixmUAAPvkareLH7ta370AAN24x/f/e0stAQAtmzTru5SmEdvLKquyeq33z87npyfp2uEf/9pWVTb+lb9Itdv5g3jc5C//mh/G82d1fp29eTu/kz+Mi1YnBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjlOaRERKKR393t1WVTau8+N0405eV2fn89OT5ge380k8mXQ2BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAflOtNviiK5WrPiohv0fGh0+ZKO5501hw7lJv/VzGO+z3ndRuNvYqIgdzPkIoeX0oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECvyvUmXxTFclX23QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBTlepMvimK5arHoe0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgHz8DAAD//4CfK8U=") open(&(0x7f0000000100)='./file2\x00', 0x1cda42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) [ 2981.717868][ T27] audit: type=1800 audit(2000000526.919:1325): pid=17941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1177 res=0 errno=0 03:42:07 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) [ 2983.458877][T17953] loop0: detected capacity change from 0 to 2048 [ 2983.474860][ T27] audit: type=1800 audit(2000000528.619:1326): pid=17950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="sda1" ino=1241 res=0 errno=0 03:42:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x4, 0x103382) r1 = memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000580)='?', 0x1}], 0x1, 0x81806, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) r4 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x102) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sched_switch\x00', r4}, 0x10) r6 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r6, 0x100000011, 0xff970000, 0x2811fdff) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x8923, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000280)=ANY=[@ANYRESDEC=r4]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'erspan0\x00', &(0x7f0000000940)=ANY=[]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x7a, &(0x7f0000000740)=':\xb6\x8d$\xe6k/\xc3\xaf\xa5\x96?X\x8b\x16H\x0f/\xceB\x8f8\x93\x81\x83v\x86.\\;\xfb\xfdn\x03NP\xe3\x87\xe7\xd0\xed*/\xda\xe56OP\xdfy*\x8b\xaf\x00\xe9b?\x9a/\xfd\x0e\x18\xc3\x91\xa5H\x9b\xd6J\x89\xd9\xc6\xcc\x06\xe1\\\xc6\x13\xa6c\xd4\x95n\xe2\x81\xef$\xbc\x02\x06c\x88WH\xbf\xa47\xf4\xb7\x97=&\xdb\xdc\xdb\x84\xe2\n\xc2=\xd3n\xdb\xc1by\xd5\xae\x95g'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007580)=[{{&(0x7f0000001ec0)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="140000000000000200010000070000000000000af8000000"], 0x18}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x4, 0x40, 0x6, 0x7, 0x48, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xa}, 0x80, 0x8000, 0x6, 0x10000}}) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) sendfile(0xffffffffffffffff, r5, &(0x7f0000000380)=0x9, 0x9) sendfile(r0, r0, 0x0, 0x24002da8) 03:42:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000003db65802f900000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x80000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xcb, &(0x7f00000004c0)=""/203, 0x0, 0xa, '\x00', 0x0, 0x19, r5, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x11}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TCSETS(r10, 0x541b, 0x0) socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) sendmmsg$unix(r2, &(0x7f0000000840), 0x0, 0x40094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r11 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r11, @ANYRESDEC, @ANYRES8], 0x1, 0x524, &(0x7f0000000fc0)="$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") open(&(0x7f0000000100)='./file2\x00', 0x1cda42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) 03:42:09 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) 03:42:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000003db65802f900000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x80000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xcb, &(0x7f00000004c0)=""/203, 0x0, 0xa, '\x00', 0x0, 0x19, r5, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x11}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TCSETS(r10, 0x541b, 0x0) socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) sendmmsg$unix(r2, &(0x7f0000000840), 0x0, 0x40094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r11 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r11, @ANYRESDEC, @ANYRES8], 0x1, 0x524, &(0x7f0000000fc0)="$eJzs1b9qFFEUB+CT3TWuVqnF4oKNVYh2Vi5IAoEFQZjehazNjAg7zexWeQQfwAezsLaWrdKthJmoCWIT5w/L9zX3cH+7c8+5xcz7px/zi0/lh6+fv8R0dhCjWTwaXR3EUYzixmUAAPvkareLH7ta370AAN24x/f/e0stAQAtmzTru5SmEdvLKquyeq33z87npyfp2uEf/9pWVTb+lb9Itdv5g3jc5C//mh/G82d1fp29eTu/kz+Mi1YnBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjlOaRERKKR393t1WVTau8+N0405eV2fn89OT5ge380k8mXQ2BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAflOtNviiK5WrPiohv0fGh0+ZKO5501hw7lJv/VzGO+z3ndRuNvYqIgdzPkIoeX0oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECvyvUmXxTFclX23QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBTlepMvimK5arHoe0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgHz8DAAD//4CfK8U=") open(&(0x7f0000000100)='./file2\x00', 0x1cda42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) [ 2984.072588][ T27] audit: type=1800 audit(2000000528.809:1327): pid=17953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=1049276 res=0 errno=0 [ 2984.503943][ T27] audit: type=1800 audit(2000000529.599:1328): pid=17965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="sda1" ino=1230 res=0 errno=0 [ 2985.296342][ T27] audit: type=1800 audit(2000000530.049:1329): pid=17967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1207 res=0 errno=0 [ 2985.496730][T17978] loop0: detected capacity change from 0 to 2048 [ 2986.278134][ T27] audit: type=1800 audit(2000000530.739:1330): pid=17978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=1049277 res=0 errno=0 03:42:11 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) accept$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:42:11 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) 03:42:11 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) 03:42:11 executing program 1: syz_mount_image$ocfs2(&(0x7f00000202c0), &(0x7f0000020300)='./file0\x00', 0x0, &(0x7f0000020340), 0x1, 0x202b3, &(0x7f0000020380)="$eJzs3U9vG2kdB/BnJk7j/KuTtIceOOSCQEKq7B4qBFIFgqaCA6mKihCX4PxpGurGUeIgkEoJLwAQFzjBiWuPiEMv3Tew0l5W+w72sN1Le1tp16tMxqnHzrSuajv29vM52J7neWae3yi5fD3jZ+JU4/7OwfLOwXJ1d7m+ce/g2vLv67XDh1shHpLznp/eDOLv5G8PAAAAAAAA8O5Wf7Lyy19dC2Hq6ZPtZrPZDCGEo3C2StvnyRePNtrfW+KOfY6Pm3O4PvlNCOFyV13HJkIIv/5/CFEIIUoLi9P3uXSv482bf/7OH5NBfXDjX5M7e39a+fu/P/nswcePP/xn7sAohC+ff/HDv03/9X//+eDoRn9mBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8XTrzurd2+VKeFY6CtdDCFNPn2y390/F6Yfo7P2bLRNDKBYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGEm37qzevV2uhGelED+PQph6+mS7vb8Qpx/is/dvNktDqBIAAAB4Fz/7xepPb5YrSe5vNqOu/u+n8f7zH0+ExRDC5ItHG+GM95ao43uCzu8T0lF9q79VX2vehRDFVzPbcXz1agjRysn2ldJMXKsfNL53r364u9m3MgAAAGCkZfN/90X+V/m/0FP+j88p/8cd+T/uyP8T6faVMBOtVzfX1mv1jQcHr+5vWA5L0Xatvl6tre3s1je31qq1Wn0jhMm0/3IoRge1emPtYXXvwumxpqP7W9X9xvpWtXF8rmn7t8J861jrO42H1b0QQvG0rxTX9/fuV3fXNnf2f1Aul8thOrevEmZO61uMtv7Q2NptnFR2smcIs6/pr4QQ5k6PvRC1nViy+3x+X+Xi6TnORb+rH+7vVmvJPqWz2ysLbceq1TeqtbZ5FvP7Kktt9Tf2D3c3qo2ttVp9u3V+l9L+385391f69D8EAADwPsjm/4nccf/9S9RT/p/oKf/308vBHh4AAAC+AbL5v5C0ZSP8cvJ6nP//UXhz/i8MKf9fTguNQ4hett1P8DxKTyBnvQIAAAB4H2Xz/2TSlr07fyF5zbv+P9eR/yfP4fp/568Jku2bg50VAAAAxkk2/19I2nLzf/zm6/8XRiX/FwY7KwAAAIyTbP6fStqOskOK4S3u/58aUv7/eavOx1HmG4Drrfb+LTEIAAAAYy+b/4td/a/W/497Wv+veE7r/xdz1v//bulk/X8AAAB4n2Xz/3RX/9vm/+lzyv/T8j8AAADkyub/mdxxvd7/PzPk3/8XkvX/AQAAgNfJ5v/Z3HG95v9Z+R8AAABGTjb/zyVt2aXzf5S89pr/54aU/+O00ELH8/+/mkhPYGUQswIAAMB4yub/+dxxveb/edf/AQAAYORk8//FpG05OyRJ9Mnz/6Pu3F/syP8XR+D5/0n9k4OdFQAAAMZJNv+fLKb/Nvl/tiP/l0Yl/397sLMCAADAOMnm/4Xcccf5/6Menv+3MPT8H0K5NOgZAAAAYLxl8/9i7rhe8/+i/A8AAAAjJ5v/l3LHJff/F9+c/5eGnP8/7bz5HwAAAOiSzf+Xcsf1mv8vyf8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8za4cmzAIBlEAvoSkzwhZIwRSZhexcQFdwU5t3MUJLMUdXEJ+RBBHkO+DO96DBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwIcP300XEY2uviHincDvc7p7er31mRfmv+3nJp2psThsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWNmBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgq7cmzCIBhEAfgSkj4jZI0QSJldxMYFdAU7tXEXJ7AUd3AJ+RFB3ED4PrjjPXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcwPD9dBHx2NorIt4p3A63u6f3a59ZUf7rfl7yqRqb0wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICVHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsGM3qQkDURzAZyaFbgLpMboKya7bQj/opimFnqALL+GVPIFncuMBRNQJSExQENz4+21ewpuPt50/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3IHP3+7vp2lDiOFhU4TwuFzMjvtlyh8f4/uLG8wIAAAAXOfru3t7b9r87o8n/ZfqUFevad8t1/P/MFJ7cZATDPOEvOr8YBN5w9R8/b1PIaZ6959zi+cqpbq+7CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMsOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbh9GzAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCnAAAA//+Hek7L") 03:42:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) 03:42:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xce) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000003db65802f900000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r3}, 0x10) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x80000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x5, 0xcb, &(0x7f00000004c0)=""/203, 0x0, 0xa, '\x00', 0x0, 0x19, r5, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x11}) r9 = syz_open_pts(r8, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TCSETS(r10, 0x541b, 0x0) socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, &(0x7f0000000400)) sendmmsg$unix(r2, &(0x7f0000000840), 0x0, 0x40094) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r11 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file2\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=r11, @ANYRESDEC, @ANYRES8], 0x1, 0x524, &(0x7f0000000fc0)="$eJzs1b9qFFEUB+CT3TWuVqnF4oKNVYh2Vi5IAoEFQZjehazNjAg7zexWeQQfwAezsLaWrdKthJmoCWIT5w/L9zX3cH+7c8+5xcz7px/zi0/lh6+fv8R0dhCjWTwaXR3EUYzixmUAAPvkareLH7ta370AAN24x/f/e0stAQAtmzTru5SmEdvLKquyeq33z87npyfp2uEf/9pWVTb+lb9Itdv5g3jc5C//mh/G82d1fp29eTu/kz+Mi1YnBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjlOaRERKKR393t1WVTau8+N0405eV2fn89OT5ge380k8mXQ2BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAflOtNviiK5WrPiohv0fGh0+ZKO5501hw7lJv/VzGO+z3ndRuNvYqIgdzPkIoeX0oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECvyvUmXxTFclX23QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBTlepMvimK5arHoe0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgHz8DAAD//4CfK8U=") open(&(0x7f0000000100)='./file2\x00', 0x1cda42, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) [ 2988.000034][ T27] audit: type=1804 audit(2000000533.179:1331): pid=17996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2478965530/syzkaller.RAQCd5/1109/bus" dev="sda1" ino=1240 res=1 errno=0 03:42:14 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) [ 2989.376520][T17994] loop0: detected capacity change from 0 to 2048 [ 2989.388780][T17998] overlayfs: missing 'lowerdir' 03:42:14 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) 03:42:14 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) 03:42:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) [ 2989.707763][ T27] audit: type=1800 audit(2000000533.179:1332): pid=17996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1240 res=0 errno=0 [ 2989.737581][ T27] audit: type=1800 audit(2000000534.609:1333): pid=17994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=1049278 res=0 errno=0 03:42:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) [ 2989.928217][ T27] audit: type=1326 audit(2000000535.079:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4e528c0c9 code=0x0 [ 2990.094584][ T27] audit: type=1804 audit(2000000535.209:1335): pid=18012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1932162161/syzkaller.dQysdF/1086/bus" dev="sda1" ino=1196 res=1 errno=0 03:42:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) [ 2991.139702][ T27] audit: type=1800 audit(2000000535.209:1336): pid=18012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1196 res=0 errno=0 [ 2991.173194][ T27] audit: type=1804 audit(2000000535.919:1337): pid=18017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2588034640/syzkaller.6cilqI/167/bus" dev="sda1" ino=1239 res=1 errno=0 [ 2992.752850][T18021] overlayfs: missing 'lowerdir' [ 2994.392265][ T27] audit: type=1800 audit(2000000535.919:1338): pid=18017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1239 res=0 errno=0 03:42:19 executing program 4: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) accept$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:42:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) 03:42:19 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r1, r2) 03:42:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) [ 2994.659623][ T27] audit: type=1804 audit(2000000538.699:1339): pid=18024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2478965530/syzkaller.RAQCd5/1110/bus" dev="sda1" ino=1244 res=1 errno=0 03:42:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) 03:42:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) [ 2994.954141][ T27] audit: type=1800 audit(2000000538.699:1340): pid=18024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1244 res=0 errno=0 [ 2996.808640][ T27] audit: type=1326 audit(2000000539.259:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18018 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4e528c0c9 code=0x0 [ 2996.856397][ T27] audit: type=1804 audit(2000000539.369:1342): pid=18029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1932162161/syzkaller.dQysdF/1087/bus" dev="sda1" ino=1206 res=1 errno=0 03:42:22 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) 03:42:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) 03:42:22 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) [ 2997.049102][ T27] audit: type=1800 audit(2000000539.369:1343): pid=18029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1206 res=0 errno=0 [ 2997.074195][ T27] audit: type=1804 audit(2000000541.489:1344): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2478965530/syzkaller.RAQCd5/1111/bus" dev="sda1" ino=1216 res=1 errno=0 [ 2997.137715][ T27] audit: type=1800 audit(2000000541.489:1345): pid=18042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1216 res=0 errno=0 03:42:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) 03:42:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) 03:42:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) [ 3002.480891][ T27] audit: type=1804 audit(2000000541.579:1346): pid=18041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2588034640/syzkaller.6cilqI/168/bus" dev="sda1" ino=1236 res=1 errno=0 [ 3002.536247][ T27] audit: type=1800 audit(2000000541.579:1347): pid=18041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1236 res=0 errno=0 [ 3004.796734][T18093] overlayfs: missing 'lowerdir' 03:42:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) 03:42:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) 03:42:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) 03:42:30 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) [ 3005.693312][ T27] audit: type=1804 audit(2000000543.999:1348): pid=18061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2478965530/syzkaller.RAQCd5/1112/bus" dev="sda1" ino=1245 res=1 errno=0 [ 3005.720465][ T27] audit: type=1800 audit(2000000543.999:1349): pid=18061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1245 res=0 errno=0 [ 3005.741885][ T27] audit: type=1804 audit(2000000544.089:1350): pid=18060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2588034640/syzkaller.6cilqI/169/bus" dev="sda1" ino=1246 res=1 errno=0 [ 3005.801587][ T27] audit: type=1800 audit(2000000544.089:1351): pid=18060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1246 res=0 errno=0 03:42:32 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) [ 3007.422079][ T27] audit: type=1804 audit(2000000544.489:1352): pid=18063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2555077571/syzkaller.tls069/1098/bus" dev="sda1" ino=1191 res=1 errno=0 [ 3007.456661][ T27] audit: type=1800 audit(2000000544.489:1353): pid=18063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1191 res=0 errno=0 [ 3007.805628][T18118] overlayfs: missing 'lowerdir' 03:42:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) 03:42:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) [ 3009.453624][ T27] audit: type=1326 audit(2000000548.559:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18089 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6eac8c0c9 code=0x0 03:42:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) [ 3009.660399][ T27] audit: type=1326 audit(2000000549.549:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18086 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa4e528c0c9 code=0x0 03:42:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) 03:42:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) 03:42:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) 03:42:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) 03:42:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x74}, {0x6}]}) lseek(r4, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) fallocate(0xffffffffffffffff, 0x11, 0xb50a, 0x7) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newnexthop={0x58, 0x68, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x1000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xffff}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x8}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x48010) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) [ 3012.454187][ T27] audit: type=1804 audit(2000000549.679:1356): pid=18094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2555077571/syzkaller.tls069/1099/bus" dev="sda1" ino=1230 res=1 errno=0 [ 3012.486897][ T27] audit: type=1800 audit(2000000549.679:1357): pid=18094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1230 res=0 errno=0 [ 3015.211623][T18153] overlayfs: missing 'lowerdir' [ 3015.218128][T18156] overlayfs: missing 'lowerdir' [ 3017.581316][T18164] overlayfs: missing 'lowerdir' 03:42:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) 03:42:42 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) 03:42:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) 03:42:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) [ 3017.840450][ T27] audit: type=1804 audit(2000000550.009:1358): pid=18098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1932162161/syzkaller.dQysdF/1089/bus" dev="sda1" ino=1227 res=1 errno=0 [ 3017.866436][ T27] audit: type=1800 audit(2000000550.009:1359): pid=18098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1227 res=0 errno=0 [ 3017.887993][ T27] audit: type=1326 audit(2000000551.089:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18101 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc92ac8c0c9 code=0x0 [ 3017.913714][ T27] audit: type=1804 audit(2000000551.679:1361): pid=18110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2478965530/syzkaller.RAQCd5/1113/bus" dev="sda1" ino=1235 res=1 errno=0 [ 3017.941430][ T27] audit: type=1800 audit(2000000551.679:1362): pid=18110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1235 res=0 errno=0 [ 3017.962756][ T27] audit: type=1804 audit(2000000551.999:1363): pid=18111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2588034640/syzkaller.6cilqI/170/bus" dev="sda1" ino=1231 res=1 errno=0 [ 3021.302999][ T27] audit: type=1800 audit(2000000551.999:1364): pid=18111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1231 res=0 errno=0 03:42:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) 03:42:46 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) [ 3021.422568][ T27] audit: type=1326 audit(2000000552.039:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18100 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e99e8c0c9 code=0x0 03:42:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000100000000000080e1695"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r3}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002d40)={&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)}, {&(0x7f0000000800)}], 0x3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0000000000000001000000020000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00$\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000088cf260fcd6367e5e9a7eaaa564d53bf5603d737b66e267cddd7f254ce2f11416dd02d966882f69669d7236fb004af5b2308b5b463d4", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32], 0x140}, 0x4000001) syz_open_procfs(r0, &(0x7f00000022c0)='map_files\x00') sendmmsg$unix(r1, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f0000002200)="10ec52fb1622e08080d53272495c294a55aad5c00930d7dd509a58dd21022421406c6f4edd59d019678750d0b68202088b27e0325e13ba5a08eb9e36e8d243b751904ad4c169", 0x46}], 0x2, &(0x7f0000002500)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000100001a3db76b4ffba40002003f9eefd500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x8840}}], 0x1, 0x4000800) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)={0x0, 0x2}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x5, &(0x7f0000002480)=ANY=[@ANYBLOB="ec5338d64f462de7afa5086f3bd939b9f863748603596c4bf267187c32e215c3ab8455c4dfaed8ec067f2c908459f296cb2115279abda36c14b494e6b63ee4069428360130"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xd6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="001b1e36d165ab26b73fe0a62cffb8cdddf5e4939fcb8fbde1c0cf43c2033cec9f870ecdc5dc5bbd15ac9325d3c909f93a36a9e8ed56903fc9676a159c73dc6d24c4ada693d1bb3983739fba0e5d29148c1220b74be4ac80519c6d5f6f703c252e914f7cb108d1f735b564ad0ef3b7647e7535b21fb37ed052b3ef3bae960aeb00b386e4b4a9b2877e712fe8cc27f37b546d9d04a7e8eb7bbb32b26077b514b06cb06c045a4c030edf73a74b5bf29f5c8181e446f4dda914750cf34db3c2f182dbc663699412c013f52624552ea12e44bb"]) mkdir(&(0x7f00000002c0)='./file1\x00', 0x20) mount$overlay(0x0, &(0x7f0000000780)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000000)=0x0) ptrace(0x10, r7) 03:42:46 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) 03:42:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) [ 3021.509590][ T27] audit: type=1326 audit(2000000552.889:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18105 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6eac8c0c9 code=0x0 [ 3021.556036][ T27] audit: type=1804 audit(2000000553.199:1367): pid=18121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2555077571/syzkaller.tls069/1100/bus" dev="sda1" ino=1196 res=1 errno=0 03:42:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) [ 3025.429264][T18192] page:ffffea0001697dc0 refcount:4 mapcount:2 mapping:0000000000000000 index:0x0 pfn:0x5a5f7 [ 3025.441476][T18192] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 3025.448722][T18192] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 3025.457508][T18192] raw: 0000000000000000 0000000000000000 0000000400000001 0000000000000000 [ 3025.466161][T18192] page dumped because: VM_BUG_ON_PAGE(batch->nr > batch->max) [ 3025.473637][T18192] page_owner tracks the page as allocated [ 3025.480745][T18192] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_NOWARN|__GFP_ZERO), pid 12808, tgid 12808 (syz-executor.0), ts 2520012530572, free_ts 2379648006058 [ 3025.500455][T18192] get_page_from_freelist+0x11bb/0x2d50 [ 3025.506120][T18192] __alloc_pages+0x1cb/0x5c0 [ 3025.510761][T18192] alloc_pages+0x1aa/0x270 [ 3025.515387][T18192] __vmalloc_node_range+0xb8a/0x1300 [ 3025.520896][T18192] vmalloc_user+0x6b/0x80 [ 3025.525609][T18192] kcov_ioctl+0x4f/0x6f0 03:42:50 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000100)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c) sched_setscheduler(r0, 0x1, &(0x7f0000000580)=0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000003e80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000bc0)=""/213, 0xd5}], 0x1}, 0x8}, {{&(0x7f0000000340)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000009c0)=""/157, 0x9d}], 0x2, &(0x7f0000000640)=""/4, 0x4}, 0x3fd}, {{&(0x7f0000000a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=""/40, 0x28}, 0x100020}, {{&(0x7f0000001140)=@ieee802154, 0x80, &(0x7f00000002c0)=[{&(0x7f0000002a00)=""/253, 0xfd}], 0x1, &(0x7f00000008c0)=""/74, 0x4a}, 0x9}, {{&(0x7f00000028c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000b00)=""/172, 0xac}, {0x0}, {0x0}, {&(0x7f0000003a00)=""/41, 0x29}, {&(0x7f0000003a40)=""/220, 0xdc}, {&(0x7f0000003b40)=""/246, 0xf6}], 0x6}, 0xe000}], 0x6, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x1ff}) epoll_create(0x9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x9) ftruncate(r4, 0x800) lseek(r4, 0x200, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00'}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0) sendfile(r4, r5, 0x0, 0x1dd00) [ 3025.530070][T18192] __x64_sys_ioctl+0x197/0x210 [ 3025.534994][T18192] do_syscall_64+0x39/0xb0 [ 3025.539459][T18192] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3025.545474][T18192] page last free stack trace: [ 3025.550165][T18192] free_pcp_prepare+0x4d0/0x910 [ 3025.555155][T18192] free_unref_page+0x1d/0x490 [ 3025.559869][T18192] qlist_free_all+0x6a/0x170 [ 3025.564578][T18192] kasan_quarantine_reduce+0x195/0x220 [ 3025.570075][T18192] __kasan_slab_alloc+0x63/0x90 [ 3025.575066][T18192] kmem_cache_alloc_node+0x183/0x350 [ 3025.580486][T18192] __alloc_skb+0x216/0x310 [ 3025.585057][T18192] tcp_stream_alloc_skb+0x3c/0x580 [ 3025.590322][T18192] tcp_sendmsg_locked+0xc47/0x2950 [ 3025.595572][T18192] tcp_sendmsg+0x2f/0x50 [ 3025.599904][T18192] inet_sendmsg+0x9d/0xe0 [ 3025.604421][T18192] sock_sendmsg+0xde/0x190 [ 3025.608880][T18192] sock_write_iter+0x295/0x3d0 [ 3025.614696][T18192] vfs_write+0x9ed/0xe10 [ 3025.619098][T18192] ksys_write+0x1ec/0x250 [ 3025.623604][T18192] do_syscall_64+0x39/0xb0 [ 3025.628271][T18192] ------------[ cut here ]------------ [ 3025.633869][T18192] kernel BUG at mm/mmu_gather.c:139! [ 3025.639190][T18192] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 3025.645274][T18192] CPU: 1 PID: 18192 Comm: syz-executor.0 Not tainted 6.2.0-rc7-next-20230206-syzkaller #0 [ 3025.655185][T18192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 3025.665395][T18192] RIP: 0010:__tlb_remove_page_size+0x24c/0x480 [ 3025.671696][T18192] Code: 01 00 00 8b 6d 0c e9 e1 fe ff ff e8 de 62 c1 ff 0f 0b e8 d7 62 c1 ff 4c 89 f7 48 c7 c6 40 7a 58 8a 48 83 e7 fc e8 64 0b fa ff <0f> 0b e8 bd 62 c1 ff 4c 8d 6b 24 48 b8 00 00 00 00 00 fc ff df 4c [ 3025.691334][T18192] RSP: 0018:ffffc90013a5f6c0 EFLAGS: 00010293 [ 3025.697428][T18192] RAX: 0000000000000000 RBX: ffffc90013a5fac0 RCX: 0000000000000000 [ 3025.705421][T18192] RDX: ffff888054b58000 RSI: ffffffff81c302bc RDI: 0000000000000000 [ 3025.713418][T18192] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff8e757017 [ 3025.721448][T18192] R10: fffffbfff1ceae02 R11: 0000000000000000 R12: 0000000000000000 [ 3025.729449][T18192] R13: 0000000000000001 R14: ffffea0001697dc0 R15: ffffc90013a5fae8 [ 3025.737709][T18192] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 3025.746845][T18192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3025.753448][T18192] CR2: 00007fc92ad821b8 CR3: 000000000c56f000 CR4: 00000000003506e0 [ 3025.761442][T18192] DR0: 00000000000b0001 DR1: 0000000000000000 DR2: 0000000000000000 [ 3025.769432][T18192] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3025.777520][T18192] Call Trace: [ 3025.780809][T18192] [ 3025.783761][T18192] unmap_page_range+0x1226/0x3ce0 [ 3025.788834][T18192] ? vm_normal_page_pmd+0x5a0/0x5a0 [ 3025.794051][T18192] ? uprobe_munmap+0x20/0x550 [ 3025.798812][T18192] unmap_single_vma+0x194/0x2a0 [ 3025.803704][T18192] unmap_vmas+0x234/0x380 [ 3025.808053][T18192] ? unmap_single_vma+0x2a0/0x2a0 [ 3025.813130][T18192] ? find_held_lock+0x2d/0x110 [ 3025.817914][T18192] ? lock_downgrade+0x690/0x690 [ 3025.822793][T18192] ? trace_lock_acquire+0x1f1/0x2b0 [ 3025.828022][T18192] exit_mmap+0x190/0x7d0 [ 3025.832300][T18192] ? do_vma_munmap+0xa0/0xa0 [ 3025.836944][T18192] __mmput+0x128/0x4c0 [ 3025.841216][T18192] mmput+0x60/0x70 [ 3025.845046][T18192] do_exit+0x9d7/0x2b60 [ 3025.849232][T18192] ? find_held_lock+0x2d/0x110 [ 3025.854022][T18192] ? get_signal+0x8a0/0x25b0 [ 3025.858858][T18192] ? mm_update_next_owner+0x7b0/0x7b0 [ 3025.864293][T18192] do_group_exit+0xd4/0x2a0 [ 3025.868933][T18192] get_signal+0x2321/0x25b0 [ 3025.873502][T18192] ? exit_signals+0x910/0x910 [ 3025.878225][T18192] ? do_futex+0x132/0x360 [ 3025.882606][T18192] ? __ia32_sys_get_robust_list+0x400/0x400 [ 3025.888548][T18192] arch_do_signal_or_restart+0x79/0x5c0 [ 3025.894125][T18192] ? get_sigframe_size+0x10/0x10 [ 3025.899096][T18192] ? __x64_sys_futex+0x1ca/0x4d0 [ 3025.904083][T18192] exit_to_user_mode_prepare+0x11f/0x240 [ 3025.909756][T18192] syscall_exit_to_user_mode+0x1d/0x50 [ 3025.915256][T18192] do_syscall_64+0x46/0xb0 [ 3025.919726][T18192] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3025.925694][T18192] RIP: 0033:0x7f1e99e8c0c9 [ 3025.930139][T18192] Code: Unable to access opcode bytes at 0x7f1e99e8c09f. [ 3025.937164][T18192] RSP: 002b:00007ffd18c90658 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 3025.945601][T18192] RAX: 0000000000000000 RBX: 00007f1e99fabf8c RCX: 00007f1e99e8c0c9 [ 3025.954258][T18192] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e99fabf8c [ 3025.962424][T18192] RBP: 00007f1e99fabf80 R08: 00007ffd18d75080 R09: 0000000000000000 [ 3025.970414][T18192] R10: 00007ffd18c90740 R11: 0000000000000246 R12: 00000000002e1ce2 [ 3025.978407][T18192] R13: 00007ffd18c90740 R14: 00007ffd18c90760 R15: 0000000000000032 [ 3025.986526][T18192] [ 3025.989573][T18192] Modules linked in: [ 3025.993837][T18192] ---[ end trace 0000000000000000 ]--- [ 3025.999400][T18192] RIP: 0010:__tlb_remove_page_size+0x24c/0x480 [ 3026.005751][T18192] Code: 01 00 00 8b 6d 0c e9 e1 fe ff ff e8 de 62 c1 ff 0f 0b e8 d7 62 c1 ff 4c 89 f7 48 c7 c6 40 7a 58 8a 48 83 e7 fc e8 64 0b fa ff <0f> 0b e8 bd 62 c1 ff 4c 8d 6b 24 48 b8 00 00 00 00 00 fc ff df 4c [ 3026.025591][T18192] RSP: 0018:ffffc90013a5f6c0 EFLAGS: 00010293 [ 3026.031735][T18192] RAX: 0000000000000000 RBX: ffffc90013a5fac0 RCX: 0000000000000000 [ 3026.039913][T18192] RDX: ffff888054b58000 RSI: ffffffff81c302bc RDI: 0000000000000000 [ 3026.048259][T18192] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff8e757017 [ 3026.056480][T18192] R10: fffffbfff1ceae02 R11: 0000000000000000 R12: 0000000000000000 [ 3026.064574][T18192] R13: 0000000000000001 R14: ffffea0001697dc0 R15: ffffc90013a5fae8 [ 3026.072631][T18192] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 3026.081748][T18192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3026.088466][T18192] CR2: 00007fc92ad821b8 CR3: 000000000c56f000 CR4: 00000000003506e0 [ 3026.096549][T18192] DR0: 00000000000b0001 DR1: 0000000000000000 DR2: 0000000000000000 [ 3026.104665][T18192] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3026.112710][T18192] Kernel panic - not syncing: Fatal exception [ 3026.119083][T18192] Kernel Offset: disabled [ 3026.123405][T18192] Rebooting in 86400 seconds..