last executing test programs: 4.46128891s ago: executing program 1: r0 = io_uring_setup(0x30d3, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 3.966458016s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x0, 0x6602, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) 2.837504481s ago: executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 2.806477176s ago: executing program 1: syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000580)=ANY=[@ANYBLOB='quota,discard=0x0000000000000003,iocharset=macceltic,iocharset=macgreek,iocharset=iso8859-1,quota,nodiscard,noquota,\x00\x00\x00\x00\x00\x00\x00\x00t=cp865,\x00'], 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 2.774317831s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x53) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x9, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 2.616402755s ago: executing program 0: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@dioread_nolock}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x6a}}, {@debug}, {@noinit_itable}, {@min_batch_time}, {@usrjquota}, {@orlov}, {@minixdf}, {@resgid}], [{@appraise}, {@euid_lt}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure}, {@fowner_lt}, {@fowner_gt}, {@fowner_lt}, {@obj_role={'obj_role', 0x3d, '-'}}]}, 0xfe, 0x43a, &(0x7f00000008c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000180)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.316276941s ago: executing program 0: memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_usb_connect(0x0, 0x49, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006e17e210991181c087d401020301090237000100fe00000904080000ffbeed00052406000005240000000d240f"], 0x0) 2.306005543s ago: executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0xe80, &(0x7f00000003c0), &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}) syz_io_uring_setup(0x49a1, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000180)=""/151, 0x97}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1418, 0x1}, 0x10}}, 0x0) 2.12913771s ago: executing program 4: r0 = io_uring_setup(0x30d3, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.859390862s ago: executing program 3: r0 = io_uring_setup(0x30d3, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 980.573798ms ago: executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 892.682352ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 852.477478ms ago: executing program 4: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34324142}}) 780.356179ms ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) 751.425214ms ago: executing program 4: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@dioread_nolock}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x6a}}, {@debug}, {@noinit_itable}, {@min_batch_time}, {@usrjquota}, {@orlov}, {@minixdf}, {@resgid}], [{@appraise}, {@euid_lt}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_measure}, {@fowner_lt}, {@fowner_gt}, {@fowner_lt}, {@obj_role={'obj_role', 0x3d, '-'}}]}, 0xfe, 0x43a, &(0x7f00000008c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000180)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 695.444872ms ago: executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0xb7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5100, 0x0) 661.740177ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 625.059633ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 609.495905ms ago: executing program 4: syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000580)=ANY=[@ANYBLOB='quota,discard=0x0000000000000003,iocharset=macceltic,iocharset=macgreek,iocharset=iso8859-1,quota,nodiscard,noquota,\x00\x00\x00\x00\x00\x00\x00\x00t=cp865,\x00'], 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 502.893252ms ago: executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c746572008100000000000000000000000000000000000000000000000010"], 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x8, 0xfcde) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 432.498903ms ago: executing program 2: r0 = io_uring_setup(0x30d3, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 338.455388ms ago: executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0xe80, &(0x7f00000003c0), &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}) syz_io_uring_setup(0x49a1, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000180)=""/151, 0x97}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1418, 0x1}, 0x10}}, 0x0) 309.837922ms ago: executing program 1: futex(0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e6f72746e6128f36567616cead5e854296d653d77696e6e742c726f6469722c757467383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c7065726d69745f6469726500"/130], 0xfd, 0x298, &(0x7f0000000880)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2c, &(0x7f0000000040)) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r4, 0x10000) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000180)={r4, 0x0, 0x0, 0x1000}) io_submit(r2, 0x1, &(0x7f00000007c0)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r6 = epoll_create(0xa4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000480)={0x4}) 233.786054ms ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000001700000000000100000004000480080002000100000008000100000000002400088014000780080006000000000008000500e79209000c00"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05604, &(0x7f00000008c0)={0xa, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r6}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r5) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000a00000018000180140002"], 0x2c}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x3c, r9, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000050) 220.261226ms ago: executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x34324142}}) 133.339519ms ago: executing program 1: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed50d0410"], 0x11) 129.83123ms ago: executing program 2: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x325, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='y', 0x1}], 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f00000014c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 86.983786ms ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) fchdir(0xffffffffffffffff) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf1}]}, 0x2c}}, 0x0) 68.614709ms ago: executing program 1: r0 = io_uring_setup(0x30d3, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_io_uring_setup(0xe80, &(0x7f00000003c0), &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index}) syz_io_uring_setup(0x49a1, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000340)) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000180)=""/151, 0x97}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1418, 0x1}, 0x10}}, 0x0) kernel console output (not intermixed with test programs): -fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 478.336869][T13897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 478.656817][T13916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 478.668556][T13916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 478.935558][T13928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 479.013850][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 479.013865][ T26] audit: type=1800 audit(2000000297.089:668): pid=13935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1953 res=0 errno=0 [ 480.466357][ T26] audit: type=1326 audit(2000000298.549:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13962 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76c667cee9 code=0x0 [ 480.499056][T13966] loop2: detected capacity change from 0 to 1024 [ 480.540435][ T26] audit: type=1326 audit(2000000298.619:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f061167cee9 code=0x0 [ 482.211947][T13991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 482.220350][T13991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 482.252848][T13992] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 482.428049][T13991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.784605][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 483.155143][ T7] usb 3-1: config 1 has an invalid descriptor of length 105, skipping remainder of the config [ 483.172048][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.239770][ T26] audit: type=1326 audit(2000000301.319:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14009 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c57e7cee9 code=0x0 [ 483.262753][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 483.272862][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 483.281633][ T7] usb 3-1: SerialNumber: syz [ 483.577007][ T7] usb 3-1: 0:2 : does not exist [ 483.664951][ T7] usb 3-1: USB disconnect, device number 6 [ 485.311604][ T26] audit: type=1326 audit(2000000303.389:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14046 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76c667cee9 code=0x0 [ 485.396228][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 486.232140][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 486.464355][T14056] loop2: detected capacity change from 0 to 32768 [ 487.093585][ T5783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.680391][T14056] XFS (loop2): Mounting V5 Filesystem [ 487.798352][T14056] XFS (loop2): Ending clean mount [ 487.833342][T14056] XFS (loop2): Quotacheck needed: Please wait. [ 487.989636][T14056] XFS (loop2): Quotacheck: Done. [ 488.304343][ T3573] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 488.324958][ T3585] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 488.340330][ T3585] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 488.360032][ T3585] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 488.376452][ T3585] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 488.387744][ T3585] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 488.573659][ T5783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.621973][T14098] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 488.647395][T11640] XFS (loop2): Unmounting Filesystem [ 488.663703][T14098] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 488.765751][ T5783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.800567][T14102] lo speed is unknown, defaulting to 1000 [ 488.868133][ T5783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.247969][T14102] chnl_net:caif_netlink_parms(): no params data found [ 489.352931][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.702029][T14131] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.091134][ T47] Bluetooth: hci7: command tx timeout [ 491.368359][T14130] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 491.378071][T14130] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 491.391985][T14130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 491.399716][T14130] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 491.407282][T14130] device bond0 left promiscuous mode [ 491.407437][ T6686] bond0: (slave bond_slave_0): interface is now down [ 491.412570][T14130] device bond_slave_0 left promiscuous mode [ 491.412714][T14130] device bond_slave_1 left promiscuous mode [ 491.433148][T14130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.500867][T14133] loop2: detected capacity change from 0 to 2048 [ 491.512006][ T6686] bond0: (slave bond_slave_1): interface is now down [ 491.552439][T14130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.589372][ T3561] lo speed is unknown, defaulting to 1000 [ 491.612894][T14137] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 491.646582][ T6686] bond0: (slave bond_slave_0): interface is now down [ 491.686027][ T6686] bond0: (slave bond_slave_1): interface is now down [ 491.755837][ T6686] bond0: (slave bond_slave_0): interface is now down [ 491.762575][ T6686] bond0: (slave bond_slave_1): interface is now down [ 491.812530][ T3650] bond0: (slave bond_slave_0): interface is now down [ 491.835770][ T3650] bond0: (slave bond_slave_1): interface is now down [ 491.866020][ T6686] bond0: (slave bond_slave_0): interface is now down [ 491.872753][ T6686] bond0: (slave bond_slave_1): interface is now down [ 491.948462][ T3650] bond0: (slave bond_slave_0): interface is now down [ 491.963250][ T3650] bond0: (slave bond_slave_1): interface is now down [ 492.004661][ T3650] bond0: (slave bond_slave_0): interface is now down [ 492.011440][ T3650] bond0: (slave bond_slave_1): interface is now down [ 492.054724][ T9890] bond0: (slave bond_slave_0): interface is now down [ 492.061524][ T9890] bond0: (slave bond_slave_1): interface is now down [ 492.124587][ T9890] bond0: (slave bond_slave_0): interface is now down [ 492.131330][ T9890] bond0: (slave bond_slave_1): interface is now down [ 492.184975][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.205958][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.244593][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.252685][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.285935][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.295936][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.324777][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.332819][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.384610][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.394356][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.435222][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.443219][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.484622][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.492891][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.524566][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.532667][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.564728][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.572949][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.614657][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.622741][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.654584][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.662944][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.694524][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.708003][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.754841][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.761807][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.774859][T14102] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.804747][ T9890] bond0: (slave bond_slave_0): interface is now down [ 492.816918][ T9890] bond0: (slave bond_slave_1): interface is now down [ 492.824600][T14102] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.833844][T14102] device bridge_slave_0 entered promiscuous mode [ 492.854767][ T9890] bond0: (slave bond_slave_0): interface is now down [ 492.868886][ T9890] bond0: (slave bond_slave_1): interface is now down [ 492.914590][ T51] bond0: (slave bond_slave_0): interface is now down [ 492.925332][T14102] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.932442][T14102] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.944508][ T51] bond0: (slave bond_slave_1): interface is now down [ 492.966146][ T9890] bond0: (slave bond_slave_0): interface is now down [ 492.972878][ T9890] bond0: (slave bond_slave_1): interface is now down [ 492.973240][T14102] device bridge_slave_1 entered promiscuous mode [ 493.006058][T14157] input: syz0 as /devices/virtual/input/input12 [ 493.034601][ T9890] bond0: (slave bond_slave_0): interface is now down [ 493.041364][ T9890] bond0: (slave bond_slave_1): interface is now down [ 493.084598][ T51] bond0: (slave bond_slave_0): interface is now down [ 493.091341][ T51] bond0: (slave bond_slave_1): interface is now down [ 493.125944][ T51] bond0: (slave bond_slave_0): interface is now down [ 493.132736][ T51] bond0: (slave bond_slave_1): interface is now down [ 493.143461][T14102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.153892][ T3585] Bluetooth: hci7: command tx timeout [ 493.183211][T14102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.196003][ T51] bond0: (slave bond_slave_0): interface is now down [ 493.208596][ T51] bond0: (slave bond_slave_1): interface is now down [ 493.249042][ T6686] bond0: (slave bond_slave_0): interface is now down [ 493.256111][ T6686] bond0: (slave bond_slave_1): interface is now down [ 493.283096][ T6686] bond0: (slave bond_slave_0): interface is now down [ 493.299961][ T6686] bond0: (slave bond_slave_1): interface is now down [ 493.334593][ T6686] bond0: (slave bond_slave_0): interface is now down [ 493.341329][ T6686] bond0: (slave bond_slave_1): interface is now down [ 493.356682][T14102] team0: Port device team_slave_0 added [ 493.386709][T14102] team0: Port device team_slave_1 added [ 493.404579][ T51] bond0: (slave bond_slave_0): interface is now down [ 493.411639][ T51] bond0: (slave bond_slave_1): interface is now down [ 493.464817][ T9890] bond0: (slave bond_slave_0): interface is now down [ 493.471557][ T9890] bond0: (slave bond_slave_1): interface is now down [ 493.514609][ T9890] bond0: (slave bond_slave_0): interface is now down [ 493.521578][ T9890] bond0: (slave bond_slave_1): interface is now down [ 493.564555][ T9890] bond0: (slave bond_slave_0): interface is now down [ 493.571508][ T9890] bond0: (slave bond_slave_1): interface is now down [ 493.604535][ T9890] bond0: (slave bond_slave_0): interface is now down [ 493.612567][ T9890] bond0: (slave bond_slave_1): interface is now down [ 493.659527][ T6686] bond0: (slave bond_slave_0): interface is now down [ 493.680203][ T6686] bond0: (slave bond_slave_1): interface is now down [ 493.714538][ T6686] bond0: (slave bond_slave_0): interface is now down [ 493.721540][ T6686] bond0: (slave bond_slave_1): interface is now down [ 493.754666][ T6686] bond0: (slave bond_slave_0): interface is now down [ 493.764546][ T6686] bond0: (slave bond_slave_1): interface is now down [ 493.794552][ T6686] bond0: (slave bond_slave_0): interface is now down [ 493.802464][ T6686] bond0: (slave bond_slave_1): interface is now down [ 493.837275][ T1102] bond0: (slave bond_slave_0): interface is now down [ 493.846891][ T1102] bond0: (slave bond_slave_1): interface is now down [ 493.888186][ T1102] bond0: (slave bond_slave_0): interface is now down [ 493.904785][ T1102] bond0: (slave bond_slave_1): interface is now down [ 493.934637][ T9890] bond0: (slave bond_slave_0): interface is now down [ 493.942791][ T9890] bond0: (slave bond_slave_1): interface is now down [ 493.984823][ T3650] bond0: (slave bond_slave_0): interface is now down [ 493.994078][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.024584][ T3650] bond0: (slave bond_slave_0): interface is now down [ 494.032213][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.054612][ T3650] bond0: (slave bond_slave_0): interface is now down [ 494.061619][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.085767][ T3650] bond0: (slave bond_slave_0): interface is now down [ 494.092778][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.114618][ T3650] bond0: (slave bond_slave_0): interface is now down [ 494.121667][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.144548][ T3650] bond0: (slave bond_slave_0): interface is now down [ 494.153720][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.184903][ T3650] bond0: (slave bond_slave_0): interface is now down [ 494.193120][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.224777][ T3650] bond0: (slave bond_slave_0): interface is now down [ 494.242235][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.294787][ T3650] bond0: (slave bond_slave_0): interface is now down [ 494.301524][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.317842][T14102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.334575][ T3650] bond0: (slave bond_slave_0): interface is now down [ 494.336654][T14102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.341333][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.457793][T14102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.491508][T14102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.504674][ T3650] bond0: (slave bond_slave_0): interface is now down [ 494.511412][ T3650] bond0: (slave bond_slave_1): interface is now down [ 494.521628][T14102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.564598][ T9890] bond0: (slave bond_slave_0): interface is now down [ 494.571346][ T9890] bond0: (slave bond_slave_1): interface is now down [ 494.604646][ T9890] bond0: (slave bond_slave_0): interface is now down [ 494.611115][T14102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.613746][ T9890] bond0: (slave bond_slave_1): interface is now down [ 495.235088][ T3650] bond0: (slave bond_slave_0): interface is now down [ 495.407559][ T3585] Bluetooth: hci7: command tx timeout [ 495.737333][ T3650] bond0: (slave bond_slave_1): interface is now down [ 495.795540][ T3650] bond0: (slave bond_slave_0): interface is now down [ 495.820246][ T3650] bond0: (slave bond_slave_1): interface is now down [ 495.870859][T14102] device hsr_slave_0 entered promiscuous mode [ 495.886286][ T6686] bond0: (slave bond_slave_0): interface is now down [ 495.893021][ T6686] bond0: (slave bond_slave_1): interface is now down [ 495.945333][T14102] device hsr_slave_1 entered promiscuous mode [ 495.954733][ T6686] bond0: (slave bond_slave_0): interface is now down [ 495.961469][ T6686] bond0: (slave bond_slave_1): interface is now down [ 495.998267][T14102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.006829][T14102] Cannot create hsr debugfs directory [ 496.025080][ T6686] bond0: (slave bond_slave_0): interface is now down [ 496.031820][ T6686] bond0: (slave bond_slave_1): interface is now down [ 496.074789][ T3650] bond0: (slave bond_slave_0): interface is now down [ 496.081568][ T3650] bond0: (slave bond_slave_1): interface is now down [ 496.134581][ T3650] bond0: (slave bond_slave_0): interface is now down [ 496.141314][ T3650] bond0: (slave bond_slave_1): interface is now down [ 496.153537][T14222] loop2: detected capacity change from 0 to 1024 [ 496.176004][T14222] EXT4-fs: Ignoring removed orlov option [ 496.181694][T14222] EXT4-fs: Ignoring removed orlov option [ 496.194683][ T6686] bond0: (slave bond_slave_0): interface is now down [ 496.201493][ T6686] bond0: (slave bond_slave_1): interface is now down [ 496.254736][ T9] bond0: (slave bond_slave_0): interface is now down [ 496.263954][T14222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 496.277419][ T9] bond0: (slave bond_slave_1): interface is now down [ 496.324720][ T9] bond0: (slave bond_slave_0): interface is now down [ 496.350377][ T9] bond0: (slave bond_slave_1): interface is now down [ 496.434750][ T3650] bond0: (slave bond_slave_0): interface is now down [ 496.441621][ T3650] bond0: (slave bond_slave_1): interface is now down [ 496.474572][ T9] bond0: (slave bond_slave_0): interface is now down [ 496.481306][ T9] bond0: (slave bond_slave_1): interface is now down [ 496.524612][ T6686] bond0: (slave bond_slave_0): interface is now down [ 496.531387][ T6686] bond0: (slave bond_slave_1): interface is now down [ 496.540767][T14231] nfs4: Bad value for 'source' [ 496.559929][T11640] EXT4-fs (loop2): unmounting filesystem. [ 496.578542][ T6686] bond0: now running without any active interface! [ 496.761560][ T5783] device hsr_slave_0 left promiscuous mode [ 496.771255][ T5783] device hsr_slave_1 left promiscuous mode [ 496.788288][T14241] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.801881][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.816384][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.837201][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.848251][T14241] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.862428][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.886231][ T5783] device bridge_slave_1 left promiscuous mode [ 496.900501][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.910669][T14241] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 496.933047][T14241] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'. [ 496.948998][ T5783] device bridge_slave_0 left promiscuous mode [ 496.956540][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.989564][ T5783] device veth1_macvtap left promiscuous mode [ 497.006179][ T5783] device veth0_macvtap left promiscuous mode [ 497.022787][ T5783] device veth1_vlan left promiscuous mode [ 497.478633][ T5783] team0 (unregistering): Port device team_slave_1 removed [ 497.512297][ T5783] team0 (unregistering): Port device team_slave_0 removed [ 497.552935][ T5783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.585168][ T5783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.705519][ T47] Bluetooth: hci7: command tx timeout [ 497.771792][ T5783] bond0 (unregistering): Released all slaves [ 497.843900][T14249] loop2: detected capacity change from 0 to 32768 [ 497.914082][ T4844] XFS (loop2): filesystem is marked as having an internal log; do not specify logdev on the mount command line. [ 497.929641][T14249] XFS (loop2): SB validate failed with error -22. [ 498.275623][T14271] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 498.427312][T14102] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 498.471781][T14102] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 498.500900][T14102] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 498.553464][T14102] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 499.121925][T14271] fscrypt (sda1, inode 1963): Missing crypto API support for AES-128-CTS-CBC (API name: "cts(cbc(aes))") [ 499.347996][T14102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.397968][T14276] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 499.645526][T14276] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 499.749464][T11569] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 499.760329][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 499.770381][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 499.774715][T11569] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 499.819619][T11569] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 499.828786][T14102] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.844597][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.853401][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.890169][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.897361][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.947560][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 499.971188][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.997342][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.004515][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.055695][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.063896][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.098714][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.127850][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.154181][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.197088][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.209264][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.255618][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.275371][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.294972][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.329460][T14102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.358206][T14102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 500.380623][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.406446][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 501.068832][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.079961][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.113628][T14102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.180183][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.196052][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.257771][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.279943][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.313395][T14102] device veth0_vlan entered promiscuous mode [ 501.330918][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.343536][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.367719][T14102] device veth1_vlan entered promiscuous mode [ 501.394903][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.401330][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.449424][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 501.469847][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 501.511092][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 501.545874][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.585158][T14102] device veth0_macvtap entered promiscuous mode [ 501.618969][T14102] device veth1_macvtap entered promiscuous mode [ 501.706162][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.764881][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.797536][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.832140][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.865782][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.904832][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.959709][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.982884][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.011750][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.064546][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.074421][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.144327][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.174574][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.214791][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.239153][T14102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.262341][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 502.288345][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 502.312709][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 502.356169][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 502.390755][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.420940][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.455685][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.498307][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.539909][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.576888][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.592037][T14360] loop2: detected capacity change from 0 to 512 [ 502.614248][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.644352][T14360] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 502.655973][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.683460][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.703767][T14360] EXT4-fs (loop2): invalid journal inode [ 502.717796][T14360] EXT4-fs (loop2): can't get journal size [ 502.724166][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.778344][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.832290][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.861214][T14360] EXT4-fs (loop2): 1 truncate cleaned up [ 502.880633][T14360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 502.890637][T14102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.927709][T14102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.994898][T14102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.018301][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 503.038713][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 503.077005][T14102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.100106][T14102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.130421][T14102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.158191][T14102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.273698][T11640] EXT4-fs (loop2): unmounting filesystem. [ 503.462511][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.494573][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.560823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 503.599599][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.624793][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.681135][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 504.072635][ T26] audit: type=1804 audit(2000000322.149:673): pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=1972 res=1 errno=0 [ 504.199370][ T3585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 504.213566][ T3585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 504.223169][ T3585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 504.237878][ T3585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 504.246101][ T3585] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 504.255827][ T3585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 504.305483][T14385] lo speed is unknown, defaulting to 1000 [ 504.517970][T14385] chnl_net:caif_netlink_parms(): no params data found [ 504.583402][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 504.696744][T14385] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.709048][T14385] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.745779][T14385] device bridge_slave_0 entered promiscuous mode [ 504.777432][T14423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 504.790571][T14385] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.834872][T14385] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.856795][T14385] device bridge_slave_1 entered promiscuous mode [ 504.940742][T14385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.980869][T14385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.117136][T14385] team0: Port device team_slave_0 added [ 505.132628][T14441] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 505.167760][T14385] team0: Port device team_slave_1 added [ 505.228957][T14385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.241836][T14385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.335608][T14385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.353472][T14385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.368655][T14385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.394726][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.536137][T14462] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 505.968866][T14385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.134259][T14457] loop3: detected capacity change from 0 to 2048 [ 506.170101][T14460] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 506.214799][T14460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 506.286879][T14457] loop3: p3 < > p4 < > [ 506.291465][T14457] loop3: partition table partially beyond EOD, truncated [ 506.339152][T14457] loop3: p3 start 4284289 is beyond EOD, truncated [ 506.349284][T14385] device hsr_slave_0 entered promiscuous mode [ 506.355150][ T3585] Bluetooth: hci3: command tx timeout [ 506.389627][T14385] device hsr_slave_1 entered promiscuous mode [ 506.409619][T14385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.423780][T14385] Cannot create hsr debugfs directory [ 506.674780][T14485] openvswitch: netlink: Message has 4 unknown bytes. [ 506.703425][T14488] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.742911][T14490] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 506.817834][T14490] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 506.924776][T14385] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.061614][T14385] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.069708][T14505] loop3: detected capacity change from 0 to 2048 [ 507.118066][T14507] loop2: detected capacity change from 0 to 2048 [ 507.152278][T14505] loop3: p3 < > p4 < > [ 507.165170][T14505] loop3: partition table partially beyond EOD, truncated [ 507.172720][T14507] loop2: p3 < > p4 < > [ 507.185292][T14385] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.188083][T14505] loop3: p3 start 4284289 is beyond EOD, [ 507.204378][T14507] loop2: partition table partially beyond EOD, truncated [ 507.217332][T14505] truncated [ 507.230124][T14507] loop2: p3 start 4284289 is beyond EOD, truncated [ 507.245929][T14517] openvswitch: netlink: Message has 4 unknown bytes. [ 507.340355][T14385] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.638934][T14530] loop2: detected capacity change from 0 to 190 [ 507.671462][T14530] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 507.698843][T14530] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 507.723162][T14530] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 507.783745][T14385] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 507.800407][T14385] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 507.811681][T14385] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 507.823401][T14385] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 507.920386][T14541] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 507.970671][T14541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.115499][T14385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.148669][T14550] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 508.162526][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 508.176936][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.213717][T14550] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 508.250544][T14385] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.289233][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 508.305936][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 508.316599][T14555] loop3: detected capacity change from 0 to 2048 [ 508.334640][ T3618] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.342251][ T3618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.384687][T14555] loop3: p3 < > p4 < > [ 508.388928][T14555] loop3: partition table partially beyond EOD, truncated [ 508.403534][T14558] loop2: detected capacity change from 0 to 2048 [ 508.405504][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 508.410324][T14555] loop3: p3 start 4284289 is beyond EOD, truncated [ 508.425650][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 508.427290][ T3585] Bluetooth: hci3: command tx timeout [ 508.445365][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 508.474100][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.481326][ T4870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.495355][T14558] loop2: p3 < > p4 < > [ 508.499764][T14558] loop2: partition table partially beyond EOD, truncated [ 508.508064][T14558] loop2: p3 start 4284289 is beyond EOD, truncated [ 508.528237][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 508.555980][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 508.615107][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 508.636611][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 508.655528][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 508.680095][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 508.705488][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 508.714312][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 508.747758][T14385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 508.820951][T14385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 508.858699][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 508.875134][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 508.895329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 508.918947][T14583] 9pnet_fd: Insufficient options for proto=fd [ 509.108811][T14592] loop2: detected capacity change from 0 to 190 [ 509.142190][T14592] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 509.174709][T14592] ntfs: (device loop2): parse_ntfs_boot_sector(): Mft record size (65536) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 509.194571][T14592] ntfs: (device loop2): ntfs_fill_super(): Unsupported NTFS filesystem. [ 509.390810][T14385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.414092][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 509.439361][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 509.481167][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 509.498884][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 509.539664][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 509.553861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.579398][T14385] device veth0_vlan entered promiscuous mode [ 509.595514][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.606174][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.619562][T14385] device veth1_vlan entered promiscuous mode [ 509.653531][T14612] 9pnet_fd: Insufficient options for proto=fd [ 509.662416][T14609] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 509.699502][T14609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.787480][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.800554][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.828429][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 509.855573][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 509.896348][T14385] device veth0_macvtap entered promiscuous mode [ 509.943046][T14385] device veth1_macvtap entered promiscuous mode [ 509.989038][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.009478][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.031309][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.070042][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.084863][T14626] loop2: detected capacity change from 0 to 2048 [ 510.104831][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.119245][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.140653][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.161334][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.181414][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.201036][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.222691][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.253101][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.263074][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.275305][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.285196][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.298227][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.331916][T14385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.359882][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 510.369465][T14626] loop2: p3 < > p4 < > [ 510.385015][T14626] loop2: partition table partially beyond EOD, truncated [ 510.395865][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 510.404698][T14626] loop2: p3 start 4284289 is beyond EOD, truncated [ 510.415149][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.442290][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.462425][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.477783][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.488100][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.498629][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.509510][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.514804][ T3585] Bluetooth: hci3: command tx timeout [ 510.533558][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.551048][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.562109][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.572428][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.594544][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.604844][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.615932][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.626808][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.637566][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.647774][T14385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.658450][T14385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.671437][T14385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.682301][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 510.692374][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 510.705039][T14385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.713764][T14385] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.723615][T14385] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.735044][T14385] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.859215][ T9890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.874654][ T9890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.896391][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 510.922068][ T9890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.931057][ T9890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.945691][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 510.956463][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 510.985262][T14646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.420359][T14665] loop3: detected capacity change from 0 to 64 [ 511.493634][T14665] Trying to free block not in datazone [ 511.501264][T14665] Trying to free block not in datazone [ 511.504392][ T26] audit: type=1804 audit(2000000329.579:674): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir802247763/syzkaller.lm6cV1/3/file1" dev="sda1" ino=1979 res=1 errno=0 [ 511.507129][T14665] Trying to free block not in datazone [ 511.532419][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.550099][T14665] Trying to free block not in datazone [ 511.555967][T14665] minix_free_block (loop3:6): bit already cleared [ 511.563253][T14665] Trying to free block not in datazone [ 511.569199][T14665] Trying to free block not in datazone [ 511.824121][T14678] 9pnet_fd: p9_fd_create_unix (14678): problem connecting socket: ./file0: -1 [ 511.946703][T14684] 9pnet_fd: Insufficient options for proto=fd [ 512.124391][T14693] loop2: detected capacity change from 0 to 64 [ 512.140404][T14693] Trying to free block not in datazone [ 512.146337][T14693] Trying to free block not in datazone [ 512.154731][T14693] Trying to free block not in datazone [ 512.161710][T14693] Trying to free block not in datazone [ 512.168506][T14693] minix_free_block (loop2:6): bit already cleared [ 512.175669][T14693] Trying to free block not in datazone [ 512.181630][T14693] Trying to free block not in datazone [ 512.303982][ T26] audit: type=1804 audit(2000000330.379:675): pid=14697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir802247763/syzkaller.lm6cV1/6/file1" dev="sda1" ino=1955 res=1 errno=0 [ 512.376286][ T26] audit: type=1804 audit(2000000330.439:676): pid=14701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1895055291/syzkaller.iVKAc5/34/file1" dev="sda1" ino=1973 res=1 errno=0 [ 512.419382][T14705] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 512.459803][ T26] audit: type=1804 audit(2000000330.499:677): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1472406359/syzkaller.m6XNR8/212/file1" dev="sda1" ino=1954 res=1 errno=0 [ 512.494998][T14705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.584757][ T3585] Bluetooth: hci3: command tx timeout [ 512.658325][T14711] loop3: detected capacity change from 0 to 512 [ 512.749741][T14711] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 512.766654][T14711] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 512.793371][T14711] System zones: 0-1, 15-15, 18-18, 34-34 [ 512.805089][T14711] EXT4-fs (loop3): orphan cleanup on readonly fs [ 512.811702][T14711] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 512.821367][T14711] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 512.841936][T14711] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 512.849744][T14711] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 16 [ 512.871312][T14711] ext4_test_bit(bit=15, block=18) = 1 [ 512.896841][T14711] is_bad_inode(inode)=0 [ 512.905766][T14711] NEXT_ORPHAN(inode)=0 [ 512.918005][T14711] max_ino=32 [ 512.932356][T14711] i_nlink=2 [ 512.942765][T14711] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 513.034294][ T26] audit: type=1804 audit(2000000331.109:678): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir802247763/syzkaller.lm6cV1/12/file1" dev="sda1" ino=1972 res=1 errno=0 [ 513.131242][T14102] EXT4-fs (loop3): unmounting filesystem. [ 513.374390][T14758] [U]  [ 513.640659][T14772] loop3: detected capacity change from 0 to 512 [ 513.642017][ T26] audit: type=1804 audit(2000000331.719:679): pid=14774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file1" dev="sda1" ino=1972 res=1 errno=0 [ 513.701217][T14772] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 513.714749][T14772] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 513.724803][T14772] System zones: 0-1, 15-15, 18-18, 34-34 [ 513.737017][T14772] EXT4-fs (loop3): orphan cleanup on readonly fs [ 513.764114][T14772] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 513.831796][T14772] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 513.860725][T14772] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 16 [ 513.875621][T14772] ext4_test_bit(bit=15, block=18) = 1 [ 513.881051][T14772] is_bad_inode(inode)=0 [ 513.905782][T14772] NEXT_ORPHAN(inode)=0 [ 513.934728][T14772] max_ino=32 [ 513.937990][T14772] i_nlink=2 [ 513.941188][T14772] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 514.045232][T14755] loop2: detected capacity change from 0 to 40427 [ 514.047283][T14102] EXT4-fs (loop3): unmounting filesystem. [ 514.066311][T14755] F2FS-fs (loop2): invalid crc value [ 514.119777][T14755] F2FS-fs (loop2): Found nat_bits in checkpoint [ 514.154223][T14792] loop3: detected capacity change from 0 to 128 [ 514.179492][T14792] FAT-fs (loop3): bogus logical sector size 65535 [ 514.187791][T14792] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 514.211645][T14792] FAT-fs (loop3): Can't find a valid FAT filesystem [ 514.229577][T14755] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 514.428252][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 514.428268][ T26] audit: type=1804 audit(2000000332.509:682): pid=14804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir802247763/syzkaller.lm6cV1/21/file1" dev="sda1" ino=1966 res=1 errno=0 [ 514.534049][T11640] syz-executor.2: attempt to access beyond end of device [ 514.534049][T11640] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 514.742745][T14818] loop3: detected capacity change from 0 to 1024 [ 514.766742][T14818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.777241][T14818] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 514.800572][T14818] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 514.819849][T14818] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 515.215504][T14844] loop2: detected capacity change from 0 to 256 [ 515.543446][T14866] delete_channel: no stack [ 515.903376][T14883] Bluetooth: MGMT ver 1.22 [ 515.938320][ T26] audit: type=1804 audit(2000000334.019:683): pid=14892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1472406359/syzkaller.m6XNR8/224/file1" dev="sda1" ino=1979 res=1 errno=0 [ 516.039595][T14896] loop3: detected capacity change from 0 to 1024 [ 516.058835][T14896] hfsplus: failed to load catalog file [ 516.091422][T14900] loop2: detected capacity change from 0 to 256 [ 516.350698][T14913] delete_channel: no stack [ 516.522504][ T26] audit: type=1804 audit(2000000334.599:684): pid=14923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir802247763/syzkaller.lm6cV1/39/file1" dev="sda1" ino=1961 res=1 errno=0 [ 516.659424][T14931] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 517.203683][T14959] loop3: detected capacity change from 0 to 1024 [ 517.238063][T14964] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.248752][T14959] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 517.265841][T14959] EXT4-fs (loop3): orphan cleanup on readonly fs [ 517.281152][T14959] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=2 [ 517.284865][T14961] loop2: detected capacity change from 0 to 2048 [ 517.291068][T14959] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 517.313082][T14959] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 517.345043][T14959] EXT4-fs (loop3): 1 truncate cleaned up [ 517.360590][T14961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.369721][T14959] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 517.495514][T14102] EXT4-fs (loop3): unmounting filesystem. [ 517.655967][T14974] loop2: detected capacity change from 0 to 2048 [ 517.696833][T14974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 518.037985][T14994] loop2: detected capacity change from 0 to 2048 [ 518.083189][T14994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 518.468278][T14973] loop3: detected capacity change from 0 to 32768 [ 518.533533][T14973] XFS (loop3): Mounting V5 Filesystem [ 518.623415][T14973] XFS (loop3): Ending clean mount [ 518.660603][T14973] XFS (loop3): Quotacheck needed: Please wait. [ 518.746513][T14973] XFS (loop3): Quotacheck: Done. [ 518.805996][T14102] XFS (loop3): Unmounting Filesystem [ 518.821024][T15032] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.873892][ T26] audit: type=1804 audit(2000000336.949:685): pid=15001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir802247763/syzkaller.lm6cV1/44/file1" dev="sda1" ino=1977 res=1 errno=0 [ 518.955022][ T26] audit: type=1804 audit(2000000336.949:686): pid=14998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir802247763/syzkaller.lm6cV1/44/file1" dev="sda1" ino=1977 res=1 errno=0 [ 519.130693][T15043] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 519.308277][T15052] loop2: detected capacity change from 0 to 512 [ 519.327486][T15052] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 519.384014][T15052] EXT4-fs (loop2): 1 truncate cleaned up [ 519.400514][T15052] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 519.461806][T11640] EXT4-fs (loop2): unmounting filesystem. [ 520.858524][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 521.249914][T15085] loop2: detected capacity change from 0 to 2048 [ 521.273725][T15085] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 521.292935][T15085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.995163][T15089] loop3: detected capacity change from 0 to 32768 [ 522.034776][T15089] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (15089) [ 522.057334][T15089] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 522.082718][T15103] device syzkaller0 entered promiscuous mode [ 522.089105][T15089] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 522.089197][T15089] BTRFS info (device loop3): using free space tree [ 522.253158][T15089] BTRFS info (device loop3): enabling ssd optimizations [ 522.353050][ T26] audit: type=1326 audit(2000000340.429:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c667cee9 code=0x7ffc0000 [ 522.431604][ T26] audit: type=1326 audit(2000000340.429:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76c667cee9 code=0x7ffc0000 [ 522.455875][T14102] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 522.510849][ T26] audit: type=1326 audit(2000000340.429:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c667cee9 code=0x7ffc0000 [ 522.572145][ T26] audit: type=1326 audit(2000000340.429:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76c667cee9 code=0x7ffc0000 [ 522.653951][ T26] audit: type=1326 audit(2000000340.469:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76c667cee9 code=0x7ffc0000 [ 522.734765][ T26] audit: type=1326 audit(2000000340.489:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76c667a667 code=0x7ffc0000 [ 522.792258][ T26] audit: type=1326 audit(2000000340.489:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76c6640329 code=0x7ffc0000 [ 522.860325][ T26] audit: type=1326 audit(2000000340.489:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76c667a667 code=0x7ffc0000 [ 522.936943][ T26] audit: type=1326 audit(2000000340.489:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76c6640329 code=0x7ffc0000 [ 522.987782][ T26] audit: type=1326 audit(2000000340.489:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15132 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76c667a667 code=0x7ffc0000 [ 523.289076][T15165] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 523.312643][T15165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.320805][T15165] IPv6: NLM_F_CREATE should be set when creating new route [ 523.328092][T15165] IPv6: NLM_F_CREATE should be set when creating new route [ 523.488461][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 523.677581][T15180] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 523.715020][T15180] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 523.747046][T15180] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 523.780487][T15180] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 523.811414][T15180] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 523.848261][T15157] loop2: detected capacity change from 0 to 32768 [ 523.867353][T15157] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (15157) [ 523.925663][T15157] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 523.961149][T15157] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 523.981096][T15157] BTRFS info (device loop2): using free space tree [ 524.143458][T15157] BTRFS info (device loop2): enabling ssd optimizations [ 524.278111][T11640] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 524.641990][T15227] input: syz1 as /devices/virtual/input/input13 [ 524.680490][T15228] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 524.726681][T15228] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 524.767943][T15230] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 524.806160][T15233] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 524.967838][ T6611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.982176][ T9890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.987156][ T6611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.994852][ T9890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.023646][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.071735][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.133865][ T6611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.142831][ T6611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.152165][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.469571][T15260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 525.575426][ T3614] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 525.646719][T15266] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 525.714041][T15266] lo speed is unknown, defaulting to 1000 [ 525.826821][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.840457][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.887819][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 526.115084][ T3614] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 526.128696][ T3614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.150543][ T3614] usb 3-1: Product: syz [ 526.161621][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 526.172203][ T3614] usb 3-1: Manufacturer: syz [ 526.181622][ T3614] usb 3-1: SerialNumber: syz [ 526.198424][ T3614] usb 3-1: config 0 descriptor?? [ 526.371923][T15287] loop3: detected capacity change from 0 to 1024 [ 526.460962][ T3614] usb 3-1: USB disconnect, device number 7 [ 526.618195][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 526.637488][T15294] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 526.725726][T15294] lo speed is unknown, defaulting to 1000 [ 527.383650][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 527.383665][ T26] audit: type=1800 audit(2000000345.459:756): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 527.527852][ T9890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.543916][ T9890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.568364][ T3616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 527.620427][T15325] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 527.699885][T15325] lo speed is unknown, defaulting to 1000 [ 527.982785][T15341] loop3: detected capacity change from 0 to 1764 [ 528.564539][ T3616] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 528.750412][ T26] audit: type=1800 audit(2000000346.829:757): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1977 res=0 errno=0 [ 528.845317][ T26] audit: type=1800 audit(2000000346.879:758): pid=15303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1977 res=0 errno=0 [ 528.880790][T15361] loop2: detected capacity change from 0 to 8192 [ 528.904920][T15361] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 529.086681][ T3585] Bluetooth: hci6: command 0x0406 tx timeout [ 530.469869][T15396] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 530.554941][ T3616] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 530.576888][T15396] lo speed is unknown, defaulting to 1000 [ 530.586040][ T3616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.623614][ T3616] usb 4-1: Product: syz [ 530.631275][ T3616] usb 4-1: Manufacturer: syz [ 530.647826][ T3616] usb 4-1: SerialNumber: syz [ 530.670035][ T26] audit: type=1800 audit(2000000348.749:759): pid=15406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1940 res=0 errno=0 [ 530.672809][ T3616] usb 4-1: config 0 descriptor?? [ 531.047718][ T3616] usb 4-1: USB disconnect, device number 11 [ 531.050447][T15413] overlayfs: failed to clone upperpath [ 532.334623][ T3614] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 532.868031][ T3614] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 532.887623][ T3614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.912992][ T3614] usb 3-1: Product: syz [ 533.727662][ T3614] usb 3-1: Manufacturer: syz [ 533.732327][ T3614] usb 3-1: SerialNumber: syz [ 533.782615][ T3614] usb 3-1: config 0 descriptor?? [ 534.057286][ T3793] usb 3-1: USB disconnect, device number 8 [ 534.192398][ T26] audit: type=1804 audit(2000000352.269:760): pid=15434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir802247763/syzkaller.lm6cV1/81/bus/bus" dev="overlay" ino=1981 res=1 errno=0 [ 534.581499][T15481] validate_nla: 8 callbacks suppressed [ 534.581516][T15481] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 535.238245][T15498] loop2: detected capacity change from 0 to 4096 [ 535.277037][T15498] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 535.390076][ T26] audit: type=1800 audit(2000000353.469:761): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 535.472163][ T26] audit: type=1800 audit(2000000353.499:762): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 535.583167][ T26] audit: type=1800 audit(2000000353.519:763): pid=15499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 535.642250][ T26] audit: type=1800 audit(2000000353.519:764): pid=15499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 535.733860][ T26] audit: type=1800 audit(2000000353.519:765): pid=15498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 535.785860][ T26] audit: type=1800 audit(2000000353.529:766): pid=15498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 536.035203][T15528] loop3: detected capacity change from 0 to 256 [ 536.224663][ T3616] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 536.764913][ T3616] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 536.774013][ T3616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.795420][ T3616] usb 3-1: Product: syz [ 536.799633][ T3616] usb 3-1: Manufacturer: syz [ 536.804255][ T3616] usb 3-1: SerialNumber: syz [ 536.876780][ T3616] usb 3-1: config 0 descriptor?? [ 536.985469][T15561] loop3: detected capacity change from 0 to 1024 [ 537.062672][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd3f400: rx timeout, send abort [ 537.138683][T15563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 537.158325][ T3616] usb 3-1: USB disconnect, device number 9 [ 537.188069][ T4137] hfsplus: b-tree write err: -5, ino 4 [ 537.414317][T15573] batman_adv: batadv0: Adding interface: gretap1 [ 537.422475][T15573] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.451162][T15573] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 537.476660][T15577] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 537.573395][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805dd3f400: abort rx timeout. Force session deactivation [ 537.991970][ T3614] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 538.035026][ T3790] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 538.109842][T15604] batman_adv: batadv0: Adding interface: gretap1 [ 538.124584][T15604] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.164623][T15604] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 538.259745][ T26] audit: type=1800 audit(2000000356.339:767): pid=15603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1971 res=0 errno=0 [ 538.289333][ T26] audit: type=1800 audit(2000000356.359:768): pid=15603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1971 res=0 errno=0 [ 538.355221][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.371286][T15608] loop2: detected capacity change from 0 to 2048 [ 538.378285][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.388709][ T3614] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 538.400812][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.428334][ T3614] usb 4-1: config 0 descriptor?? [ 538.429077][T15610] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 538.564914][ T3790] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 538.580769][ T3790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.605407][ T3790] usb 1-1: Product: syz [ 538.618816][ T3790] usb 1-1: Manufacturer: syz [ 538.623829][ T3790] usb 1-1: SerialNumber: syz [ 538.642803][ T3790] usb 1-1: config 0 descriptor?? [ 538.842493][T15618] loop2: detected capacity change from 0 to 24 [ 538.947621][ T4843] usb 1-1: USB disconnect, device number 7 [ 539.217143][T15633] sctp: [Deprecated]: syz-executor.2 (pid 15633) Use of int in max_burst socket option deprecated. [ 539.217143][T15633] Use struct sctp_assoc_value instead [ 539.308239][T15637] loop2: detected capacity change from 0 to 512 [ 539.346731][ T3614] hid-led 0003:27B8:01ED.000A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 539.361637][T15637] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #16: comm syz-executor.2: casefold flag without casefold feature [ 539.391429][T15637] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #3: comm syz-executor.2: corrupted inode contents [ 539.423514][ T3614] hid-led 0003:27B8:01ED.000A: ThingM blink(1) initialized [ 539.430841][T15637] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #3: comm syz-executor.2: mark_inode_dirty error [ 539.464638][T15637] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 64: padding at end of block bitmap is not set [ 539.499525][T15637] Quota error (device loop2): write_blk: dquota write failed [ 539.510636][T15637] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 539.521160][T15637] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz-executor.2: Failed to acquire dquot type 0 [ 539.557739][T15644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 539.570712][ T3614] usb 4-1: USB disconnect, device number 12 [ 539.581492][T15637] EXT4-fs (loop2): 1 truncate cleaned up [ 539.594737][T15637] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 539.616467][T15637] ext4 filesystem being mounted at /root/syzkaller-testdir1472406359/syzkaller.m6XNR8/276/file1 supports timestamps until 2038 (0x7fffffff) [ 539.746570][T11640] EXT4-fs (loop2): unmounting filesystem. [ 539.828368][T15654] loop2: detected capacity change from 0 to 512 [ 539.854708][T15654] EXT4-fs: Ignoring removed orlov option [ 539.861033][T15654] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 539.893668][T15654] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 539.915577][T15654] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 2683928664 (level 1) [ 539.944384][T15654] EXT4-fs (loop2): 1 truncate cleaned up [ 539.964689][T15654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 539.998810][T15665] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 540.028199][T15665] device bond1 entered promiscuous mode [ 540.042026][T15665] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 540.057639][T15654] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 540.064718][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 540.080378][T15665] bond1 (unregistering): Released all slaves [ 540.110471][T11640] EXT4-fs error (device loop2): htree_dirblock_to_tree:1111: inode #2: block 13: comm syz-executor.2: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 540.192263][T11640] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz-executor.2: Invalid block bitmap block 3 in block_group 0 [ 540.229396][T11640] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6171: Corrupt filesystem [ 540.258879][T11640] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 540.309835][T11640] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 540.562802][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d97000: rx timeout, send abort [ 540.629110][T11640] EXT4-fs (loop2): unmounting filesystem. [ 540.853390][ T26] audit: type=1800 audit(2000000358.929:769): pid=15650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 540.984975][ T3570] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 541.071089][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d97000: abort rx timeout. Force session deactivation [ 541.365143][ T3570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.398197][ T47] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 541.406259][ T3570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.420343][ T47] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 541.429762][ T47] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 541.440583][ T3570] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 541.440701][ T47] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 541.463405][ T47] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 541.471073][ T47] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 541.504747][ T3570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.517155][T15689] loop3: detected capacity change from 0 to 32768 [ 541.552184][T15703] lo speed is unknown, defaulting to 1000 [ 541.556564][ T3570] usb 1-1: config 0 descriptor?? [ 541.618013][T15689] XFS (loop3): Mounting V5 Filesystem [ 541.760626][T15689] XFS (loop3): Ending clean mount [ 541.770827][T15689] XFS (loop3): Quotacheck needed: Please wait. [ 541.868952][T15689] XFS (loop3): Quotacheck: Done. [ 541.896388][T15703] chnl_net:caif_netlink_parms(): no params data found [ 541.978436][ T26] audit: type=1800 audit(2000000360.059:770): pid=15725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1953 res=0 errno=0 [ 542.010813][ T26] audit: type=1800 audit(2000000360.059:771): pid=15725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1953 res=0 errno=0 [ 542.180123][T15703] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.195495][T15703] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.216843][T15703] device bridge_slave_0 entered promiscuous mode [ 542.247526][T15703] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.267207][T15703] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.286882][T15703] device bridge_slave_1 entered promiscuous mode [ 542.320734][T14102] XFS (loop3): Unmounting Filesystem [ 542.369095][T15703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.421199][T15703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.490003][ T3570] hid-led 0003:27B8:01ED.000B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 542.528355][ T3570] hid-led 0003:27B8:01ED.000B: ThingM blink(1) initialized [ 542.530060][T15703] team0: Port device team_slave_0 added [ 542.582266][T15703] team0: Port device team_slave_1 added [ 542.644693][T15703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.659877][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.718459][ T4843] usb 1-1: USB disconnect, device number 8 [ 542.744914][T15703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.782531][T15703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.810712][T15703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.852910][T15703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.949128][T15703] device hsr_slave_0 entered promiscuous mode [ 542.969654][T15703] device hsr_slave_1 entered promiscuous mode [ 542.996512][T15703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.009048][T15703] Cannot create hsr debugfs directory [ 543.051415][T15753] tmpfs: Bad value for 'huge' [ 543.380111][T15703] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.545119][ T47] Bluetooth: hci6: command tx timeout [ 543.562738][T15703] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.709701][T15703] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.829064][T15703] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.172267][T15703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 544.224257][T15703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 544.255801][T15703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 544.277635][T15703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 544.562920][T15703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.609198][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 544.648441][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 544.664290][T15703] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.691940][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 544.705737][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 544.728704][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.735950][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.768698][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 544.787761][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 544.789223][ T26] audit: type=1800 audit(2000000362.869:772): pid=15785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 544.806831][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 544.865482][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.872704][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.900790][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 544.930620][T15787] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 544.952918][T15779] loop3: detected capacity change from 0 to 32768 [ 544.983132][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 545.004035][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 545.034060][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 545.046967][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 545.056021][ T3943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 545.072536][T15703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.099770][T15703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.135251][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 545.143364][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 545.158614][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 545.169443][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 545.180610][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 545.196444][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 545.624694][ T47] Bluetooth: hci6: command tx timeout [ 545.760057][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.774931][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.794888][T15703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.862531][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 545.887646][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 545.969617][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 545.982120][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 546.012587][T15703] device veth0_vlan entered promiscuous mode [ 546.024350][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 546.033324][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 546.057583][T15703] device veth1_vlan entered promiscuous mode [ 546.112454][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 546.126572][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 546.143705][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 546.165496][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 546.193753][T15703] device veth0_macvtap entered promiscuous mode [ 546.226315][T15703] device veth1_macvtap entered promiscuous mode [ 546.291772][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.316549][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.349121][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.381543][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.411007][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.430854][T15825] input: syz1 as /devices/virtual/input/input14 [ 546.437245][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.437267][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.514835][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.537305][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.564112][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.587637][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.611439][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.654992][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.694734][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.725099][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.746281][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.761284][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.784703][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.816768][T15703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.834556][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 546.842902][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 546.874813][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 546.885469][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 546.937089][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.954648][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.974298][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.987260][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.997258][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.017295][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.028202][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.039799][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.068344][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.081638][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.118152][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.155797][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.181131][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.225153][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.249688][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.284746][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.324777][T15703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.357176][T15703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.393964][T15703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.409558][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 547.423022][ T3790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 547.463483][T15703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.524248][T15703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.543308][T15703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.562537][T15703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.704607][ T47] Bluetooth: hci6: command tx timeout [ 547.870505][ T47] Bluetooth: hci3: Malformed LE Event: 0x0d [ 547.901092][ T3974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.927573][ T3974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.035182][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 548.059016][ T5783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.085766][ T5783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.093550][ T26] audit: type=1800 audit(2000000366.169:773): pid=15835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 548.152404][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 548.244423][T15869] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 548.257285][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 548.298264][T15871] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 548.460715][T15877] loop2: detected capacity change from 0 to 2048 [ 548.776196][T15885] loop3: detected capacity change from 0 to 4096 [ 549.141929][ T26] audit: type=1326 audit(2000000367.219:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498847cee9 code=0x7ffc0000 [ 549.219914][ T26] audit: type=1326 audit(2000000367.219:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f498847cee9 code=0x7ffc0000 [ 549.289364][ T26] audit: type=1326 audit(2000000367.219:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498847cee9 code=0x7ffc0000 [ 549.344723][ T26] audit: type=1326 audit(2000000367.229:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f498847cee9 code=0x7ffc0000 [ 549.392495][ T26] audit: type=1326 audit(2000000367.269:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f498847cee9 code=0x7ffc0000 [ 549.440650][ T26] audit: type=1326 audit(2000000367.279:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f498847a667 code=0x7ffc0000 [ 549.486165][ T26] audit: type=1326 audit(2000000367.279:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4988440329 code=0x7ffc0000 [ 549.570931][ T26] audit: type=1326 audit(2000000367.279:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f498847a667 code=0x7ffc0000 [ 549.784985][ T47] Bluetooth: hci6: command tx timeout [ 549.795153][ T26] kauditd_printk_skb: 183 callbacks suppressed [ 549.795169][ T26] audit: type=1326 audit(2000000367.879:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f498847cee9 code=0x7ffc0000 [ 549.855441][T15895] loop2: detected capacity change from 0 to 32768 [ 549.909646][ T26] audit: type=1326 audit(2000000367.929:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f498847cee9 code=0x7ffc0000 [ 549.980990][T15895] read_mapping_page failed! [ 549.994156][ T26] audit: type=1326 audit(2000000367.929:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f498847a667 code=0x7ffc0000 [ 549.997456][T15895] ERROR: (device loop2): txCommit: [ 549.997456][T15895] [ 550.094408][ T26] audit: type=1326 audit(2000000367.929:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4988440329 code=0x7ffc0000 [ 550.147909][ T26] audit: type=1326 audit(2000000367.929:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f498847cee9 code=0x7ffc0000 [ 550.211033][ T26] audit: type=1326 audit(2000000367.929:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f498847a667 code=0x7ffc0000 [ 550.250271][ T26] audit: type=1326 audit(2000000367.929:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4988440329 code=0x7ffc0000 [ 550.306551][ T26] audit: type=1326 audit(2000000367.929:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f498847cee9 code=0x7ffc0000 [ 550.374698][ T26] audit: type=1326 audit(2000000367.939:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f498847a667 code=0x7ffc0000 [ 550.452291][ T26] audit: type=1326 audit(2000000367.939:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15902 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4988440329 code=0x7ffc0000 [ 551.128169][T15948] loop3: detected capacity change from 0 to 128 [ 551.177292][T15948] FAT-fs (loop3): Directory bread(block 160) failed [ 551.202016][T15948] FAT-fs (loop3): Directory bread(block 161) failed [ 551.216046][T15948] FAT-fs (loop3): Directory bread(block 162) failed [ 551.234172][T15948] FAT-fs (loop3): Directory bread(block 163) failed [ 551.274967][T15948] FAT-fs (loop3): Directory bread(block 164) failed [ 551.282240][T15948] FAT-fs (loop3): Directory bread(block 165) failed [ 551.306487][T15948] FAT-fs (loop3): Directory bread(block 166) failed [ 551.313174][T15948] FAT-fs (loop3): Directory bread(block 167) failed [ 551.346267][T15948] FAT-fs (loop3): Directory bread(block 160) failed [ 551.353801][T15948] FAT-fs (loop3): Directory bread(block 161) failed [ 551.896211][T15946] loop2: detected capacity change from 0 to 32768 [ 551.934852][T15946] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (15946) [ 552.005000][T15946] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 552.028429][T15946] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 552.049643][T15946] BTRFS info (device loop2): disabling tree log [ 552.063620][T15946] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 552.101900][T15946] BTRFS info (device loop2): trying to use backup root at mount time [ 552.142180][T15946] BTRFS info (device loop2): setting nodatacow, compression disabled [ 552.162316][T15946] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 552.189708][T15946] BTRFS info (device loop2): use lzo compression, level 0 [ 552.234576][T15946] BTRFS info (device loop2): using free space tree [ 552.357850][T15946] BTRFS info (device loop2): enabling ssd optimizations [ 552.460356][T15703] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 552.590876][T16030] xt_policy: output policy not valid in PREROUTING and INPUT [ 552.718776][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 552.807554][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 553.252182][T16051] loop2: detected capacity change from 0 to 2048 [ 553.343515][T16051] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 553.374973][T16051] ext4 filesystem being mounted at /root/syzkaller-testdir2680962564/syzkaller.cUB5uT/10/file0 supports timestamps until 2038 (0x7fffffff) [ 553.463968][T16039] loop3: detected capacity change from 0 to 32768 [ 553.472919][T16039] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (16039) [ 553.488153][T16039] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 553.490563][T16051] fs-verity: sha256 using implementation "sha256-avx2" [ 553.498650][T16039] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 553.542581][T16039] BTRFS info (device loop3): using free space tree [ 553.688822][T16039] BTRFS info (device loop3): enabling ssd optimizations [ 553.806514][T15703] EXT4-fs (loop2): unmounting filesystem. [ 553.923301][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 553.927175][T14102] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 554.239055][T16097] 9pnet_virtio: no channels available for device syz [ 554.641837][T16103] fscrypt (sda1, inode 1976): Unsupported encryption flags (0x10) [ 554.977968][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 555.436018][ T26] kauditd_printk_skb: 142 callbacks suppressed [ 555.436036][ T26] audit: type=1800 audit(2000000373.519:1117): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 555.479012][T16131] loop3: detected capacity change from 0 to 64 [ 555.514766][ T26] audit: type=1800 audit(2000000373.549:1118): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 555.594640][ T26] audit: type=1804 audit(2000000373.629:1119): pid=16132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="bus" dev="sda1" ino=1969 res=1 errno=0 [ 555.949772][ T26] audit: type=1800 audit(2000000374.029:1120): pid=16132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 556.273620][T16115] overlayfs: failed to clone upperpath [ 556.677632][T16167] loop3: detected capacity change from 0 to 128 [ 556.723890][T16167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 556.747650][T16167] ext4 filesystem being mounted at /root/syzkaller-testdir1895055291/syzkaller.iVKAc5/163/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 556.858888][T16167] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 556.952105][T14102] EXT4-fs (loop3): unmounting filesystem. [ 557.308882][T16189] loop3: detected capacity change from 0 to 64 [ 557.362034][T16189] hfs: get root inode failed [ 557.760058][T16200] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 557.969848][T16161] overlayfs: failed to clone upperpath [ 558.052662][T16173] overlayfs: failed to clone upperpath [ 558.125181][T16204] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 558.268007][T16213] xt_l2tp: missing protocol rule (udp|l2tpip) [ 559.922029][T16230] overlayfs: failed to clone upperpath [ 559.926847][T16279] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 560.032889][T16285] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 560.483133][T16302] smc: net device wg0 applied user defined pnetid SYZ0 [ 560.832589][T16328] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 560.845837][T16328] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 562.844893][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.851380][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.929374][T16381] loop3: detected capacity change from 0 to 32768 [ 564.036006][T16381] XFS (loop3): Mounting V5 Filesystem [ 564.182003][T16381] XFS (loop3): Ending clean mount [ 564.213831][T16381] XFS (loop3): Quotacheck needed: Please wait. [ 564.336104][T16381] XFS (loop3): Quotacheck: Done. [ 564.454687][T14102] XFS (loop3): Unmounting Filesystem [ 566.263306][T16458] loop3: detected capacity change from 0 to 1024 [ 566.969623][T16478] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 567.880670][T16490] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 568.187500][T16504] loop3: detected capacity change from 0 to 1024 [ 568.212010][T16504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 568.276455][T16504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 568.477578][T16516] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 568.614835][T14102] EXT4-fs (loop3): unmounting filesystem. [ 571.393107][T16559] loop3: detected capacity change from 0 to 256 [ 571.444141][T16559] smc: net device wg0 applied user defined pnetid SYZ0 [ 573.014326][T16583] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 573.025161][ T3585] Bluetooth: hci6: unknown advertising packet type: 0x63 [ 574.413012][ T5783] device hsr_slave_0 left promiscuous mode [ 574.485770][ T5783] device hsr_slave_1 left promiscuous mode [ 574.524055][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.594125][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.634835][ T5783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.645027][ T5783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.670486][ T5783] device bridge_slave_1 left promiscuous mode [ 574.684740][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.701499][T16588] loop3: detected capacity change from 0 to 32768 [ 574.716045][ T5783] device bridge_slave_0 left promiscuous mode [ 574.722375][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.755980][ T5783] device veth1_macvtap left promiscuous mode [ 574.768799][ T5783] device veth0_macvtap left promiscuous mode [ 574.781897][ T5783] device veth1_vlan left promiscuous mode [ 574.788129][ T5783] device veth0_vlan left promiscuous mode [ 574.812703][T16588] XFS (loop3): Mounting V5 Filesystem [ 574.955744][T16588] XFS (loop3): Ending clean mount [ 574.991986][T16588] XFS (loop3): Quotacheck needed: Please wait. [ 575.117827][T16588] XFS (loop3): Quotacheck: Done. [ 575.265125][T14102] XFS (loop3): Unmounting Filesystem [ 575.633170][ T5783] team0 (unregistering): Port device team_slave_1 removed [ 575.681726][ T5783] team0 (unregistering): Port device team_slave_0 removed [ 575.718318][ T5783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.761877][ T5783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.931665][ T5783] bond0 (unregistering): Released all slaves [ 576.029799][T16667] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 576.220836][T16677] overlayfs: failed to clone upperpath [ 577.005973][T16714] overlayfs: failed to clone upperpath [ 577.226984][T16731] overlayfs: failed to clone upperpath [ 577.550626][T16747] loop3: detected capacity change from 0 to 256 [ 577.619022][T16747] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 580.509599][T16825] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 581.336516][ T26] audit: type=1804 audit(2000000399.419:1121): pid=16842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2680962564/syzkaller.cUB5uT/76/bus" dev="sda1" ino=1963 res=1 errno=0 [ 581.422750][ T26] audit: type=1804 audit(2000000399.449:1122): pid=16842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2680962564/syzkaller.cUB5uT/76/bus" dev="sda1" ino=1963 res=1 errno=0 [ 581.792463][T16831] syz-executor.3 (16831): drop_caches: 2 [ 581.793808][T16848] overlayfs: failed to resolve './file1': -2 [ 582.072124][ T26] audit: type=1800 audit(2000000400.149:1123): pid=16867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 582.147104][ T26] audit: type=1800 audit(2000000400.189:1124): pid=16867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 582.218694][T16876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 584.086630][T16920] ipt_CLUSTERIP: bad num_local_nodes 27 [ 584.326538][T16935] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 585.207984][T16965] ipt_CLUSTERIP: bad num_local_nodes 27 [ 585.510135][T16949] syz-executor.3 (16949): drop_caches: 2 [ 585.676464][T16980] loop3: detected capacity change from 0 to 512 [ 585.767195][T16980] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 585.800350][T16980] ext4 filesystem being mounted at /root/syzkaller-testdir1895055291/syzkaller.iVKAc5/222/file1 supports timestamps until 2038 (0x7fffffff) [ 586.172959][T14102] EXT4-fs (loop3): unmounting filesystem. [ 586.325692][T17006] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 586.648178][T17019] ALSA: seq fatal error: cannot create timer (-22) [ 586.807122][ T26] audit: type=1800 audit(2000000404.889:1125): pid=17034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1978 res=0 errno=0 [ 586.933196][ T26] audit: type=1800 audit(2000000405.009:1126): pid=17041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1943 res=0 errno=0 [ 586.947979][T17042] loop3: detected capacity change from 0 to 512 [ 586.987020][T17042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 587.052485][T17042] EXT4-fs (loop3): 1 truncate cleaned up [ 587.082340][T17042] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 587.216760][T14102] EXT4-fs (loop3): unmounting filesystem. [ 587.284668][T17058] ALSA: seq fatal error: cannot create timer (-22) [ 587.493066][ T26] audit: type=1800 audit(2000000405.569:1127): pid=17068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="overlay" ino=1984 res=0 errno=0 [ 587.652436][T17081] loop3: detected capacity change from 0 to 256 [ 587.705316][T17081] FAT-fs (loop3): Directory bread(block 64) failed [ 587.728047][T17081] FAT-fs (loop3): Directory bread(block 65) failed [ 587.748960][T17078] overlayfs: failed to clone upperpath [ 587.754044][T17081] FAT-fs (loop3): Directory bread(block 66) failed [ 587.772298][T17081] FAT-fs (loop3): Directory bread(block 67) failed [ 587.799447][T17081] FAT-fs (loop3): Directory bread(block 68) failed [ 587.823282][T17081] FAT-fs (loop3): Directory bread(block 69) failed [ 587.854798][T17081] FAT-fs (loop3): Directory bread(block 70) failed [ 587.861440][T17081] FAT-fs (loop3): Directory bread(block 71) failed [ 587.900971][T17081] FAT-fs (loop3): Directory bread(block 72) failed [ 587.925761][T17081] FAT-fs (loop3): Directory bread(block 73) failed [ 588.034098][T17081] FAT-fs (loop3): Filesystem has been set read-only [ 588.062840][ T26] audit: type=1800 audit(2000000406.139:1128): pid=17081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="cpu.stat" dev="loop3" ino=1048698 res=0 errno=0 [ 588.067765][T17081] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006c61) [ 588.204933][T17102] ALSA: seq fatal error: cannot create timer (-22) [ 588.216451][ T26] audit: type=1800 audit(2000000406.299:1129): pid=17105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="overlay" ino=1985 res=0 errno=0 [ 588.451045][T17118] input: syz1 as /devices/virtual/input/input16 [ 588.620230][T17127] loop3: detected capacity change from 0 to 512 [ 588.670194][T17130] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 588.704128][T17127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 588.713440][T17127] ext4 filesystem being mounted at /root/syzkaller-testdir1895055291/syzkaller.iVKAc5/233/bus supports timestamps until 2038 (0x7fffffff) [ 588.740255][ T26] audit: type=1800 audit(2000000406.819:1130): pid=17127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 588.865498][T14102] EXT4-fs (loop3): unmounting filesystem. [ 589.015534][T17139] overlayfs: failed to clone upperpath [ 589.032839][ T26] audit: type=1800 audit(2000000407.109:1131): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1957 res=0 errno=0 [ 589.234909][T17145] ALSA: seq fatal error: cannot create timer (-22) [ 589.618173][T17162] loop3: detected capacity change from 0 to 512 [ 589.668565][T17162] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 589.683679][T17162] ext4 filesystem being mounted at /root/syzkaller-testdir1895055291/syzkaller.iVKAc5/238/bus supports timestamps until 2038 (0x7fffffff) [ 589.768186][ T26] audit: type=1800 audit(2000000407.849:1132): pid=17162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 589.843046][T14102] EXT4-fs (loop3): unmounting filesystem. [ 590.240289][ T26] audit: type=1800 audit(2000000408.319:1133): pid=17175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="overlay" ino=1986 res=0 errno=0 [ 592.039426][T17237] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 592.235412][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 592.705942][T17272] loop3: detected capacity change from 0 to 1024 [ 592.766485][T17272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 592.926039][T14102] EXT4-fs (loop3): unmounting filesystem. [ 592.950594][T17284] 9pnet_fd: Insufficient options for proto=fd [ 592.981131][T17284] fuse: Bad value for 'fd' [ 593.847221][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 593.861313][T17313] loop3: detected capacity change from 0 to 256 [ 594.691651][T17345] loop3: detected capacity change from 0 to 1024 [ 594.705837][T17345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 595.422437][T17345] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 595.455965][T17352] device batadv_slave_1 entered promiscuous mode [ 596.268982][T17349] device batadv_slave_1 left promiscuous mode [ 596.458807][T14102] EXT4-fs (loop3): unmounting filesystem. [ 596.658236][T17367] 9pnet_fd: Insufficient options for proto=fd [ 596.677325][T17367] fuse: Bad value for 'fd' [ 596.814669][ T3613] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 597.064692][ T3613] usb 1-1: Using ep0 maxpacket: 16 [ 597.184792][ T3613] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 597.192847][ T3613] usb 1-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 597.241834][ T3613] usb 1-1: config 0 has no interface number 0 [ 597.414947][ T3613] usb 1-1: New USB device found, idVendor=1199, idProduct=c081, bcdDevice=d4.87 [ 597.430783][ T3613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.463280][ T3613] usb 1-1: Product: syz [ 597.482436][ T3613] usb 1-1: Manufacturer: syz [ 597.512286][ T3613] usb 1-1: SerialNumber: syz [ 597.518694][ T3613] usb 1-1: config 0 descriptor?? [ 597.689369][T17400] atomic_op ffff8880615bc998 conn xmit_atomic 0000000000000000 [ 597.795550][ T3613] qmi_wwan 1-1:0.8: bogus CDC Union: master=0, slave=0 [ 597.855056][ T3613] qmi_wwan: probe of 1-1:0.8 failed with error -22 [ 597.882743][ T3613] usb 1-1: USB disconnect, device number 9 [ 598.084380][T17412] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 598.369593][T17428] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.4'. [ 599.834640][ T3613] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 599.852278][T17462] atomic_op ffff88805bf89998 conn xmit_atomic 0000000000000000 [ 600.095868][ T3613] usb 4-1: Using ep0 maxpacket: 16 [ 600.351228][ T3613] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 600.360793][ T3613] usb 4-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 600.371804][ T3613] usb 4-1: config 0 has no interface number 0 [ 600.665227][ T3613] usb 4-1: New USB device found, idVendor=1199, idProduct=c081, bcdDevice=d4.87 [ 600.779290][ T3613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.953483][ T3613] usb 4-1: Product: syz [ 601.254612][ T3613] usb 4-1: Manufacturer: syz [ 601.259284][ T3613] usb 4-1: SerialNumber: syz [ 601.265749][ T3613] usb 4-1: config 0 descriptor?? [ 601.545836][ T3613] qmi_wwan 4-1:0.8: bogus CDC Union: master=0, slave=0 [ 601.732837][ T3613] qmi_wwan: probe of 4-1:0.8 failed with error -22 [ 602.036382][ T3613] usb 4-1: USB disconnect, device number 13 [ 602.143219][T17492] atomic_op ffff88805dea1198 conn xmit_atomic 0000000000000000 [ 602.291439][ T26] audit: type=1800 audit(2000000420.369:1134): pid=17501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1971 res=0 errno=0 [ 602.314985][T17502] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 602.401120][ T26] audit: type=1800 audit(2000000420.479:1135): pid=17508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 603.000756][ T26] audit: type=1800 audit(2000000421.079:1136): pid=17532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1979 res=0 errno=0 [ 603.009869][T17533] netlink: 'syz-executor.3': attribute type 24 has an invalid length. [ 603.496176][T17545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 603.533538][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 603.540630][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 603.547287][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 603.553810][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 603.560444][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.568498][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.576912][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.584971][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.593145][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.601115][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.609160][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.617126][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.625160][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.633088][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.641117][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.649100][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.657133][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.665115][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.673108][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.681078][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.689118][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.697093][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.705108][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.713026][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.721054][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.729207][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.737250][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.745254][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.753247][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.761221][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.769333][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.777282][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 603.785559][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 603.793486][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 604.098215][ T26] audit: type=1800 audit(2000000422.179:1137): pid=17555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1978 res=0 errno=0 [ 604.633643][ T26] audit: type=1800 audit(2000000422.709:1138): pid=17567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 605.005961][T17580] device ip6gretap0 entered promiscuous mode [ 605.025783][T17580] device bridge0 entered promiscuous mode [ 605.052686][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 605.323111][ T26] audit: type=1804 audit(2000000423.399:1139): pid=17602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=1976 res=1 errno=0 [ 605.491544][ T26] audit: type=1800 audit(2000000423.569:1140): pid=17611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1978 res=0 errno=0 [ 606.549834][ T26] audit: type=1804 audit(2000000424.629:1141): pid=17642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=1954 res=1 errno=0 [ 606.602159][T17646] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 606.605876][T17643] loop3: detected capacity change from 0 to 512 [ 606.663065][T17643] EXT4-fs: Ignoring removed orlov option [ 606.686527][T17643] ext4: Unknown parameter 'appraise' [ 607.059942][T17669] loop3: detected capacity change from 0 to 64 [ 608.366861][ T26] audit: type=1804 audit(2000000426.449:1142): pid=17681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir802247763/syzkaller.lm6cV1/229/bus" dev="sda1" ino=1962 res=1 errno=0 [ 608.450488][T17685] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 608.879632][T17700] device ip6gretap0 entered promiscuous mode [ 608.921180][T17700] device bridge0 entered promiscuous mode [ 608.947441][T17700] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 608.965861][T17700] Cannot create hsr debugfs directory [ 608.991673][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 609.159702][T17678] loop3: detected capacity change from 0 to 32768 [ 609.344550][ T3943] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 609.594900][ T3943] usb 1-1: Using ep0 maxpacket: 16 [ 609.715283][ T3943] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 609.764351][ T3943] usb 1-1: config 0 has an invalid descriptor of length 90, skipping remainder of the config [ 610.095290][ T3943] usb 1-1: config 0 has no interface number 0 [ 610.254692][ T3943] usb 1-1: New USB device found, idVendor=1199, idProduct=c081, bcdDevice=d4.87 [ 610.311141][ T3943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.325494][ T3943] usb 1-1: Product: syz [ 610.338799][ T3943] usb 1-1: Manufacturer: syz [ 610.351446][ T3943] usb 1-1: SerialNumber: syz [ 610.377630][ T3943] usb 1-1: config 0 descriptor?? [ 610.651885][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.675640][ T3943] qmi_wwan 1-1:0.8: bogus CDC Union: master=0, slave=0 [ 610.734907][ T3943] qmi_wwan: probe of 1-1:0.8 failed with error -22 [ 610.748500][ T3943] usb 1-1: USB disconnect, device number 10 [ 610.984683][ T3585] Bluetooth: hci7: command 0x0406 tx timeout [ 611.060890][ T47] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 611.138458][ T4137] ------------[ cut here ]------------ [ 611.144761][ T4137] WARNING: CPU: 0 PID: 4137 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.155047][ T4137] Modules linked in: [ 611.158965][ T4137] CPU: 0 PID: 4137 Comm: kworker/u4:10 Not tainted 6.1.92-syzkaller #0 [ 611.167336][ T4137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 611.178196][ T4137] Workqueue: phy56 ieee80211_iface_work 2033/05/18 03:40:29 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 611.184297][ T4137] RIP: 0010:ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.190995][ T4137] Code: f7 c6 05 6e 26 57 04 01 48 c7 c7 10 da fc 8b be fd 01 00 00 48 c7 c2 a0 da fc 8b e8 fc 57 62 f7 e9 7d fe ff ff e8 b2 26 82 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 a1 26 82 f7 0f 0b e9 d9 fa [ 611.210707][ T4137] RSP: 0018:ffffc9000a6ff3d8 EFLAGS: 00010283 [ 611.216915][ T4137] RAX: ffffffff8a08669e RBX: ffff888043ae35b8 RCX: 0000000000040000 [ 611.224955][ T4137] RDX: ffffc90012340000 RSI: 00000000000018bb RDI: 00000000000018bc [ 611.233207][ T4137] RBP: ffff88801af99ad2 R08: dffffc0000000000 R09: fffffbfff209385c [ 611.241541][ T4137] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801af99ad8 [ 611.249658][ T4137] R13: ffff88801af98c80 R14: ffff888043ae0760 R15: ffff88801af99af8 [ 611.257703][ T4137] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 611.266698][ T4137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.273332][ T4137] CR2: 0000001b33127000 CR3: 000000005cd56000 CR4: 00000000003506f0 [ 611.281383][ T4137] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 611.289427][ T4137] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 611.297464][ T4137] Call Trace: [ 611.300772][ T4137] [ 611.303726][ T4137] ? __warn+0x15a/0x520 [ 611.307951][ T4137] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.313809][ T4137] ? report_bug+0x2af/0x500 [ 611.318371][ T4137] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.324280][ T4137] ? handle_bug+0x3d/0x70 [ 611.328877][ T4137] ? exc_invalid_op+0x16/0x40 [ 611.333618][ T4137] ? asm_exc_invalid_op+0x16/0x20 [ 611.338738][ T4137] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.344621][ T4137] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.350593][ T4137] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.356603][ T4137] ieee80211_channel_switch+0x12f9/0x21c0 [ 611.362365][ T4137] ? cfg80211_chandef_create+0x102/0x470 [ 611.368083][ T4137] ? ieee80211_get_channel_khz+0x16f/0x910 [ 611.373927][ T4137] ? ieee80211_csa_finalize+0xc50/0xc50 [ 611.379555][ T4137] ? cfg80211_chandef_usable+0x8f8/0x12c0 [ 611.385367][ T4137] ? cfg80211_chandef_valid+0x951/0xc80 [ 611.390966][ T4137] ? cfg80211_chandef_dfs_required+0x3a1/0x540 [ 611.397209][ T4137] ieee80211_ibss_process_chanswitch+0xba5/0xf80 [ 611.403584][ T4137] ? trace_drv_return_int+0x270/0x270 [ 611.409036][ T4137] ? cfg80211_find_elem_match+0x170/0x1a0 [ 611.414856][ T4137] ? ieee80211_queue_delayed_work+0x160/0x160 [ 611.421059][ T4137] ? mutex_lock_nested+0x10/0x10 [ 611.426064][ T4137] ? validate_chain+0x112/0x5950 [ 611.431044][ T4137] ? mark_lock+0x9a/0x340 [ 611.435449][ T4137] ieee80211_ibss_rx_queued_mgmt+0x1321/0x2dd0 [ 611.441651][ T4137] ? __lock_acquire+0x125b/0x1f80 [ 611.446842][ T4137] ? ieee80211_ibss_rx_no_sta+0x740/0x740 [ 611.452643][ T4137] ? mark_lock+0x9a/0x340 [ 611.457051][ T4137] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 611.463067][ T4137] ? print_irqtrace_events+0x210/0x210 [ 611.468597][ T4137] ? do_raw_spin_unlock+0x137/0x8a0 [ 611.473818][ T4137] ? kcov_remote_start+0x4b5/0x7d0 [ 611.478990][ T4137] ? lockdep_hardirqs_on+0x94/0x130 [ 611.484216][ T4137] ? kcov_remote_start+0x93/0x7d0 [ 611.489303][ T4137] ieee80211_iface_work+0x7aa/0xce0 [ 611.494558][ T4137] ? process_one_work+0x7a9/0x11d0 [ 611.499692][ T4137] process_one_work+0x8a9/0x11d0 [ 611.504691][ T4137] ? worker_detach_from_pool+0x260/0x260 [ 611.510347][ T4137] ? _raw_spin_lock_irqsave+0x120/0x120 [ 611.515942][ T4137] ? kthread_data+0x4e/0xc0 [ 611.520485][ T4137] ? wq_worker_running+0x97/0x190 [ 611.525576][ T4137] worker_thread+0xa47/0x1200 [ 611.530303][ T4137] kthread+0x28d/0x320 [ 611.534389][ T4137] ? worker_clr_flags+0x190/0x190 [ 611.539485][ T4137] ? kthread_blkcg+0xd0/0xd0 [ 611.544098][ T4137] ret_from_fork+0x1f/0x30 [ 611.548588][ T4137] [ 611.551629][ T4137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 611.559350][ T4137] CPU: 0 PID: 4137 Comm: kworker/u4:10 Not tainted 6.1.92-syzkaller #0 [ 611.567604][ T4137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 611.577670][ T4137] Workqueue: phy56 ieee80211_iface_work [ 611.583245][ T4137] Call Trace: [ 611.586529][ T4137] [ 611.589470][ T4137] dump_stack_lvl+0x1e3/0x2cb [ 611.594173][ T4137] ? nf_tcp_handle_invalid+0x642/0x642 [ 611.599661][ T4137] ? panic+0x764/0x764 [ 611.603756][ T4137] ? vscnprintf+0x59/0x80 [ 611.608106][ T4137] panic+0x318/0x764 [ 611.612022][ T4137] ? __warn+0x169/0x520 [ 611.616194][ T4137] ? memcpy_page_flushcache+0xfc/0xfc [ 611.621594][ T4137] ? ret_from_fork+0x1f/0x30 [ 611.626209][ T4137] __warn+0x348/0x520 [ 611.630207][ T4137] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.636035][ T4137] report_bug+0x2af/0x500 [ 611.640388][ T4137] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.646484][ T4137] handle_bug+0x3d/0x70 [ 611.650664][ T4137] exc_invalid_op+0x16/0x40 [ 611.655198][ T4137] asm_exc_invalid_op+0x16/0x20 [ 611.660515][ T4137] RIP: 0010:ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.666948][ T4137] Code: f7 c6 05 6e 26 57 04 01 48 c7 c7 10 da fc 8b be fd 01 00 00 48 c7 c2 a0 da fc 8b e8 fc 57 62 f7 e9 7d fe ff ff e8 b2 26 82 f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 a1 26 82 f7 0f 0b e9 d9 fa [ 611.687967][ T4137] RSP: 0018:ffffc9000a6ff3d8 EFLAGS: 00010283 [ 611.694057][ T4137] RAX: ffffffff8a08669e RBX: ffff888043ae35b8 RCX: 0000000000040000 [ 611.702048][ T4137] RDX: ffffc90012340000 RSI: 00000000000018bb RDI: 00000000000018bc [ 611.710146][ T4137] RBP: ffff88801af99ad2 R08: dffffc0000000000 R09: fffffbfff209385c [ 611.718264][ T4137] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88801af99ad8 [ 611.726259][ T4137] R13: ffff88801af98c80 R14: ffff888043ae0760 R15: ffff88801af99af8 [ 611.734258][ T4137] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.740527][ T4137] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 611.746366][ T4137] ieee80211_channel_switch+0x12f9/0x21c0 [ 611.752104][ T4137] ? cfg80211_chandef_create+0x102/0x470 [ 611.757772][ T4137] ? ieee80211_get_channel_khz+0x16f/0x910 [ 611.763606][ T4137] ? ieee80211_csa_finalize+0xc50/0xc50 [ 611.769173][ T4137] ? cfg80211_chandef_usable+0x8f8/0x12c0 [ 611.774917][ T4137] ? cfg80211_chandef_valid+0x951/0xc80 [ 611.780497][ T4137] ? cfg80211_chandef_dfs_required+0x3a1/0x540 [ 611.786767][ T4137] ieee80211_ibss_process_chanswitch+0xba5/0xf80 [ 611.793118][ T4137] ? trace_drv_return_int+0x270/0x270 [ 611.798519][ T4137] ? cfg80211_find_elem_match+0x170/0x1a0 [ 611.804476][ T4137] ? ieee80211_queue_delayed_work+0x160/0x160 [ 611.810566][ T4137] ? mutex_lock_nested+0x10/0x10 [ 611.815534][ T4137] ? validate_chain+0x112/0x5950 [ 611.820523][ T4137] ? mark_lock+0x9a/0x340 [ 611.824898][ T4137] ieee80211_ibss_rx_queued_mgmt+0x1321/0x2dd0 [ 611.831077][ T4137] ? __lock_acquire+0x125b/0x1f80 [ 611.836145][ T4137] ? ieee80211_ibss_rx_no_sta+0x740/0x740 [ 611.841919][ T4137] ? mark_lock+0x9a/0x340 [ 611.846268][ T4137] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 611.852271][ T4137] ? print_irqtrace_events+0x210/0x210 [ 611.857725][ T4137] ? do_raw_spin_unlock+0x137/0x8a0 [ 611.862930][ T4137] ? kcov_remote_start+0x4b5/0x7d0 [ 611.868042][ T4137] ? lockdep_hardirqs_on+0x94/0x130 [ 611.873337][ T4137] ? kcov_remote_start+0x93/0x7d0 [ 611.878391][ T4137] ieee80211_iface_work+0x7aa/0xce0 [ 611.883582][ T4137] ? process_one_work+0x7a9/0x11d0 [ 611.888694][ T4137] process_one_work+0x8a9/0x11d0 [ 611.893652][ T4137] ? worker_detach_from_pool+0x260/0x260 [ 611.899305][ T4137] ? _raw_spin_lock_irqsave+0x120/0x120 [ 611.904849][ T4137] ? kthread_data+0x4e/0xc0 [ 611.909379][ T4137] ? wq_worker_running+0x97/0x190 [ 611.914425][ T4137] worker_thread+0xa47/0x1200 [ 611.919212][ T4137] kthread+0x28d/0x320 [ 611.923281][ T4137] ? worker_clr_flags+0x190/0x190 [ 611.928302][ T4137] ? kthread_blkcg+0xd0/0xd0 [ 611.932904][ T4137] ret_from_fork+0x1f/0x30 [ 611.937341][ T4137] [ 611.940639][ T4137] Kernel Offset: disabled [ 611.945090][ T4137] Rebooting in 86400 seconds..